Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: 0NcqEpyLBu/wqBJkE3kkb9qZIO6q7Rx3k2DyWWSw9G0=
Subject key identifier: E1:A1:2F:A0:B1:69:65:01:BF:31:1A:EB:36:DC:AE:75:77:0C:B9:B7
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01988CFD8EF33B78085AA1713F3084ABADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 11D3
Signing time: Sat 09 Aug 2025 04:01:24 +0000
Manifest this update: Sat 09 Aug 2025 04:01:24 +0000
Manifest next update: Sun 10 Aug 2025 04:01:24 +0000
Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=)
2: 56Vpsd34am-XgZxuiIBx5ciZnvo.roa (hash: LIsLriDuZ7qA8gRRNpqBGuQDOGGc08GwyrJJTUnjn+I=)
3: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
4: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
5: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
7: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=)
8: gDW8r8sGQjgza7ecGOUQHgaDZvk.roa (hash: PRvvxS1NbjtP74Eh1qk8LVgvXDYkqrfyHo9xfSwr0AM=)
9: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: ghjKsYiUIiGOIqhyECgEK78c4Dh7Vg15D42RFnugckQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:8e:f3:3b:78:08:5a:a1:71:3f:30:84:ab:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 9 04:01:24 2025 GMT
Not After : Aug 10 04:01:24 2025 GMT
Subject: CN=e1a12fa0b1696501bf311aeb36dcae75770cb9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:ba:de:f4:c5:1a:3a:36:ef:da:81:d7:77:
36:de:87:69:dd:bb:d0:85:cd:15:b6:ae:8b:7a:29:
62:e5:d6:d3:ed:a0:e6:e0:4f:26:a9:a9:ce:d4:7f:
97:03:b4:76:0b:54:74:96:a7:27:fe:68:1a:b9:1c:
3e:e7:69:06:7f:ec:03:ce:e2:ad:2f:e3:31:70:42:
ce:4b:18:cc:e2:73:69:9f:23:d8:1a:71:47:bb:0a:
9e:5a:7b:5a:cb:a0:bf:94:91:14:9b:10:c0:2b:c5:
06:ef:b0:d1:ce:be:57:00:f2:bc:2f:6a:33:85:58:
4c:08:47:47:ee:bb:d9:ea:75:f5:04:c1:ab:13:0c:
21:5d:66:f2:3b:55:a5:0a:30:f9:a1:53:36:71:09:
f4:37:be:20:22:9f:52:8c:3b:9b:00:ee:f7:ff:9c:
d6:4f:2b:04:da:5c:f3:40:59:33:6c:da:70:90:62:
89:1c:7e:3d:12:01:5f:8c:59:38:d3:46:f9:b6:12:
e3:2c:bb:3e:82:4c:03:c1:e0:79:f1:d6:02:de:a1:
bb:70:7b:ed:db:f4:8c:93:de:ce:ed:fd:7b:ed:bc:
6c:be:56:52:50:d2:2e:60:be:a6:e8:cc:90:78:6d:
a2:95:23:bd:59:c2:bb:b3:4d:9f:18:8c:5a:ac:f3:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A1:2F:A0:B1:69:65:01:BF:31:1A:EB:36:DC:AE:75:77:0C:B9:B7
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5d:14:a9:85:3e:0a:1b:40:7c:5e:b8:21:b6:18:cf:c9:29:
a7:0e:cf:49:6c:06:11:f3:0d:93:7e:7a:be:34:9a:0d:1a:20:
4f:18:64:42:38:5f:3e:51:32:e5:69:57:fb:15:71:36:c5:44:
a0:12:a0:91:38:73:d9:71:40:85:81:64:ff:50:f8:1f:fc:94:
cb:47:50:51:31:c3:0b:de:61:7d:98:2e:80:37:8f:e1:5c:85:
21:1e:a2:c3:66:cf:76:cb:98:7d:70:66:89:76:70:29:47:1f:
b6:85:88:42:4b:61:8e:53:96:58:54:13:c9:a2:1a:bb:1d:07:
23:2e:56:c4:ed:3a:98:c9:51:04:0e:f8:6d:f2:0c:c8:8e:c4:
71:b4:ec:39:72:01:75:1a:3e:b4:e6:b1:cd:79:04:f2:1e:9b:
e0:ac:f9:34:14:3c:46:79:1a:e2:56:55:a0:6a:50:f0:01:9c:
da:bc:1d:6d:7e:8d:9e:c3:a5:81:69:90:9b:64:36:ba:95:e8:
15:fc:54:1f:f5:58:14:2e:20:72:a7:95:11:7a:e0:ce:27:8f:
db:ee:23:57:8e:66:3d:2b:0e:ba:98:f2:ae:10:52:7f:05:f6:
b4:c2:c4:15:de:2a:38:9f:67:a8:32:22:4a:a6:02:ef:f1:99:
4a:c0:fb:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/Y7zO3gIWqFxPzCEq62mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjUwODA5MDQwMTI0WhcNMjUwODEwMDQwMTI0WjAzMTEwLwYDVQQD
EyhlMWExMmZhMGIxNjk2NTAxYmYzMTFhZWIzNmRjYWU3NTc3MGNiOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbG63vTFGjo279qB13c23odp3bvQ
hc0Vtq6Leili5dbT7aDm4E8mqanO1H+XA7R2C1R0lqcn/mgauRw+52kGf+wDzuKt
L+MxcELOSxjM4nNpnyPYGnFHuwqeWntay6C/lJEUmxDAK8UG77DRzr5XAPK8L2oz
hVhMCEdH7rvZ6nX1BMGrEwwhXWbyO1WlCjD5oVM2cQn0N74gIp9SjDubAO73/5zW
TysE2lzzQFkzbNpwkGKJHH49EgFfjFk400b5thLjLLs+gkwDweB58dYC3qG7cHvt
2/SMk97O7f177bxsvlZSUNIuYL6m6MyQeG2ilSO9WcK7s02fGIxarPMBVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGhL6CxaWUBvzEa6zbcrnV3DLm3MB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV0UqYU+
ChtAfF64IbYYz8kppw7PSWwGEfMNk356vjSaDRogTxhkQjhfPlEy5WlX+xVxNsVE
oBKgkThz2XFAhYFk/1D4H/yUy0dQUTHDC95hfZgugDeP4VyFIR6iw2bPdsuYfXBm
iXZwKUcftoWIQkthjlOWWFQTyaIaux0HIy5WxO06mMlRBA74bfIMyI7EcbTsOXIB
dRo+tOaxzXkE8h6b4Kz5NBQ8Rnka4lZVoGpQ8AGc2rwdbX6NnsOlgWmQm2Q2upXo
FfxUH/VYFC4gcqeVEXrgzieP2+4jV45mPSsOupjyrhBSfwX2tMLEFd4qOJ9nqDIi
SqYC7/GZSsD7XQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:44:06 2025 by rpki-client