Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: 4JqgPBaOSAq5Pp5Z0wTnlxGoxQV6A72uVi7itycrhNM=
Subject key identifier: 7B:34:DE:4B:8E:9B:E3:04:33:BB:5F:B9:EB:2E:2B:35:65:7E:57:2D
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019769611151B02350867B645BB973A9AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 13:00:58 +0000
Manifest this update: Fri 13 Jun 2025 13:00:58 +0000
Manifest next update: Sat 14 Jun 2025 13:00:58 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: 0LaYHVmXky3j+vP7xdYOiIno4qSeMGSE6sxP6tiyAOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:11:51:b0:23:50:86:7b:64:5b:b9:73:a9:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Jun 13 13:00:58 2025 GMT
Not After : Jun 14 13:00:58 2025 GMT
Subject: CN=7b34de4b8e9be30433bb5fb9eb2e2b35657e572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:1a:d1:0a:35:ac:1b:95:ed:f3:b0:45:6f:
00:12:b7:c7:38:06:c4:17:f8:82:6d:57:5a:18:d9:
ba:a4:ee:e5:93:80:77:ca:14:3e:f3:83:40:4e:7b:
95:e6:4f:6d:61:47:cf:7f:00:30:44:8e:90:40:6a:
d6:68:1b:69:32:18:51:f7:f6:3e:7a:d2:cd:07:7e:
cc:93:3f:fb:84:de:96:75:f1:17:76:3c:c3:88:b1:
90:ce:fa:ff:16:1a:3d:4f:82:df:c3:cc:03:70:38:
65:38:a6:d9:0c:cb:d3:50:87:85:f2:e0:32:43:76:
4e:02:47:63:d9:62:08:7f:f8:66:44:70:e0:44:60:
e6:09:09:ea:7a:cd:b1:6e:41:82:19:73:c2:31:1a:
ab:21:f5:2f:c2:51:de:03:10:7f:79:f1:79:d8:ff:
98:53:e0:b8:bc:41:90:8e:f8:0a:a2:a6:a6:82:46:
bd:e7:11:3d:21:c4:6d:01:8a:35:89:e4:87:fe:2e:
4d:fc:1d:bc:9a:99:b7:b7:b1:5c:01:50:55:2a:06:
32:f7:f0:3b:b0:1f:c5:11:6b:94:94:52:6d:fc:47:
50:32:b0:d2:5e:53:51:37:7c:ef:c5:a8:e5:59:cf:
23:c1:95:6a:d8:f0:92:41:f6:5f:15:fa:ec:d6:bc:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:DE:4B:8E:9B:E3:04:33:BB:5F:B9:EB:2E:2B:35:65:7E:57:2D
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9e:9f:1c:03:5b:b7:19:67:3b:c6:b0:e1:63:6f:d6:b6:b8:
50:f3:5a:33:65:f9:71:30:1a:c7:5a:a6:ab:80:6e:9f:9c:a0:
81:9c:cc:ec:78:d7:5d:9b:e0:3c:2a:25:59:72:29:5e:1e:36:
69:ff:5a:eb:7d:6e:45:ee:eb:ea:a1:53:0d:09:f5:a4:fe:b4:
ab:57:69:b7:dc:2d:d3:e1:46:d1:bd:bf:c6:18:be:91:90:71:
21:69:91:86:0d:bb:ad:0e:8a:12:89:99:34:55:94:52:fe:d5:
ef:8a:6b:38:a6:d0:fe:4f:3a:2f:73:99:89:1e:b9:97:72:4c:
45:f7:25:f6:e6:d9:b0:52:be:24:6f:dd:6b:3b:37:0c:06:c3:
24:54:91:3a:da:25:d3:3d:c4:68:24:8e:9c:48:01:4b:a9:72:
ca:ab:13:9a:63:8a:22:34:2f:ab:b0:ba:a4:34:53:f0:a2:ac:
0f:a2:ea:f9:71:8d:49:78:1c:a9:5b:8a:20:b7:cb:f3:b5:20:
cf:e5:9f:aa:1b:e9:b1:8e:1a:db:6b:5f:2e:2c:0d:ff:51:73:
cd:ca:59:a5:e6:c2:c7:75:7f:7b:97:6c:48:31:a7:11:83:ad:
5c:46:47:0f:c2:42:69:37:b6:88:28:d6:72:f9:cc:72:12:53:
01:6a:bd:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYRFRsCNQhntkW7lzqa1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5
NGRmNmUwHhcNMjUwNjEzMTMwMDU4WhcNMjUwNjE0MTMwMDU4WjAzMTEwLwYDVQQD
Eyg3YjM0ZGU0YjhlOWJlMzA0MzNiYjVmYjllYjJlMmIzNTY1N2U1NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprEa0Qo1rBuV7fOwRW8AErfHOAbE
F/iCbVdaGNm6pO7lk4B3yhQ+84NATnuV5k9tYUfPfwAwRI6QQGrWaBtpMhhR9/Y+
etLNB37Mkz/7hN6WdfEXdjzDiLGQzvr/Fho9T4Lfw8wDcDhlOKbZDMvTUIeF8uAy
Q3ZOAkdj2WIIf/hmRHDgRGDmCQnqes2xbkGCGXPCMRqrIfUvwlHeAxB/efF52P+Y
U+C4vEGQjvgKoqamgka95xE9IcRtAYo1ieSH/i5N/B28mpm3t7FcAVBVKgYy9/A7
sB/FEWuUlFJt/EdQMrDSXlNRN3zvxajlWc8jwZVq2PCSQfZfFfrs1rzIhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHs03kuOm+MEM7tfuesuKzVlflctMB8GA1UdIwQY
MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt
YmYxOTFkOWEyYzljLzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj
LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp6fHANb
txlnO8aw4WNv1ra4UPNaM2X5cTAax1qmq4Bun5yggZzM7HjXXZvgPColWXIpXh42
af9a631uRe7r6qFTDQn1pP60q1dpt9wt0+FG0b2/xhi+kZBxIWmRhg27rQ6KEomZ
NFWUUv7V74prOKbQ/k86L3OZiR65l3JMRfcl9ubZsFK+JG/dazs3DAbDJFSROtol
0z3EaCSOnEgBS6lyyqsTmmOKIjQvq7C6pDRT8KKsD6Lq+XGNSXgcqVuKILfL87Ug
z+WfqhvpsY4a22tfLiwN/1FzzcpZpebCx3V/e5dsSDGnEYOtXEZHD8JCaTe2iCjW
cvnMchJTAWq9hg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:47 2025 by rpki-client