Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: gik7WRDFfOe+RAUv+HaO+2PNZoIHiIS8Jvg8CL8cPPI=
Subject key identifier: 2E:C3:E3:5B:D3:0B:7B:84:0D:1C:C1:3E:5B:9A:D4:01:C6:C5:CD:CC
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 019875D26A38C1EEE4BABD1B098B1F26805F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 1352
Signing time: Mon 04 Aug 2025 16:03:00 +0000
Manifest this update: Mon 04 Aug 2025 16:03:00 +0000
Manifest next update: Tue 05 Aug 2025 16:03:00 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: 2DgcbHROIdKY2cvtiU9/ton7Ae8kxteunOME03nnJpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:6a:38:c1:ee:e4:ba:bd:1b:09:8b:1f:26:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Aug 4 16:03:00 2025 GMT
Not After : Aug 5 16:03:00 2025 GMT
Subject: CN=2ec3e35bd30b7b840d1cc13e5b9ad401c6c5cdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:16:11:c7:98:c0:f0:07:5c:20:49:43:ff:
48:de:55:4c:b0:dc:89:53:89:21:2f:c6:84:60:16:
c9:38:0f:d6:d8:7d:ce:7a:0b:8e:a4:d1:c1:a4:f2:
7e:58:72:eb:19:94:f8:3f:b8:63:b3:e4:5b:61:59:
6c:9c:07:29:a5:1d:f9:b9:ce:78:9f:b4:c0:be:a7:
72:60:02:c7:d4:0a:09:61:72:78:ea:73:ed:8d:6c:
66:21:33:1c:18:d6:15:c0:72:a3:4a:d0:3d:68:3d:
b4:d9:56:6f:3e:f2:11:3d:48:29:67:ee:f4:ef:6f:
18:53:bd:0b:9a:63:c9:0f:97:f8:26:f1:7c:9d:98:
8e:71:49:bc:da:1b:5b:e0:1d:58:fc:99:23:71:f7:
1c:b0:a9:5b:87:15:35:b6:e4:ad:a5:35:37:6e:0a:
7c:06:e3:2f:8d:4d:a8:67:37:a8:09:71:52:06:99:
a5:e8:00:40:a0:d0:62:c0:4b:70:c0:e4:3a:3c:12:
60:ac:29:af:86:09:d1:ed:e5:34:1b:f8:73:12:05:
8e:a4:86:8a:e5:c5:3d:35:07:28:10:46:7a:ed:2c:
26:b1:52:4c:d3:cd:70:77:1d:5f:e7:61:bd:33:8d:
44:71:73:88:c1:b2:f7:46:97:98:d5:d9:11:92:21:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:E3:5B:D3:0B:7B:84:0D:1C:C1:3E:5B:9A:D4:01:C6:C5:CD:CC
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4b:52:c1:07:e4:0e:d6:c2:e1:b3:6b:25:e1:1a:30:1a:dc:
ed:ee:f4:17:d9:97:6d:bb:86:22:e8:7d:36:62:c9:03:2d:35:
f8:cb:4d:b5:21:f1:1a:a5:ed:df:8e:24:ca:c5:ba:f7:9e:2b:
0e:a1:f3:71:4b:1a:a9:fc:43:02:e2:af:75:cd:04:6c:2e:bc:
1c:52:54:15:67:25:20:9c:65:20:2c:f2:a6:45:fe:21:47:01:
3c:89:dc:e7:ab:94:94:12:7e:6a:ba:37:d4:d2:57:3a:7c:72:
b0:7d:b3:8f:83:44:5c:85:ef:bb:65:a3:79:1c:a9:b4:79:57:
5c:b1:59:0a:e1:b6:48:d8:f9:23:65:af:7a:c8:a0:0a:87:81:
ee:da:42:6a:1e:04:92:7b:f4:34:8b:f2:12:a0:9d:e7:74:c7:
73:d7:79:19:83:89:26:d8:a6:86:54:f1:05:7b:20:89:35:2d:
92:ff:a6:56:0a:cd:68:04:c0:d9:13:68:3b:81:e3:9c:5b:04:
57:a5:6e:48:ff:e3:4d:58:fa:72:12:6e:86:d8:64:7e:b6:8e:
bf:2b:30:4b:5b:aa:49:e5:42:5c:63:21:79:db:28:32:2c:63:
d4:62:4e:d1:11:dd:1c:9f:1c:e3:32:4d:91:cd:ca:31:77:b3:
31:6e:0e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10mo4we7kur0bCYsfJoBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm
ZGU4MzEwHhcNMjUwODA0MTYwMzAwWhcNMjUwODA1MTYwMzAwWjAzMTEwLwYDVQQD
EygyZWMzZTM1YmQzMGI3Yjg0MGQxY2MxM2U1YjlhZDQwMWM2YzVjZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCsWEceYwPAHXCBJQ/9I3lVMsNyJ
U4khL8aEYBbJOA/W2H3OeguOpNHBpPJ+WHLrGZT4P7hjs+RbYVlsnAcppR35uc54
n7TAvqdyYALH1AoJYXJ46nPtjWxmITMcGNYVwHKjStA9aD202VZvPvIRPUgpZ+70
728YU70LmmPJD5f4JvF8nZiOcUm82htb4B1Y/JkjcfccsKlbhxU1tuStpTU3bgp8
BuMvjU2oZzeoCXFSBpml6ABAoNBiwEtwwOQ6PBJgrCmvhgnR7eU0G/hzEgWOpIaK
5cU9NQcoEEZ67SwmsVJM081wdx1f52G9M41EcXOIwbL3RpeY1dkRkiFazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7D41vTC3uEDRzBPlua1AHGxc3MMB8GA1UdIwQY
MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt
MDY2ODY2ZjJkZWQwLzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw
LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUtSwQfk
DtbC4bNrJeEaMBrc7e70F9mXbbuGIuh9NmLJAy01+MtNtSHxGqXt344kysW6954r
DqHzcUsaqfxDAuKvdc0EbC68HFJUFWclIJxlICzypkX+IUcBPInc56uUlBJ+aro3
1NJXOnxysH2zj4NEXIXvu2WjeRyptHlXXLFZCuG2SNj5I2WvesigCoeB7tpCah4E
knv0NIvyEqCd53THc9d5GYOJJtimhlTxBXsgiTUtkv+mVgrNaATA2RNoO4HjnFsE
V6VuSP/jTVj6chJuhthkfraOvyswS1uqSeVCXGMhedsoMixj1GJO0RHdHJ8c4zJN
kc3KMXezMW4OUg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:13 2025 by rpki-client