Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: v8bMLTfgFq1xnYNdAzwYj3wjuENOGyx0ojZSrkc0two=
Subject key identifier: C4:5A:80:D5:E0:86:87:31:78:44:FB:4A:FA:0D:7A:9D:64:BA:89:84
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 01976E50792070CB5260D1171AEAF72C56F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 1297
Signing time: Sat 14 Jun 2025 12:00:56 +0000
Manifest this update: Sat 14 Jun 2025 12:00:56 +0000
Manifest next update: Sun 15 Jun 2025 12:00:56 +0000
Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: 08V/5nXAxVWBLZsf/Kl4RfuOp4HjMb53oe+rR7gywd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:79:20:70:cb:52:60:d1:17:1a:ea:f7:2c:56:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jun 14 12:00:56 2025 GMT
Not After : Jun 15 12:00:56 2025 GMT
Subject: CN=c45a80d5e08687317844fb4afa0d7a9d64ba8984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:27:e5:be:1b:83:b1:04:ba:ac:d2:05:14:
e1:fc:b0:40:1d:d8:ad:42:a2:e4:93:84:46:10:d8:
15:36:c4:05:ad:88:b0:f1:fb:18:62:a1:b9:26:96:
1e:13:3b:fc:b6:02:25:58:fd:b4:21:33:dc:a2:9c:
de:96:b1:92:81:69:f4:fd:c8:f2:3e:4b:15:10:bd:
7a:1d:63:aa:dc:ee:af:e6:2c:cf:84:fc:6e:94:eb:
2a:27:47:45:46:3c:c7:e9:62:f1:1f:d1:be:f7:7b:
bc:07:33:ed:1f:7b:a1:aa:25:66:c2:e9:05:3f:e6:
86:26:ef:dc:de:f8:a9:14:7c:34:02:7b:1b:7e:35:
15:d3:31:a0:e0:1d:0a:5d:6c:86:a8:aa:ee:7b:c5:
93:d8:d2:17:3c:e2:b6:16:09:0f:93:1d:33:45:ac:
25:2f:8d:b4:1a:4d:2c:fa:c7:b9:8c:73:03:ca:69:
a7:8b:e3:4a:84:7f:41:db:64:1d:92:71:48:c8:15:
58:c5:bb:1b:18:3a:51:f8:b3:b7:70:9a:48:69:17:
4d:7f:bf:ee:37:26:c3:02:62:db:39:e4:f8:a8:36:
77:ca:ac:f7:7a:9a:4a:05:88:11:f5:6e:e5:86:2e:
44:c7:8a:e6:86:f7:7d:1d:39:fb:a3:73:d7:46:0e:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:80:D5:E0:86:87:31:78:44:FB:4A:FA:0D:7A:9D:64:BA:89:84
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cc:a4:29:da:a3:27:b5:85:c4:23:f6:b5:db:69:38:67:20:
c9:4b:a1:fd:24:7c:a2:98:97:9c:9a:be:a3:eb:65:fb:1f:2b:
fa:d7:ab:2d:3d:6f:83:0d:ea:30:e9:fe:9f:b5:4b:32:32:3b:
a0:cf:f0:49:9c:2e:ae:17:b9:69:29:68:06:db:ae:8d:3f:26:
7b:30:75:29:f0:e9:24:0d:4f:ec:1d:68:f9:74:91:44:ed:49:
cf:b0:43:60:97:33:2e:31:58:29:57:06:3f:f1:53:cb:af:61:
b1:a1:55:2a:e5:43:8f:ef:d5:2b:b7:c2:03:25:26:c7:20:e8:
e7:b1:7b:11:20:13:ff:e7:98:0a:86:91:d5:cf:f7:ef:09:83:
f8:41:8d:41:e9:ee:9d:57:ba:45:fd:b3:0d:d4:62:d8:3e:60:
37:71:bc:a8:0a:5f:ca:74:a0:7e:c4:c5:e1:54:6f:7c:2a:53:
f3:79:dc:20:85:cd:a5:90:f7:04:b0:c0:64:a1:44:3c:26:65:
fb:b0:df:15:c0:6c:ad:d9:1f:3e:e1:6d:bc:01:ba:f2:b5:5e:
dc:ef:29:cd:c4:b3:c8:78:aa:e5:54:32:33:a0:00:59:cc:02:
2b:fc:d6:af:cc:1f:27:ee:77:a3:71:64:d9:0a:f1:5d:14:c3:
e9:dd:be:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUHkgcMtSYNEXGur3LFbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz
NGI1ZDEwHhcNMjUwNjE0MTIwMDU2WhcNMjUwNjE1MTIwMDU2WjAzMTEwLwYDVQQD
EyhjNDVhODBkNWUwODY4NzMxNzg0NGZiNGFmYTBkN2E5ZDY0YmE4OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK4n5b4bg7EEuqzSBRTh/LBAHdit
QqLkk4RGENgVNsQFrYiw8fsYYqG5JpYeEzv8tgIlWP20ITPcopzelrGSgWn0/cjy
PksVEL16HWOq3O6v5izPhPxulOsqJ0dFRjzH6WLxH9G+93u8BzPtH3uhqiVmwukF
P+aGJu/c3vipFHw0AnsbfjUV0zGg4B0KXWyGqKrue8WT2NIXPOK2FgkPkx0zRawl
L420Gk0s+se5jHMDymmni+NKhH9B22QdknFIyBVYxbsbGDpR+LO3cJpIaRdNf7/u
NybDAmLbOeT4qDZ3yqz3eppKBYgR9W7lhi5Ex4rmhvd9HTn7o3PXRg6KzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRagNXghocxeET7SvoNep1kuomEMB8GA1UdIwQY
MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt
ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1
LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMykKdqj
J7WFxCP2tdtpOGcgyUuh/SR8opiXnJq+o+tl+x8r+terLT1vgw3qMOn+n7VLMjI7
oM/wSZwurhe5aSloBtuujT8mezB1KfDpJA1P7B1o+XSRRO1Jz7BDYJczLjFYKVcG
P/FTy69hsaFVKuVDj+/VK7fCAyUmxyDo57F7ESAT/+eYCoaR1c/37wmD+EGNQenu
nVe6Rf2zDdRi2D5gN3G8qApfynSgfsTF4VRvfCpT83ncIIXNpZD3BLDAZKFEPCZl
+7DfFcBsrdkfPuFtvAG68rVe3O8pzcSzyHiq5VQyM6AAWcwCK/zWr8wfJ+53o3Fk
2QrxXRTD6d2+9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:43 2025 by rpki-client