Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: tYAD4hOiSVcLZiLT9EoHR1XXUf96o+0L0Lv/QOyWDQk=
Subject key identifier: AF:96:50:FD:2D:2F:95:BB:5A:D8:3A:F3:F7:B2:AE:9F:4D:34:C6:6A
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 019873E2FE7CAD85453430AB9422F86A46FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 056C
Signing time: Mon 04 Aug 2025 07:01:52 +0000
Manifest this update: Mon 04 Aug 2025 07:01:52 +0000
Manifest next update: Tue 05 Aug 2025 07:01:52 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: qic8bGyUHOdkZFTcUsv0gJ9jSIHWeZS+XncTXZNToF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:fe:7c:ad:85:45:34:30:ab:94:22:f8:6a:46:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Aug 4 07:01:52 2025 GMT
Not After : Aug 5 07:01:52 2025 GMT
Subject: CN=af9650fd2d2f95bb5ad83af3f7b2ae9f4d34c66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:a9:97:29:32:85:2a:d4:ed:94:ab:74:18:
f8:ec:46:4b:c6:21:f3:06:6b:31:f4:d2:a4:eb:e6:
5b:6d:03:9c:b7:a6:4a:95:13:0a:14:3d:01:2c:0b:
a3:e0:e3:2f:e3:9d:54:73:b6:da:0c:d5:0f:93:47:
14:92:5b:e3:a7:67:86:a4:6a:02:ab:62:d9:7f:85:
6e:29:e0:c4:d0:94:1d:ec:ad:e6:e1:82:72:69:0d:
ab:81:80:cb:42:52:ff:57:b4:0c:35:28:64:df:63:
38:20:48:83:0d:94:84:24:99:ab:39:17:bd:ca:4d:
fb:5d:07:11:e9:9f:1a:d7:b6:19:db:9d:6b:fc:5f:
f2:9f:06:ad:8d:2d:52:24:f3:fb:20:ab:f1:1b:1c:
ad:99:d6:6c:da:b8:9d:28:90:4c:7b:99:13:a0:4d:
af:4a:a6:e0:6c:3f:a6:73:d7:e7:75:7f:5d:5c:36:
83:14:27:41:98:b6:f3:04:b6:c7:24:35:39:ba:ce:
45:27:22:cf:a6:cf:16:78:cb:9f:0e:1f:3d:19:c5:
df:47:3c:61:27:9c:58:6d:31:be:2c:52:ec:b7:c8:
02:b5:67:4b:d3:1e:fc:97:61:53:22:e2:07:83:2a:
1b:83:be:b3:ea:7e:fa:a2:89:70:0b:fb:9c:0b:9d:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:50:FD:2D:2F:95:BB:5A:D8:3A:F3:F7:B2:AE:9F:4D:34:C6:6A
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:c7:ff:80:45:74:62:be:90:cf:44:1a:75:df:b7:64:11:
7f:41:42:38:5d:b8:b1:46:c6:3d:06:e5:cf:17:4e:7b:f7:04:
6d:4a:11:51:ee:a2:de:34:aa:b7:3c:c6:79:95:6b:71:7d:e3:
40:97:14:34:67:d3:73:51:62:0a:f0:de:1a:ff:66:60:5c:6b:
cc:e7:14:15:28:ae:2f:86:3d:00:b1:8c:21:a3:4c:7c:34:0d:
87:03:92:c0:73:dd:9d:0f:a2:89:77:48:38:4a:6a:e4:d5:b9:
ae:79:6b:e4:b3:cd:7f:60:1c:51:88:f5:f4:cb:4d:11:76:71:
c9:55:f2:44:13:48:b7:de:75:af:15:bf:e5:a0:ce:db:e1:06:
1a:87:e0:d1:6a:9c:fe:7a:50:96:b4:6b:9c:6d:da:d0:8a:2b:
c6:67:93:e6:bd:28:88:50:97:ab:01:d2:40:c3:40:f9:81:70:
10:61:2d:72:6d:31:a8:e3:13:f5:c0:d1:02:9c:7e:2f:88:6d:
29:de:1d:74:14:ea:6c:e2:37:6c:1b:77:fc:86:7d:ca:b9:b3:
a3:25:39:6e:35:ab:fc:b4:7b:7e:b7:4f:31:f1:4b:49:46:5e:
0c:32:25:44:c3:21:d6:3a:1a:a3:74:80:09:30:f2:81:3e:bb:
19:c7:1d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4v58rYVFNDCrlCL4akb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Yzc4Njc1OTEyMDBjMWY1ZjlmZDBjYzNkZTk5NTRkYzEz
OTg2MmUwHhcNMjUwODA0MDcwMTUyWhcNMjUwODA1MDcwMTUyWjAzMTEwLwYDVQQD
EyhhZjk2NTBmZDJkMmY5NWJiNWFkODNhZjNmN2IyYWU5ZjRkMzRjNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA192plykyhSrU7ZSrdBj47EZLxiHz
Bmsx9NKk6+ZbbQOct6ZKlRMKFD0BLAuj4OMv451Uc7baDNUPk0cUklvjp2eGpGoC
q2LZf4VuKeDE0JQd7K3m4YJyaQ2rgYDLQlL/V7QMNShk32M4IEiDDZSEJJmrORe9
yk37XQcR6Z8a17YZ251r/F/ynwatjS1SJPP7IKvxGxytmdZs2ridKJBMe5kToE2v
SqbgbD+mc9fndX9dXDaDFCdBmLbzBLbHJDU5us5FJyLPps8WeMufDh89GcXfRzxh
J5xYbTG+LFLst8gCtWdL0x78l2FTIuIHgyobg76z6n76oolwC/ucC50NRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+WUP0tL5W7Wtg68/eyrp9NNMZqMB8GA1UdIwQY
MBaAFMbHhnWRIAwfX5/QzD3plU3BOYYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUt
ODAzYzliNDFiOGU5LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUtODAzYzliNDFiOGU5
LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNPH/4BF
dGK+kM9EGnXft2QRf0FCOF24sUbGPQblzxdOe/cEbUoRUe6i3jSqtzzGeZVrcX3j
QJcUNGfTc1FiCvDeGv9mYFxrzOcUFSiuL4Y9ALGMIaNMfDQNhwOSwHPdnQ+iiXdI
OEpq5NW5rnlr5LPNf2AcUYj19MtNEXZxyVXyRBNIt951rxW/5aDO2+EGGofg0Wqc
/npQlrRrnG3a0IorxmeT5r0oiFCXqwHSQMNA+YFwEGEtcm0xqOMT9cDRApx+L4ht
Kd4ddBTqbOI3bBt3/IZ9yrmzoyU5bjWr/LR7frdPMfFLSUZeDDIlRMMh1joao3SA
CTDygT67Gccd2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:44 2025 by rpki-client