Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: KnnGphOhuLCSmg50HL3eRyIyDgQHlREUYBxViv6QihI=
Subject key identifier: BC:99:4A:BC:61:29:4B:84:E3:25:E7:81:EB:AD:63:EC:7B:A4:4E:40
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 019855DF558B152F3F862D0C3C820A73973F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 11:09:16 +0000
Manifest this update: Tue 29 Jul 2025 11:09:16 +0000
Manifest next update: Wed 30 Jul 2025 11:09:16 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: 2GyqJpsqOzOjByXcAQPUBziZp7K7xylUcVcIyYd3GQ4=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:55:8b:15:2f:3f:86:2d:0c:3c:82:0a:73:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Jul 29 11:09:16 2025 GMT
Not After : Jul 30 11:09:16 2025 GMT
Subject: CN=bc994abc61294b84e325e781ebad63ec7ba44e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:f1:8a:94:ab:57:26:d1:f1:d8:fc:a5:64:
83:48:d5:bb:cb:dc:ad:62:6e:b2:11:57:8e:30:ad:
95:35:1b:e7:87:42:d3:ef:72:78:77:42:fc:a4:42:
42:61:88:b2:ce:d7:18:88:a0:f9:6e:18:2e:0e:0d:
f4:38:64:a4:42:cc:88:c5:81:87:e6:c9:5a:67:c0:
1f:cc:5b:55:71:bd:e2:0a:67:85:8d:e3:cb:77:af:
b7:ee:e4:dc:b4:3c:8c:76:ef:33:65:bd:4f:71:e4:
49:0b:c0:55:b4:e1:27:1e:b2:79:ad:70:f4:be:f5:
c2:31:99:83:47:cb:dc:e1:31:aa:ae:e9:df:e5:08:
7d:8d:80:84:54:77:d8:7d:96:16:bf:a5:7e:75:7a:
78:45:99:94:05:e4:38:e3:a8:d9:eb:89:b7:ba:20:
26:cc:17:46:73:45:57:8d:87:6f:c0:90:5f:23:28:
ec:fc:c4:07:11:1d:22:c1:c7:dc:07:f8:1b:a8:d9:
71:b6:04:aa:87:9e:17:49:e9:3d:b3:4e:c2:ab:3d:
42:29:73:2a:00:94:4e:d7:2c:8f:0e:d2:4f:eb:43:
97:0b:98:95:83:ae:8b:ca:53:25:b2:83:72:05:a5:
dc:a8:50:de:e8:f7:99:d0:1a:c2:2b:72:3a:c7:9d:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:4A:BC:61:29:4B:84:E3:25:E7:81:EB:AD:63:EC:7B:A4:4E:40
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f3:16:8d:54:6f:ad:5a:ef:94:15:b4:90:ee:25:cd:cd:d1:
61:b4:9c:73:f6:96:af:33:fc:53:8f:df:8f:42:69:fa:67:e2:
b0:4e:88:32:79:dc:b0:18:42:92:fd:5c:76:30:bf:c0:6f:42:
89:f9:6e:ab:2b:a2:7f:c6:17:13:5f:e2:b4:2e:62:fa:c6:80:
91:e4:ef:91:e5:0b:70:b6:f3:be:5c:a6:8e:d2:79:1b:de:ba:
42:6a:c6:79:19:87:ef:4d:f8:38:ee:e4:03:ef:46:7c:0d:25:
aa:df:17:b2:59:1e:46:e1:e3:27:f0:ac:02:84:7f:65:85:db:
54:09:04:84:95:c5:e4:ba:a3:82:24:9c:b1:e7:3d:cd:55:5c:
76:f7:ba:33:cd:ed:dc:f2:49:ff:af:21:dd:d7:85:6e:a7:43:
6f:7e:41:65:6a:ad:b1:8a:06:8f:72:39:bc:ff:5e:2f:84:cc:
a0:89:a6:90:c6:b0:3d:fc:3f:d6:3a:5f:c1:55:6e:bb:72:d2:
66:2f:ee:16:23:04:39:dc:5f:24:53:cd:a0:f3:c4:81:08:cc:
23:cd:38:60:9b:d5:63:53:ed:25:0a:1b:c7:06:65:d3:ae:68:
9e:96:de:ca:22:7f:bc:99:8f:d4:e7:6a:e3:e6:6a:7d:85:a6:
4e:31:ca:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhV31WLFS8/hi0MPIIKc5c/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5
MTQwZjAwHhcNMjUwNzI5MTEwOTE2WhcNMjUwNzMwMTEwOTE2WjAzMTEwLwYDVQQD
EyhiYzk5NGFiYzYxMjk0Yjg0ZTMyNWU3ODFlYmFkNjNlYzdiYTQ0ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk3xipSrVybR8dj8pWSDSNW7y9yt
Ym6yEVeOMK2VNRvnh0LT73J4d0L8pEJCYYiyztcYiKD5bhguDg30OGSkQsyIxYGH
5slaZ8AfzFtVcb3iCmeFjePLd6+37uTctDyMdu8zZb1PceRJC8BVtOEnHrJ5rXD0
vvXCMZmDR8vc4TGqrunf5Qh9jYCEVHfYfZYWv6V+dXp4RZmUBeQ446jZ64m3uiAm
zBdGc0VXjYdvwJBfIyjs/MQHER0iwcfcB/gbqNlxtgSqh54XSek9s07Cqz1CKXMq
AJRO1yyPDtJP60OXC5iVg66LylMlsoNyBaXcqFDe6PeZ0BrCK3I6x53AvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyZSrxhKUuE4yXngeutY+x7pE5AMB8GA1UdIwQY
MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt
NmQxZmE0MmQwYjgwLzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw
LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvMWjVRv
rVrvlBW0kO4lzc3RYbScc/aWrzP8U4/fj0Jp+mfisE6IMnncsBhCkv1cdjC/wG9C
ifluqyuif8YXE1/itC5i+saAkeTvkeULcLbzvlymjtJ5G966QmrGeRmH7034OO7k
A+9GfA0lqt8XslkeRuHjJ/CsAoR/ZYXbVAkEhJXF5LqjgiScsec9zVVcdve6M83t
3PJJ/68h3deFbqdDb35BZWqtsYoGj3I5vP9eL4TMoImmkMawPfw/1jpfwVVuu3LS
Zi/uFiMEOdxfJFPNoPPEgQjMI804YJvVY1PtJQobxwZl065onpbeyiJ/vJmP1Odq
4+ZqfYWmTjHK3A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:46:30 2025 by rpki-client