Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: AOKaQonnK9CqxP1kKii700P87bULWIASxQOCrtwyMnE=
Subject key identifier: 6E:2A:53:CB:D2:34:69:DF:5A:B8:9F:0E:DF:75:75:A0:49:CC:15:1F
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 01976A05B81BCFC7389DA762F56E6A1871D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 16:00:49 +0000
Manifest this update: Fri 13 Jun 2025 16:00:49 +0000
Manifest next update: Sat 14 Jun 2025 16:00:49 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: 9Kew52c6QM4boTmrvjVBweDK+1ebKa5Cs6WAjtCKOEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:b8:1b:cf:c7:38:9d:a7:62:f5:6e:6a:18:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jun 13 16:00:49 2025 GMT
Not After : Jun 14 16:00:49 2025 GMT
Subject: CN=6e2a53cbd23469df5ab89f0edf7575a049cc151f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:f8:81:19:d5:03:e8:92:1a:76:23:c6:47:
8f:19:66:43:5b:28:6d:eb:89:f1:d4:60:ec:7e:f5:
2d:ee:40:29:d7:fb:46:ce:fc:75:d7:86:13:d5:26:
0a:a5:42:70:94:58:28:e0:ee:27:df:f2:d1:a9:dc:
ed:aa:5f:57:29:84:2c:c4:0f:4e:78:89:a8:96:40:
57:71:15:d0:3c:25:17:0c:db:49:f4:80:88:3c:b5:
15:a8:95:9d:1f:7b:01:b1:7c:a5:5a:16:a7:e5:7b:
f7:48:57:31:5d:a7:ef:3b:54:3a:aa:4c:97:43:1b:
56:0c:29:af:62:dc:f3:04:43:40:23:81:b9:39:44:
28:21:40:e2:1b:63:f1:2c:f9:de:64:74:55:5d:35:
d7:6d:81:e0:22:b0:b6:1a:34:cd:08:e0:e1:7e:26:
30:25:48:36:fd:35:61:7d:ff:46:a9:f7:55:47:66:
d1:36:35:15:67:dc:d2:64:de:0f:ac:15:95:ca:bc:
5d:b6:bf:fb:e0:cb:49:57:54:55:fc:e1:88:71:1b:
38:1c:c3:2e:42:c1:d0:89:cb:f5:24:49:9e:c1:72:
65:69:a0:22:55:c4:10:59:c5:11:86:b6:63:f8:a8:
d8:6d:8b:a7:99:b1:97:b2:be:88:a2:a2:2d:2b:1d:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:53:CB:D2:34:69:DF:5A:B8:9F:0E:DF:75:75:A0:49:CC:15:1F
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:15:d9:21:a8:78:2d:32:f7:64:3d:d5:c1:1b:4d:a4:25:
07:f8:ac:0c:82:ae:f1:8a:7c:de:01:24:70:2c:09:e4:dc:98:
44:e5:c0:fe:21:22:51:d4:62:de:8a:08:a5:4f:06:18:7d:c3:
8f:34:02:bc:6d:9e:f5:48:d4:37:b4:b2:5b:bd:7d:7d:b3:2c:
87:52:47:db:a4:6a:f0:ba:56:54:b0:bf:b1:22:8f:43:24:70:
d4:3f:8d:0c:ea:db:21:34:24:19:32:0c:c5:0e:0f:3d:68:c1:
e7:ff:1b:8b:ab:15:9f:4e:17:e1:32:1a:27:c3:2c:58:48:49:
20:fc:41:27:39:ba:df:ac:0d:bd:4d:b0:5b:17:c5:c3:48:88:
81:82:6d:e6:be:7a:14:d5:a2:91:72:7c:92:fd:77:80:3c:08:
07:10:ff:56:0e:41:c9:36:1b:95:dc:6f:43:da:78:d5:d0:d9:
2f:da:6d:ab:6c:9f:28:33:83:42:4a:30:ba:19:f4:01:9f:ee:
93:2d:99:46:d0:fa:e0:68:4a:74:54:8f:d6:79:57:2b:58:23:
65:63:8e:85:23:b0:96:97:50:5d:c8:a3:17:ad:5e:48:48:e6:
2e:65:ba:f5:4e:d3:ee:bc:20:07:b1:1b:43:d7:6b:e6:04:36:
42:32:05:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBbgbz8c4nadi9W5qGHHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm
OTdkNjgwHhcNMjUwNjEzMTYwMDQ5WhcNMjUwNjE0MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg2ZTJhNTNjYmQyMzQ2OWRmNWFiODlmMGVkZjc1NzVhMDQ5Y2MxNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq74gRnVA+iSGnYjxkePGWZDWyht
64nx1GDsfvUt7kAp1/tGzvx114YT1SYKpUJwlFgo4O4n3/LRqdztql9XKYQsxA9O
eImolkBXcRXQPCUXDNtJ9ICIPLUVqJWdH3sBsXylWhan5Xv3SFcxXafvO1Q6qkyX
QxtWDCmvYtzzBENAI4G5OUQoIUDiG2PxLPneZHRVXTXXbYHgIrC2GjTNCODhfiYw
JUg2/TVhff9GqfdVR2bRNjUVZ9zSZN4PrBWVyrxdtr/74MtJV1RV/OGIcRs4HMMu
QsHQicv1JEmewXJlaaAiVcQQWcURhrZj+KjYbYunmbGXsr6IoqItKx3ZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4qU8vSNGnfWrifDt91daBJzBUfMB8GA1UdIwQY
MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt
NTEyODU2MGRiZGZjLzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj
LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6MV2SGo
eC0y92Q91cEbTaQlB/isDIKu8Yp83gEkcCwJ5NyYROXA/iEiUdRi3ooIpU8GGH3D
jzQCvG2e9UjUN7SyW719fbMsh1JH26Rq8LpWVLC/sSKPQyRw1D+NDOrbITQkGTIM
xQ4PPWjB5/8bi6sVn04X4TIaJ8MsWEhJIPxBJzm636wNvU2wWxfFw0iIgYJt5r56
FNWikXJ8kv13gDwIBxD/Vg5ByTYbldxvQ9p41dDZL9ptq2yfKDODQkowuhn0AZ/u
ky2ZRtD64GhKdFSP1nlXK1gjZWOOhSOwlpdQXcijF61eSEjmLmW69U7T7rwgB7Eb
Q9dr5gQ2QjIF3g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:04 2025 by rpki-client