Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: SIj7WVPYdx7kwXwVFXvsHeK2rV8BWdZhl4EGj9YLCuw=
Subject key identifier: FE:E9:D8:DB:B9:F3:CD:3C:2D:AB:22:C6:76:F0:28:6E:08:FD:13:6C
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019779E6963BFA87DA96E628408E426610B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 14C7
Signing time: Mon 16 Jun 2025 18:00:44 +0000
Manifest this update: Mon 16 Jun 2025 18:00:44 +0000
Manifest next update: Tue 17 Jun 2025 18:00:44 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: 73Ra3FUlJaLdG8JEf7qXwIiiOcoITnihocIdqx6pRWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:96:3b:fa:87:da:96:e6:28:40:8e:42:66:10:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jun 16 18:00:44 2025 GMT
Not After : Jun 17 18:00:44 2025 GMT
Subject: CN=fee9d8dbb9f3cd3c2dab22c676f0286e08fd136c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:25:65:47:3b:8e:16:6f:26:51:a5:80:a9:
a5:b8:f3:db:e7:59:9c:39:ba:c2:b4:06:5f:e8:2e:
45:e9:76:d5:19:49:f2:96:45:82:1f:b0:17:3b:65:
07:05:5f:16:00:09:e3:e5:32:89:0b:0a:d2:65:20:
8b:ed:1b:57:a1:e7:8e:7a:12:2f:a6:2a:9f:fd:98:
f9:b2:f0:a7:2a:5d:c0:61:7a:58:05:5d:74:83:22:
ce:12:87:23:95:08:25:f5:ed:6d:9b:e7:a5:a7:ac:
7a:35:53:c8:cf:77:7e:c5:79:10:67:f6:b1:ca:b5:
b3:3c:b2:ab:28:b3:19:57:a1:cb:db:84:0d:f3:c8:
b7:2e:65:68:c7:c7:5a:3c:af:0e:1b:77:df:ef:81:
3a:b0:e7:a7:7a:3e:ad:6a:8b:09:62:0f:84:62:46:
90:17:12:32:6f:64:c6:00:3e:2d:19:00:95:77:4e:
b2:25:5a:4a:a2:c6:d2:0c:ca:e5:34:38:26:e0:47:
e7:e7:98:69:72:f6:74:d4:16:eb:5a:24:42:3b:91:
a8:46:6a:47:bd:77:8c:76:a0:57:e3:d7:a7:0f:22:
87:13:54:ed:61:bc:25:1a:67:57:c2:8f:09:ce:6a:
7a:f9:71:44:d3:59:29:e8:94:15:f0:fc:5a:09:c5:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:D8:DB:B9:F3:CD:3C:2D:AB:22:C6:76:F0:28:6E:08:FD:13:6C
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:5c:10:85:3f:78:4f:42:bc:f6:4b:a7:75:fd:c4:c8:14:
1d:d3:d2:4d:2b:bc:1b:09:cf:3d:f7:a6:4a:ca:b5:1f:8c:6b:
d2:2d:16:50:0c:68:99:e6:3a:59:db:68:ef:69:be:61:fa:2c:
d0:dd:a0:28:7e:d5:e0:f3:14:6f:5b:2a:bf:89:64:a2:2b:9c:
54:06:b2:2b:ab:38:4a:cc:11:50:a9:d9:f8:46:e9:c2:07:65:
78:02:53:78:9f:64:52:40:ec:da:ed:eb:e1:df:57:cb:b5:bc:
ae:63:23:7e:04:79:49:9e:39:6f:fb:f3:8e:39:2a:99:cc:d3:
81:5c:24:58:a5:6a:f2:42:fa:eb:c6:da:7f:0c:92:44:91:62:
6d:6a:6a:35:5a:66:32:f2:c0:ee:4c:2b:48:02:d2:81:7f:50:
67:98:a7:86:f9:ff:5b:4c:8b:55:88:b1:0f:d9:8f:8f:a1:d2:
e8:7e:30:63:2a:5f:6c:ae:df:a2:1b:84:14:a1:16:25:0d:1f:
45:35:14:bc:d4:8c:09:04:21:54:68:61:8c:4a:8b:95:78:29:
45:19:fa:46:65:e8:91:d0:7a:82:18:c8:c5:9b:7d:30:8d:f2:
12:36:f4:16:a0:f7:9b:8a:25:4c:89:b4:b2:9f:70:2e:e2:97:
d2:27:b5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd55pY7+ofaluYoQI5CZhC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwNjE2MTgwMDQ0WhcNMjUwNjE3MTgwMDQ0WjAzMTEwLwYDVQQD
EyhmZWU5ZDhkYmI5ZjNjZDNjMmRhYjIyYzY3NmYwMjg2ZTA4ZmQxMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ElZUc7jhZvJlGlgKmluPPb51mc
ObrCtAZf6C5F6XbVGUnylkWCH7AXO2UHBV8WAAnj5TKJCwrSZSCL7RtXoeeOehIv
piqf/Zj5svCnKl3AYXpYBV10gyLOEocjlQgl9e1tm+elp6x6NVPIz3d+xXkQZ/ax
yrWzPLKrKLMZV6HL24QN88i3LmVox8daPK8OG3ff74E6sOenej6taosJYg+EYkaQ
FxIyb2TGAD4tGQCVd06yJVpKosbSDMrlNDgm4Efn55hpcvZ01BbrWiRCO5GoRmpH
vXeMdqBX49enDyKHE1TtYbwlGmdXwo8Jzmp6+XFE01kp6JQV8PxaCcXNOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7p2Nu58808LasixnbwKG4I/RNsMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3BcEIU/
eE9CvPZLp3X9xMgUHdPSTSu8GwnPPfemSsq1H4xr0i0WUAxomeY6Wdto72m+Yfos
0N2gKH7V4PMUb1sqv4lkoiucVAayK6s4SswRUKnZ+EbpwgdleAJTeJ9kUkDs2u3r
4d9Xy7W8rmMjfgR5SZ45b/vzjjkqmczTgVwkWKVq8kL668bafwySRJFibWpqNVpm
MvLA7kwrSALSgX9QZ5inhvn/W0yLVYixD9mPj6HS6H4wYypfbK7fohuEFKEWJQ0f
RTUUvNSMCQQhVGhhjEqLlXgpRRn6RmXokdB6ghjIxZt9MI3yEjb0FqD3m4olTIm0
sp9wLuKX0ie1ZA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:35:12 2025 by rpki-client