Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: cAOraAD7A2UIZZJnI9d09n7Byyt0y92oi/5JB5sa1y8=
Subject key identifier: A7:C8:04:E7:E2:9C:A3:E9:6C:4C:F2:77:7A:91:CA:FB:5C:E6:AB:F9
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019872CF9E5F39E829BD0D666F31E04B5D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:05 +0000
Manifest this update: Mon 04 Aug 2025 02:01:05 +0000
Manifest next update: Tue 05 Aug 2025 02:01:05 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: ZwljUIufTkwpJxcXZnLlF6AL190tmfOSum9FOvZ4mHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:9e:5f:39:e8:29:bd:0d:66:6f:31:e0:4b:5d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Aug 4 02:01:05 2025 GMT
Not After : Aug 5 02:01:05 2025 GMT
Subject: CN=a7c804e7e29ca3e96c4cf2777a91cafb5ce6abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:7e:9e:dd:b7:cc:cb:de:a2:a4:8e:7b:a0:
74:81:9a:96:d0:bf:28:d5:b4:28:6e:1e:fb:75:45:
bf:ad:e4:df:b8:64:8d:60:88:c0:ab:62:66:6c:8f:
16:e5:fc:6f:2b:e1:6b:5a:aa:bc:84:71:85:2f:5d:
96:72:59:1c:62:e4:29:52:85:27:fe:c6:b0:08:1e:
9c:4c:fe:2a:9a:34:70:ab:c2:7c:03:be:8e:c0:70:
0e:7e:11:ca:c2:54:87:53:61:9c:a8:2d:07:2b:c4:
80:72:01:0d:96:14:a4:d4:4c:5b:7b:67:a0:3d:a2:
d4:57:9c:1d:d8:2f:00:2b:d3:7f:11:05:01:e8:4f:
3c:e2:7e:64:f9:73:47:cc:03:10:e6:87:11:70:ef:
d8:d6:c0:b6:d2:b9:1c:07:bd:be:c1:35:ac:79:18:
51:e1:90:15:11:ce:52:66:ac:5c:1a:e3:c6:c6:19:
4d:bf:cc:8c:62:0a:35:34:a8:37:96:b8:38:e4:c1:
ff:2f:96:ec:1c:fa:14:3b:69:76:2b:01:e1:84:1a:
58:dc:80:f9:2e:e5:1a:2d:e1:95:e5:d7:5e:75:3d:
47:85:25:4c:01:4f:e2:54:c2:4d:56:03:b9:41:1f:
0b:27:60:44:38:28:c4:2c:4d:36:22:fb:2c:2e:35:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:04:E7:E2:9C:A3:E9:6C:4C:F2:77:7A:91:CA:FB:5C:E6:AB:F9
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:84:b9:d6:13:f6:39:bc:d4:ee:c6:83:4a:31:d4:c5:43:
fb:73:22:0b:4e:ea:3a:b8:d7:80:26:49:f5:be:c9:9c:86:02:
07:e0:9c:bf:01:fa:8a:01:08:2a:f9:8f:b3:6d:97:0d:d7:a2:
da:bf:2a:42:25:59:8c:aa:b8:4d:06:b5:fe:44:3f:b9:d3:d3:
c8:dc:b4:85:5f:3d:73:0f:a3:e7:4d:ac:e9:39:ec:88:02:26:
b2:64:fa:42:b4:b8:61:b3:4b:f3:15:69:b0:4c:f4:5c:6f:50:
92:8b:cc:9c:b2:4c:d7:85:87:58:bb:33:ea:18:36:19:b9:71:
01:89:33:f8:30:9c:07:cd:a3:36:59:b6:ed:00:26:2e:2e:e7:
c7:43:89:31:6b:93:d2:ba:e9:2e:74:a8:3b:43:0e:d4:02:bd:
f4:df:36:49:92:f3:df:3b:a3:ca:17:79:4a:a1:d9:da:d6:fb:
7c:0e:c6:63:ab:fc:f6:a9:d2:cf:e2:a0:4b:03:f2:d6:21:ff:
6d:30:85:a6:fb:9e:03:0b:33:2a:33:70:0d:46:d6:ab:8b:10:
e1:55:ef:ce:b8:76:25:6b:84:14:4a:c1:c4:ee:37:3e:f3:12:
75:b3:20:c1:37:55:b9:5b:e6:25:a7:05:c5:87:09:94:0d:30:
bf:14:f5:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz55fOegpvQ1mbzHgS11OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YWRkNWJhNzY2MmI3MzFkZDA4YmNmODczOGYxMzVkOTNh
ZWQ0NTEwHhcNMjUwODA0MDIwMTA1WhcNMjUwODA1MDIwMTA1WjAzMTEwLwYDVQQD
EyhhN2M4MDRlN2UyOWNhM2U5NmM0Y2YyNzc3YTkxY2FmYjVjZTZhYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYN+nt23zMveoqSOe6B0gZqW0L8o
1bQobh77dUW/reTfuGSNYIjAq2JmbI8W5fxvK+FrWqq8hHGFL12WclkcYuQpUoUn
/sawCB6cTP4qmjRwq8J8A76OwHAOfhHKwlSHU2GcqC0HK8SAcgENlhSk1Exbe2eg
PaLUV5wd2C8AK9N/EQUB6E884n5k+XNHzAMQ5ocRcO/Y1sC20rkcB72+wTWseRhR
4ZAVEc5SZqxcGuPGxhlNv8yMYgo1NKg3lrg45MH/L5bsHPoUO2l2KwHhhBpY3ID5
LuUaLeGV5ddedT1HhSVMAU/iVMJNVgO5QR8LJ2BEOCjELE02IvssLjWaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfIBOfinKPpbEzyd3qRyvtc5qv5MB8GA1UdIwQY
MBaAFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUt
ZGQ3ZDQ3Y2Y1YzE4LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUtZGQ3ZDQ3Y2Y1YzE4
LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvCEudYT
9jm81O7Gg0ox1MVD+3MiC07qOrjXgCZJ9b7JnIYCB+CcvwH6igEIKvmPs22XDdei
2r8qQiVZjKq4TQa1/kQ/udPTyNy0hV89cw+j502s6TnsiAImsmT6QrS4YbNL8xVp
sEz0XG9QkovMnLJM14WHWLsz6hg2GblxAYkz+DCcB82jNlm27QAmLi7nx0OJMWuT
0rrpLnSoO0MO1AK99N82SZLz3zujyhd5SqHZ2tb7fA7GY6v89qnSz+KgSwPy1iH/
bTCFpvueAwszKjNwDUbWq4sQ4VXvzrh2JWuEFErBxO43PvMSdbMgwTdVuVvmJacF
xYcJlA0wvxT1uA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:18 2025 by rpki-client