Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: axRMVwZg1joeIaVDcfWEdS3Rs/lAeR8u/Ekm6HYLCng=
Subject key identifier: A5:71:DC:60:D8:66:DA:6A:8B:53:28:95:86:44:0A:DC:C1:F4:11:19
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019849D2EB95D2F965C5EB141DBB266347D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 11BF
Signing time: Sun 27 Jul 2025 03:00:16 +0000
Manifest this update: Sun 27 Jul 2025 03:00:16 +0000
Manifest next update: Mon 28 Jul 2025 03:00:16 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: LftVcrdbn2zuYj+63/jxN7BReTZUIBToFDOkHJ9PDmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:eb:95:d2:f9:65:c5:eb:14:1d:bb:26:63:47:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Jul 27 03:00:16 2025 GMT
Not After : Jul 28 03:00:16 2025 GMT
Subject: CN=a571dc60d866da6a8b53289586440adcc1f41119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:8d:52:af:5a:14:51:88:a8:cf:9d:1c:71:
2f:90:73:39:80:63:c2:10:28:eb:8c:e0:ee:99:78:
18:6d:ac:40:ab:e0:ad:07:de:a6:43:5a:c4:82:ee:
60:d0:d5:bf:63:52:b9:cd:ee:6d:e9:6e:55:fa:d5:
61:48:0e:83:94:98:07:3b:cc:83:fb:0d:a9:63:d5:
d7:e0:a5:a4:93:9c:92:9b:33:7b:68:fe:9b:e9:0e:
44:2c:7d:c2:55:74:04:55:1b:f6:50:9b:bd:b3:29:
0c:c1:6d:62:9d:01:ac:d8:4b:c8:90:cd:c0:37:b7:
b1:40:c3:bb:48:30:b0:eb:98:3e:57:3e:1b:1f:95:
b5:18:c4:a5:ca:4a:f9:36:ed:5e:e3:b5:e0:9d:60:
8f:b6:b5:7b:2d:6e:82:c2:51:64:a3:51:f4:a7:16:
ea:13:f2:04:e7:e8:8a:6f:fb:e7:eb:3a:70:61:ef:
8b:32:34:2b:19:39:b8:aa:6f:2c:eb:25:fe:2b:9f:
ce:f6:11:3a:ac:e8:c5:c5:84:5e:97:1b:29:3c:ea:
34:e5:5d:9e:a5:9b:5e:89:74:c5:ad:9b:a1:a0:36:
83:d9:08:5e:64:d8:d6:5f:1b:68:01:e3:9b:a5:e8:
c2:f0:b0:b7:9d:a1:75:4e:5c:18:28:e1:30:f0:8d:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:DC:60:D8:66:DA:6A:8B:53:28:95:86:44:0A:DC:C1:F4:11:19
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:d2:e2:db:fd:dd:8f:24:fc:f2:1a:56:e5:7e:6f:a6:e5:
e6:24:07:fa:aa:43:3f:53:f5:f5:bc:f6:7c:9c:4e:f0:b3:0b:
a3:e8:c8:38:ae:27:a4:33:53:db:35:65:5d:13:8e:ca:c0:de:
b9:86:ab:08:a9:ee:ed:55:1a:ba:2b:ff:75:fa:7f:b4:c4:a4:
26:8f:08:95:6b:cf:97:7b:40:a1:57:4d:19:89:1d:b8:b5:8d:
2f:4c:ec:af:fa:3b:c3:cc:4b:e1:d8:3f:6a:4b:0e:66:08:6b:
5d:29:d5:8e:85:92:15:7a:c4:51:98:25:1e:03:a4:17:3f:69:
86:fe:6a:d8:2e:01:26:6b:8d:27:4d:e5:91:7b:aa:dc:45:59:
31:d6:a5:d6:56:21:6d:22:6a:62:6b:cf:e8:65:d5:8a:e8:ff:
65:8c:09:64:59:22:ed:b2:98:fa:ed:aa:f0:82:aa:92:92:67:
23:c5:43:92:20:74:be:ca:b0:82:38:80:4c:af:1a:1e:b7:ba:
6f:ec:8b:b1:64:ad:e0:2b:f1:11:1b:3d:c4:24:46:5f:c1:17:
7b:09:1d:7b:26:bd:8d:1f:df:93:78:e2:a9:d1:24:af:7e:4c:
b6:0c:07:16:4f:70:fb:95:fc:2d:63:74:d4:19:81:d7:ee:06:
96:c7:f3:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0uuV0vllxesUHbsmY0fYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1
MDhkNTcwHhcNMjUwNzI3MDMwMDE2WhcNMjUwNzI4MDMwMDE2WjAzMTEwLwYDVQQD
EyhhNTcxZGM2MGQ4NjZkYTZhOGI1MzI4OTU4NjQ0MGFkY2MxZjQxMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwyNUq9aFFGIqM+dHHEvkHM5gGPC
ECjrjODumXgYbaxAq+CtB96mQ1rEgu5g0NW/Y1K5ze5t6W5V+tVhSA6DlJgHO8yD
+w2pY9XX4KWkk5ySmzN7aP6b6Q5ELH3CVXQEVRv2UJu9sykMwW1inQGs2EvIkM3A
N7exQMO7SDCw65g+Vz4bH5W1GMSlykr5Nu1e47XgnWCPtrV7LW6CwlFko1H0pxbq
E/IE5+iKb/vn6zpwYe+LMjQrGTm4qm8s6yX+K5/O9hE6rOjFxYRelxspPOo05V2e
pZteiXTFrZuhoDaD2QheZNjWXxtoAeObpejC8LC3naF1TlwYKOEw8I0TpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVx3GDYZtpqi1MolYZECtzB9BEZMB8GA1UdIwQY
MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt
ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx
LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRDS4tv9
3Y8k/PIaVuV+b6bl5iQH+qpDP1P19bz2fJxO8LMLo+jIOK4npDNT2zVlXROOysDe
uYarCKnu7VUauiv/dfp/tMSkJo8IlWvPl3tAoVdNGYkduLWNL0zsr/o7w8xL4dg/
aksOZghrXSnVjoWSFXrEUZglHgOkFz9phv5q2C4BJmuNJ03lkXuq3EVZMdal1lYh
bSJqYmvP6GXViuj/ZYwJZFki7bKY+u2q8IKqkpJnI8VDkiB0vsqwgjiATK8aHre6
b+yLsWSt4CvxERs9xCRGX8EXewkdeya9jR/fk3jiqdEkr35MtgwHFk9w+5X8LWN0
1BmB1+4GlsfzfQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:07:27 2025 by rpki-client