
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: wdZk171A2MdPqA6oLcA5dAG+s+fT0oiQf38M27dTLfM=
Subject key identifier: EF:63:72:2B:C6:D0:5E:4D:00:EC:D4:80:8A:5B:89:0A:35:DF:C1:3D
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019774C00CC99B06AA925184E2F5CB53DCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 18:00:32 +0000
Manifest this update: Sun 15 Jun 2025 18:00:32 +0000
Manifest next update: Mon 16 Jun 2025 18:00:32 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: 6pIXr1ZEM+aLNaxnjv3gf2IRs4Uyc0ld8yupaQ+aRKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:0c:c9:9b:06:aa:92:51:84:e2:f5:cb:53:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jun 15 18:00:32 2025 GMT
Not After : Jun 16 18:00:32 2025 GMT
Subject: CN=ef63722bc6d05e4d00ecd4808a5b890a35dfc13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:1b:13:7f:46:47:bd:6b:0f:fd:7b:21:77:
6a:bc:64:eb:3f:bc:9c:c6:9e:bc:07:4c:0b:f5:f3:
c1:9b:a4:45:ce:f4:97:bd:70:8c:70:56:59:64:a6:
d9:2f:b2:38:5f:60:87:2b:e7:07:91:9a:a0:f6:fd:
5e:28:44:ed:56:1b:74:44:25:dd:44:10:61:69:4b:
ac:02:58:2a:86:b8:11:f1:f1:42:b9:ad:34:9f:df:
9e:17:8e:1b:85:86:6e:78:9f:d0:eb:a7:48:8a:cd:
b2:f5:c4:f3:7e:d3:9d:21:a8:a3:72:b9:31:1b:77:
17:84:af:0e:76:70:b8:de:13:cb:83:f5:20:e6:bb:
1c:35:09:1d:b9:8e:24:92:36:58:42:e5:4c:bb:9f:
3f:f3:b7:7b:24:76:2d:cf:fd:d2:4d:24:09:95:69:
de:e1:7e:4b:3e:f2:fe:8e:f1:28:d6:5b:ce:ab:b9:
37:12:bf:47:df:70:15:23:5a:bd:29:c3:be:99:ff:
cb:43:03:ed:3f:44:21:ab:08:69:f2:fc:e7:02:c9:
62:a7:ae:af:e5:0e:0f:0b:c2:36:69:bb:7a:e5:79:
38:1f:8d:2e:a4:a2:86:eb:31:d5:f5:6d:fd:41:6d:
af:42:4e:33:d3:d9:ec:1b:09:60:11:1f:ba:3f:fe:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:72:2B:C6:D0:5E:4D:00:EC:D4:80:8A:5B:89:0A:35:DF:C1:3D
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:83:a2:dc:f3:1a:c7:97:97:7b:2e:7d:97:44:d4:07:34:bb:
2e:7a:34:45:93:58:76:52:b0:df:1e:0c:1a:c9:5b:8e:62:aa:
8f:fe:de:7a:d1:86:a5:ee:a2:aa:f4:a3:a3:e4:47:7c:4b:86:
a4:2e:37:85:7a:bd:3a:f1:1c:1e:1b:c1:36:32:4f:73:0c:c8:
3a:4c:6b:80:bf:22:2e:97:54:ae:8d:5e:50:4a:18:c8:b0:28:
ce:4f:49:1e:ba:02:5d:74:bb:be:0f:d1:c9:80:5c:21:f5:2d:
41:2c:57:16:c2:52:79:e2:f7:42:46:ce:eb:4e:6a:09:80:22:
2f:9a:b9:93:8b:01:63:4e:bd:40:50:66:e7:d9:7f:a6:b5:fa:
3e:d1:1b:ae:22:a5:84:b3:1b:c8:7b:71:4a:08:ed:67:10:23:
e1:d6:c5:cb:07:2f:1b:9e:2d:a1:e8:7f:15:3d:84:13:7e:86:
8c:d5:23:dd:2a:62:ec:37:aa:96:8a:da:a1:10:4c:82:03:e9:
27:1a:2d:66:e0:5b:0e:6c:91:29:32:15:55:9b:b1:04:0e:44:
60:c4:d7:fc:98:d3:96:1d:07:d3:0b:ce:ac:8d:9b:50:d8:1d:
f8:0d:17:34:f1:be:1b:07:97:56:2d:b4:34:42:96:76:04:c3:
b6:f4:02:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0wAzJmwaqklGE4vXLU9zxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj
ZTc4MjgwHhcNMjUwNjE1MTgwMDMyWhcNMjUwNjE2MTgwMDMyWjAzMTEwLwYDVQQD
EyhlZjYzNzIyYmM2ZDA1ZTRkMDBlY2Q0ODA4YTViODkwYTM1ZGZjMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhEbE39GR71rD/17IXdqvGTrP7yc
xp68B0wL9fPBm6RFzvSXvXCMcFZZZKbZL7I4X2CHK+cHkZqg9v1eKETtVht0RCXd
RBBhaUusAlgqhrgR8fFCua00n9+eF44bhYZueJ/Q66dIis2y9cTzftOdIaijcrkx
G3cXhK8OdnC43hPLg/Ug5rscNQkduY4kkjZYQuVMu58/87d7JHYtz/3STSQJlWne
4X5LPvL+jvEo1lvOq7k3Er9H33AVI1q9KcO+mf/LQwPtP0Qhqwhp8vznAslip66v
5Q4PC8I2abt65Xk4H40upKKG6zHV9W39QW2vQk4z09nsGwlgER+6P/5tEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9jcivG0F5NAOzUgIpbiQo138E9MB8GA1UdIwQY
MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt
ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi
LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioOi3PMa
x5eXey59l0TUBzS7Lno0RZNYdlKw3x4MGslbjmKqj/7eetGGpe6iqvSjo+RHfEuG
pC43hXq9OvEcHhvBNjJPcwzIOkxrgL8iLpdUro1eUEoYyLAozk9JHroCXXS7vg/R
yYBcIfUtQSxXFsJSeeL3QkbO605qCYAiL5q5k4sBY069QFBm59l/prX6PtEbriKl
hLMbyHtxSgjtZxAj4dbFywcvG54toeh/FT2EE36GjNUj3Spi7DeqloraoRBMggPp
JxotZuBbDmyRKTIVVZuxBA5EYMTX/JjTlh0H0wvOrI2bUNgd+A0XNPG+GweXVi20
NEKWdgTDtvQC6A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:20 2025 by rpki-client