Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier: v4/KALQwOQy1H8Uwb8+nJPWsqqILquvcP3d9xPzliwM=
Subject key identifier: 4E:4A:00:CB:33:A3:2D:A7:AB:78:14:E1:13:22:51:72:E6:41:DD:D0
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 01987298A68AA66222784CFDB9879E4CE252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number: D6
Signing time: Mon 04 Aug 2025 01:01:03 +0000
Manifest this update: Mon 04 Aug 2025 01:01:03 +0000
Manifest next update: Tue 05 Aug 2025 01:01:03 +0000
Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: jLunCaZ5bDM6h2WOmwWHt1l2mdrb7qNn1YfFm35Bveo=)
2: GLKnJ3LTIabZeoGVzMCaJjFByNY.roa (hash: +WAt95sFiKCWSXPNQeYrpYryf9q0NJaDtl61QpO/UCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a6:8a:a6:62:22:78:4c:fd:b9:87:9e:4c:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Aug 4 01:01:03 2025 GMT
Not After : Aug 5 01:01:03 2025 GMT
Subject: CN=4e4a00cb33a32da7ab7814e113225172e641ddd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:4d:5c:22:81:38:72:5f:0d:4d:31:31:27:
70:1d:a0:a2:71:3e:3d:0e:0a:fe:8a:40:0e:9f:1d:
b9:8e:eb:d3:80:68:6c:3a:20:cf:e1:86:7c:43:07:
aa:9a:9d:81:98:4a:a0:da:5a:68:a0:42:39:36:ea:
39:db:2d:96:6f:16:eb:ba:4f:ea:af:8b:4f:44:68:
3b:ea:e0:9e:7e:87:90:4d:80:02:4e:c2:0d:ad:86:
42:87:b5:63:8b:e4:6f:0c:de:79:59:13:e1:99:de:
1c:4b:54:46:21:1c:f7:6b:79:d7:53:ec:d0:cc:d5:
d1:16:76:ea:58:f4:43:82:8f:1d:91:42:6d:94:55:
a0:16:c9:6e:cb:3d:23:87:e4:40:f6:aa:d7:d3:4e:
16:f6:8d:4d:dc:06:fc:01:71:17:6a:ed:8c:65:85:
45:37:f9:64:ca:a6:11:aa:2f:7d:da:dd:d5:f8:67:
7f:cf:ab:a3:06:a1:38:f5:5f:11:3f:ae:2d:33:8f:
6b:de:14:ea:78:99:0e:15:38:e8:ec:20:a6:48:bd:
4b:73:75:08:04:50:cc:5c:7e:f6:6b:12:65:f6:47:
63:af:8b:87:a2:8b:ab:96:7e:2f:70:e0:be:02:e9:
a5:21:e4:8c:43:f2:45:80:75:5a:85:d0:5d:b9:00:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:00:CB:33:A3:2D:A7:AB:78:14:E1:13:22:51:72:E6:41:DD:D0
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:f1:43:26:61:73:a5:de:9c:fb:2c:85:1a:0c:b2:95:92:
e1:ee:ee:31:5a:8d:0a:7d:86:84:f4:47:01:7c:59:e2:09:b3:
1e:d4:d4:aa:c5:26:9d:9f:8e:e2:37:6a:82:c5:65:c6:3b:e7:
22:1b:37:73:01:91:64:8e:37:e1:1d:5b:ce:42:b2:55:6d:e0:
0d:fd:7e:04:ec:ec:f7:51:48:4f:5b:71:b7:a4:63:c9:10:d3:
61:04:2f:68:35:7e:07:ff:46:4b:74:61:51:e2:5c:aa:3f:8b:
60:e2:5b:0b:af:e5:29:33:01:d4:3e:74:ed:bb:29:9d:ac:72:
0b:b5:53:d5:27:76:0f:b2:ae:e3:b0:76:d4:a4:cb:9b:c8:8e:
91:fb:fa:5b:1f:7a:83:ee:2a:70:5d:8b:0c:9c:f9:37:8c:3c:
5f:7f:ef:d8:93:d2:43:d8:5a:38:8f:63:29:30:09:e8:5d:fa:
af:38:4f:8f:2b:7c:b0:28:9d:f0:09:c7:94:70:2a:2e:58:03:
95:1c:f2:2c:68:48:a9:f2:8d:9b:85:a3:90:0b:3c:ae:83:45:
15:36:36:0e:3b:1f:a4:38:7b:2c:d7:f2:b9:b0:53:a2:93:61:
2c:d5:f2:b1:a0:63:46:ae:6c:f0:f5:76:3f:b1:6c:5f:ec:d2:
97:84:29:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymKaKpmIieEz9uYeeTOJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NzgzMWMxZjVlNjAwMjU0MmJjZWJhZGVmMjQxMjhhZDg0
NmVhZjkwHhcNMjUwODA0MDEwMTAzWhcNMjUwODA1MDEwMTAzWjAzMTEwLwYDVQQD
Eyg0ZTRhMDBjYjMzYTMyZGE3YWI3ODE0ZTExMzIyNTE3MmU2NDFkZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K5NXCKBOHJfDU0xMSdwHaCicT49
Dgr+ikAOnx25juvTgGhsOiDP4YZ8Qweqmp2BmEqg2lpooEI5Nuo52y2Wbxbruk/q
r4tPRGg76uCefoeQTYACTsINrYZCh7Vji+RvDN55WRPhmd4cS1RGIRz3a3nXU+zQ
zNXRFnbqWPRDgo8dkUJtlFWgFsluyz0jh+RA9qrX004W9o1N3Ab8AXEXau2MZYVF
N/lkyqYRqi992t3V+Gd/z6ujBqE49V8RP64tM49r3hTqeJkOFTjo7CCmSL1Lc3UI
BFDMXH72axJl9kdjr4uHoourln4vcOC+AumlIeSMQ/JFgHVahdBduQDXKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5KAMszoy2nq3gU4RMiUXLmQd3QMB8GA1UdIwQY
MBaAFNV4McH15gAlQrzrre8kEorYRur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQt
NzQ2MzY1ZGJhNWJiLzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQtNzQ2MzY1ZGJhNWJi
LzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvHxQyZh
c6XenPsshRoMspWS4e7uMVqNCn2GhPRHAXxZ4gmzHtTUqsUmnZ+O4jdqgsVlxjvn
Ihs3cwGRZI434R1bzkKyVW3gDf1+BOzs91FIT1txt6RjyRDTYQQvaDV+B/9GS3Rh
UeJcqj+LYOJbC6/lKTMB1D507bspnaxyC7VT1Sd2D7Ku47B21KTLm8iOkfv6Wx96
g+4qcF2LDJz5N4w8X3/v2JPSQ9haOI9jKTAJ6F36rzhPjyt8sCid8AnHlHAqLlgD
lRzyLGhIqfKNm4WjkAs8roNFFTY2DjsfpDh7LNfyubBTopNhLNXysaBjRq5s8PV2
P7FsX+zSl4QpOA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:12 2025 by rpki-client