Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: h7WBz4Xw6mB0q/gY9pNyEjZhYWB7oJUwBzHEFc8+qlM=
Subject key identifier: 12:5D:4C:D9:11:06:B2:5D:A5:2B:29:28:B2:06:15:04:BC:35:CF:38
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01976DAB6FFD9A1A04EFC16936ABB889BAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 09:00:41 +0000
Manifest this update: Sat 14 Jun 2025 09:00:41 +0000
Manifest next update: Sun 15 Jun 2025 09:00:41 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: m00H4AvvvLu2VC1JHkQd59C7+5C+uEB1zRUj6IfkwJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:6f:fd:9a:1a:04:ef:c1:69:36:ab:b8:89:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Jun 14 09:00:41 2025 GMT
Not After : Jun 15 09:00:41 2025 GMT
Subject: CN=125d4cd91106b25da52b2928b2061504bc35cf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:2c:11:31:4d:a2:d7:29:1c:ac:ee:3c:56:
8e:76:82:d3:b5:7e:9e:9a:cf:0b:b5:91:4f:59:20:
30:b3:23:aa:c5:18:4d:9e:89:2d:5d:3b:01:3c:7b:
6f:1c:3e:b8:a2:a7:72:01:30:52:de:37:ec:6e:5f:
28:44:40:80:e0:3e:f2:4a:24:8b:8a:82:1e:52:14:
39:07:9e:be:3a:33:de:dc:b8:be:ad:1a:f8:a7:b3:
56:3c:43:2d:75:ec:44:72:61:5f:18:b2:24:b2:98:
85:3c:3f:38:c0:9e:55:51:ac:43:f4:c8:ae:0b:2b:
f4:b5:90:28:52:dc:4f:a1:d3:b8:bc:a7:1c:7c:04:
56:78:da:de:96:2d:a6:94:3d:c4:1c:0d:71:d4:87:
62:2d:4f:e4:27:26:15:90:92:e5:e4:c1:67:7d:46:
20:5e:96:d7:5e:f2:6d:f1:a5:c2:8a:33:0c:56:ca:
d6:0f:ee:95:62:1f:59:43:4f:89:62:8b:01:ac:53:
eb:b0:4e:8c:31:cb:17:f5:57:77:9b:92:36:01:4d:
cf:b3:dd:f1:fd:d4:6b:b1:1b:fb:0b:a9:00:b9:9c:
d0:b4:48:b8:05:ae:df:fa:55:69:9d:8a:83:75:4d:
76:f8:c4:1b:d9:22:8d:22:b9:04:9c:c5:1b:e8:68:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:4C:D9:11:06:B2:5D:A5:2B:29:28:B2:06:15:04:BC:35:CF:38
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2d:50:70:1a:da:17:f8:95:0e:e3:b2:89:a3:91:b2:95:0f:
ea:3a:6c:a4:81:27:bb:d3:7a:47:dc:02:f4:ec:65:ae:b3:fa:
e0:31:71:71:3c:ff:01:1a:0a:59:08:1e:24:7b:52:71:e6:22:
3c:c8:7d:6f:c8:89:86:96:98:e5:25:5a:da:0f:b0:b2:71:32:
69:23:3a:a0:11:94:1a:4c:b1:88:09:12:c5:7b:80:bd:37:55:
8b:93:c0:8c:3d:dc:2d:76:56:7b:dc:19:72:d8:2b:51:65:d4:
07:a0:0f:69:43:97:69:ce:5b:de:9e:a4:43:d6:87:b1:a8:18:
eb:cb:cd:06:9c:dd:8f:cf:c8:cb:8c:c8:a3:08:db:f7:3d:d6:
a0:31:11:ab:bc:cf:7c:05:6c:e4:94:37:d5:5c:cc:49:4a:c9:
4a:d9:ac:38:50:d1:17:d7:86:5b:3a:95:07:89:36:f1:74:13:
20:ef:f1:ec:3d:49:28:3c:6c:0c:24:00:dd:1e:bd:64:07:10:
51:c2:6b:a7:9f:4c:59:4b:c5:c4:1d:7f:ca:a6:10:8a:8a:6e:
73:e1:5b:7c:48:8a:2c:82:70:69:d0:d2:8b:46:5e:fb:e7:d5:
94:8c:93:a3:a5:29:f9:a7:db:01:3a:1a:4c:24:43:1a:1b:76:
94:18:80:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq2/9mhoE78FpNqu4ibrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3
ZGQ3ZDIwHhcNMjUwNjE0MDkwMDQxWhcNMjUwNjE1MDkwMDQxWjAzMTEwLwYDVQQD
EygxMjVkNGNkOTExMDZiMjVkYTUyYjI5MjhiMjA2MTUwNGJjMzVjZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmIsETFNotcpHKzuPFaOdoLTtX6e
ms8LtZFPWSAwsyOqxRhNnoktXTsBPHtvHD64oqdyATBS3jfsbl8oRECA4D7ySiSL
ioIeUhQ5B56+OjPe3Li+rRr4p7NWPEMtdexEcmFfGLIkspiFPD84wJ5VUaxD9Miu
Cyv0tZAoUtxPodO4vKccfARWeNreli2mlD3EHA1x1IdiLU/kJyYVkJLl5MFnfUYg
XpbXXvJt8aXCijMMVsrWD+6VYh9ZQ0+JYosBrFPrsE6MMcsX9Vd3m5I2AU3Ps93x
/dRrsRv7C6kAuZzQtEi4Ba7f+lVpnYqDdU12+MQb2SKNIrkEnMUb6Gh/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJdTNkRBrJdpSspKLIGFQS8Nc84MB8GA1UdIwQY
MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt
ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2
LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy1QcBra
F/iVDuOyiaORspUP6jpspIEnu9N6R9wC9OxlrrP64DFxcTz/ARoKWQgeJHtSceYi
PMh9b8iJhpaY5SVa2g+wsnEyaSM6oBGUGkyxiAkSxXuAvTdVi5PAjD3cLXZWe9wZ
ctgrUWXUB6APaUOXac5b3p6kQ9aHsagY68vNBpzdj8/Iy4zIowjb9z3WoDERq7zP
fAVs5JQ31VzMSUrJStmsOFDRF9eGWzqVB4k28XQTIO/x7D1JKDxsDCQA3R69ZAcQ
UcJrp59MWUvFxB1/yqYQiopuc+FbfEiKLIJwadDSi0Ze++fVlIyTo6Up+afbAToa
TCRDGht2lBiA9w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:26 2025 by rpki-client