Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: Wp0wmTHusPFuBdUJJXnmXPPFwRjRJ2D5RrSaijRRgvU=
Subject key identifier: 3D:AD:A0:A7:85:31:61:3F:33:49:AE:E7:4E:05:E0:6C:92:FA:5D:63
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 01987DF866417783179E4B019E659652DDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 130A
Signing time: Wed 06 Aug 2025 06:01:27 +0000
Manifest this update: Wed 06 Aug 2025 06:01:27 +0000
Manifest next update: Thu 07 Aug 2025 06:01:27 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: pOVw0hxn+c1t9mY8hmJgLkFYo849fIm1ZSuJoTTSHoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:66:41:77:83:17:9e:4b:01:9e:65:96:52:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Aug 6 06:01:27 2025 GMT
Not After : Aug 7 06:01:27 2025 GMT
Subject: CN=3dada0a78531613f3349aee74e05e06c92fa5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:5b:aa:84:a9:a7:8c:a7:48:70:20:ca:ce:
1e:63:37:d9:6e:b9:5a:c9:d6:7f:09:3a:de:ab:45:
3d:1e:80:36:69:99:4d:32:dc:d5:86:a3:86:92:8b:
f4:35:c8:08:4f:26:96:5c:ae:4c:65:e0:81:6b:fd:
ea:fa:e8:e0:cc:cd:59:ba:73:c3:00:18:3a:a1:b4:
83:ac:36:97:23:43:16:06:69:e6:b5:a2:71:db:0c:
e0:8d:a6:e8:19:01:9f:2f:fd:bb:f1:74:e9:0a:13:
10:40:97:9d:2f:64:46:a8:bb:62:b7:a0:5a:46:25:
a5:d4:12:f4:3c:80:83:3f:92:45:62:ef:93:e8:3a:
ae:ce:4f:a5:ca:f3:12:10:36:32:4d:6f:13:cd:68:
c2:f9:2d:ac:32:a1:fc:ff:8d:d3:fa:70:92:d1:42:
27:e0:b4:95:b2:f8:45:09:a0:05:f1:19:6c:e4:6d:
0d:03:07:97:28:d1:4c:b2:7e:c6:d6:b0:df:e5:3c:
0c:6b:a7:a9:b4:d2:a0:75:52:ce:1d:c3:cc:3d:bf:
50:92:a5:2b:49:9c:9e:30:b5:cc:58:59:eb:f7:2d:
bd:65:5c:e1:e6:5e:e9:4f:ab:24:3d:46:0b:af:fb:
b9:26:2b:7a:20:40:ef:1d:d4:6e:94:1c:5c:9a:56:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AD:A0:A7:85:31:61:3F:33:49:AE:E7:4E:05:E0:6C:92:FA:5D:63
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:28:1b:26:1d:da:04:22:e0:99:b4:0a:5f:97:37:d9:79:
89:81:49:e9:d7:db:62:70:70:61:4c:12:c6:65:ea:ae:da:e3:
1f:11:46:ea:3f:ac:c1:02:43:b4:57:72:34:15:bc:34:7e:d3:
70:05:b3:86:aa:40:67:09:e1:c2:e9:c1:ae:4c:8b:d2:a4:a2:
f0:c9:71:dd:2b:23:92:d9:bc:ce:12:01:18:d9:90:4f:cc:7b:
94:a7:60:46:ec:50:d7:4d:e8:4b:2b:1d:fe:29:aa:37:d1:5b:
6d:1d:71:e3:41:4e:50:ba:7f:e7:5a:af:a9:bc:a7:44:03:06:
53:e4:63:72:a4:6e:a9:8c:16:33:8c:b8:ec:fb:b9:90:1b:28:
31:a6:8a:5c:8b:73:23:f6:f6:ee:ba:05:65:25:18:a0:55:c2:
38:6d:96:25:f4:84:38:d9:90:9a:78:a2:6e:94:83:d4:8c:09:
0e:41:b6:3f:86:e0:ab:cb:3f:73:29:1a:df:97:8c:b3:21:71:
2f:3a:27:82:b8:3a:d3:73:4c:c6:15:ba:32:15:7b:84:51:20:
8f:8d:9a:0d:14:43:33:3e:94:8f:c1:23:a3:09:d4:f6:63:d6:
b2:6b:92:4c:7b:f2:b5:fa:f0:dd:2a:08:6c:06:6d:3f:04:13:
4a:7d:c2:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+GZBd4MXnksBnmWWUt2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm
NTc4YjIwHhcNMjUwODA2MDYwMTI3WhcNMjUwODA3MDYwMTI3WjAzMTEwLwYDVQQD
EygzZGFkYTBhNzg1MzE2MTNmMzM0OWFlZTc0ZTA1ZTA2YzkyZmE1ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvRbqoSpp4ynSHAgys4eYzfZbrla
ydZ/CTreq0U9HoA2aZlNMtzVhqOGkov0NcgITyaWXK5MZeCBa/3q+ujgzM1ZunPD
ABg6obSDrDaXI0MWBmnmtaJx2wzgjaboGQGfL/278XTpChMQQJedL2RGqLtit6Ba
RiWl1BL0PICDP5JFYu+T6Dquzk+lyvMSEDYyTW8TzWjC+S2sMqH8/43T+nCS0UIn
4LSVsvhFCaAF8Rls5G0NAweXKNFMsn7G1rDf5TwMa6eptNKgdVLOHcPMPb9QkqUr
SZyeMLXMWFnr9y29ZVzh5l7pT6skPUYLr/u5Jit6IEDvHdRulBxcmlYD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2toKeFMWE/M0mu504F4GyS+l1jMB8GA1UdIwQY
MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt
NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3
LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUwoGyYd
2gQi4Jm0Cl+XN9l5iYFJ6dfbYnBwYUwSxmXqrtrjHxFG6j+swQJDtFdyNBW8NH7T
cAWzhqpAZwnhwunBrkyL0qSi8Mlx3Ssjktm8zhIBGNmQT8x7lKdgRuxQ103oSysd
/imqN9FbbR1x40FOULp/51qvqbynRAMGU+RjcqRuqYwWM4y47Pu5kBsoMaaKXItz
I/b27roFZSUYoFXCOG2WJfSEONmQmniibpSD1IwJDkG2P4bgq8s/cyka35eMsyFx
Lzongrg603NMxhW6MhV7hFEgj42aDRRDMz6Uj8EjownU9mPWsmuSTHvytfrw3SoI
bAZtPwQTSn3CPQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:52 2025 by rpki-client