Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: mPA/NEJBhXWxNcNfLmUkeDk5w2VppsqvBpQQl5P1klw=
Subject key identifier: B4:C8:80:BF:88:75:B6:EC:3F:94:EB:B5:B9:C9:86:29:26:FF:A0:0F
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0197684E11E28B518254178C524AF63F02CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:36 +0000
Manifest this update: Fri 13 Jun 2025 08:00:36 +0000
Manifest next update: Sat 14 Jun 2025 08:00:36 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: tTDC0px8REw5sfynnwedMdef3bCab8Po3J2s7MIwlhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:11:e2:8b:51:82:54:17:8c:52:4a:f6:3f:02:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Jun 13 08:00:36 2025 GMT
Not After : Jun 14 08:00:36 2025 GMT
Subject: CN=b4c880bf8875b6ec3f94ebb5b9c9862926ffa00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:60:15:e5:3b:57:a2:34:24:ea:19:cb:65:
4d:e3:01:78:9e:37:33:e6:fd:62:1c:f5:47:e8:a1:
30:5c:9e:47:51:ea:70:a5:bf:54:78:86:64:72:ff:
17:9c:b7:6e:ec:83:a4:2a:fa:a0:f5:18:e6:45:74:
17:2b:16:3d:f9:21:bf:00:f2:d4:ce:3f:52:d6:93:
3f:e6:f7:ad:c7:2d:98:a9:84:05:06:d7:d1:97:90:
0d:5b:6d:76:b0:62:0b:9a:40:8b:b4:92:4b:6d:30:
14:9c:91:b0:e0:19:f2:c3:db:cb:b8:94:75:c7:07:
89:fc:49:16:be:3b:1f:f2:aa:af:c3:f8:71:32:e4:
78:a9:d9:12:9d:b9:83:1d:73:ec:51:6e:fc:de:8f:
6f:ef:7b:6e:5e:b9:2a:7e:5b:11:cb:25:6d:de:ff:
b7:a9:2f:8b:bc:df:01:67:80:80:8f:12:6b:2f:d1:
a8:25:ac:c6:fa:5f:6b:c2:55:17:49:12:e7:63:85:
ff:4f:40:77:60:bc:12:ee:91:ce:cf:3c:6b:f4:53:
d0:e6:4e:95:3d:d6:06:e8:27:35:18:74:d0:96:45:
a4:45:76:4a:32:e7:36:8b:e2:be:5a:e6:5a:69:e8:
a7:32:62:11:86:d8:82:9e:ab:65:05:43:30:7e:6a:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:80:BF:88:75:B6:EC:3F:94:EB:B5:B9:C9:86:29:26:FF:A0:0F
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5e:a6:f3:92:f6:bb:a2:a2:cc:a9:34:51:35:74:c1:a4:c9:
1d:d4:54:eb:a6:ed:7d:2d:34:27:25:5a:d7:a4:40:3a:3a:e3:
59:e3:c3:c4:05:e3:f3:79:42:4b:44:fa:de:7e:ab:77:c3:8e:
e9:6e:94:cc:59:75:a9:80:38:91:99:55:7a:fe:72:7a:04:67:
44:c9:96:f6:0e:bd:a0:01:8c:06:2f:d9:09:46:ff:60:5f:f3:
c0:16:48:94:4f:3f:55:55:b5:52:4b:a6:fe:1e:a1:3e:b0:bb:
1c:24:cf:48:e8:5a:45:5c:e5:eb:60:80:62:0b:58:af:ce:cf:
be:83:47:92:54:d3:51:d2:44:e2:13:b0:d6:32:af:86:c5:94:
a5:25:6f:78:5a:03:35:9d:d3:2c:fc:8a:1c:e7:4a:fa:56:2a:
21:d5:8c:bd:b7:76:40:07:b5:cc:6d:d2:9e:e2:43:a3:bb:9c:
f8:cb:23:50:97:ba:e7:18:bb:07:1b:3d:63:31:bd:5f:0e:eb:
04:4c:8d:c8:7a:8b:74:e0:2d:e0:c5:ba:66:c8:d6:66:10:c9:
29:98:8e:6f:31:8a:f9:c4:d2:bd:b1:f5:f7:31:c3:51:af:47:
38:69:5b:75:d2:74:97:8f:b0:f0:27:43:28:b2:49:d9:93:e8:
33:bd:85:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoThHii1GCVBeMUkr2PwLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy
MzAxODQwHhcNMjUwNjEzMDgwMDM2WhcNMjUwNjE0MDgwMDM2WjAzMTEwLwYDVQQD
EyhiNGM4ODBiZjg4NzViNmVjM2Y5NGViYjViOWM5ODYyOTI2ZmZhMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuElgFeU7V6I0JOoZy2VN4wF4njcz
5v1iHPVH6KEwXJ5HUepwpb9UeIZkcv8XnLdu7IOkKvqg9RjmRXQXKxY9+SG/APLU
zj9S1pM/5vetxy2YqYQFBtfRl5ANW212sGILmkCLtJJLbTAUnJGw4Bnyw9vLuJR1
xweJ/EkWvjsf8qqvw/hxMuR4qdkSnbmDHXPsUW783o9v73tuXrkqflsRyyVt3v+3
qS+LvN8BZ4CAjxJrL9GoJazG+l9rwlUXSRLnY4X/T0B3YLwS7pHOzzxr9FPQ5k6V
PdYG6Cc1GHTQlkWkRXZKMuc2i+K+WuZaaeinMmIRhtiCnqtlBUMwfmo2swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTIgL+IdbbsP5TrtbnJhikm/6APMB8GA1UdIwQY
MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt
OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2
LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiV6m85L2
u6KizKk0UTV0waTJHdRU66btfS00JyVa16RAOjrjWePDxAXj83lCS0T63n6rd8OO
6W6UzFl1qYA4kZlVev5yegRnRMmW9g69oAGMBi/ZCUb/YF/zwBZIlE8/VVW1Ukum
/h6hPrC7HCTPSOhaRVzl62CAYgtYr87PvoNHklTTUdJE4hOw1jKvhsWUpSVveFoD
NZ3TLPyKHOdK+lYqIdWMvbd2QAe1zG3SnuJDo7uc+MsjUJe65xi7Bxs9YzG9Xw7r
BEyNyHqLdOAt4MW6ZsjWZhDJKZiObzGK+cTSvbH19zHDUa9HOGlbddJ0l4+w8CdD
KLJJ2ZPoM72FxA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:27 2025 by rpki-client