Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: B1rrCjzLm6EMGt2f2LcGkoD11aJX12a2UDMOi8AXGpc=
Subject key identifier: DE:5D:FD:83:4F:19:39:33:A6:B8:A0:87:D1:50:4D:5D:F1:C3:C9:A9
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019852316E42930E3223030A74C1708A6739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 058C
Signing time: Mon 28 Jul 2025 18:00:27 +0000
Manifest this update: Mon 28 Jul 2025 18:00:27 +0000
Manifest next update: Tue 29 Jul 2025 18:00:27 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: JP7+pFPWwlb5BJ6o7A2V0pE5FUkrYQl1yvY4CLA6fSg=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:6e:42:93:0e:32:23:03:0a:74:c1:70:8a:67:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jul 28 18:00:27 2025 GMT
Not After : Jul 29 18:00:27 2025 GMT
Subject: CN=de5dfd834f193933a6b8a087d1504d5df1c3c9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:81:4f:3a:ce:58:2a:6a:9d:5b:37:81:01:
a2:50:8c:29:bc:72:e3:ea:ba:25:39:05:58:d0:a8:
38:37:77:6b:55:7e:8e:d7:ce:b1:32:b2:7e:80:48:
81:bc:13:a2:7d:5f:91:52:aa:22:25:a0:61:f6:5b:
e6:9d:36:85:fc:6c:4e:d6:75:1e:bf:46:08:71:a6:
0e:b3:e8:18:c0:3d:0a:bd:26:32:a8:9d:0c:4a:39:
a8:ed:2a:98:aa:d5:2b:ef:80:9d:27:0b:ec:d3:7f:
b5:69:7d:3b:42:d5:f5:33:f9:9b:a6:01:af:e2:a8:
aa:8a:fd:2c:61:e4:27:f0:54:ec:1c:63:95:58:f9:
ee:53:8d:6a:70:12:f6:f2:7f:f5:87:d7:cb:20:f4:
d0:9d:f0:20:b3:ee:87:2a:3d:16:8e:1b:43:10:b1:
ed:5b:a2:84:6e:d2:00:87:37:41:4d:68:51:d2:f1:
ef:95:78:be:b1:21:7e:29:f3:42:28:4d:34:40:f5:
9d:fe:1e:f5:82:b0:6e:ac:51:b5:ce:bf:f5:70:3e:
23:6e:f3:8d:f9:bb:6f:d2:be:46:95:15:13:c1:7a:
4c:d9:35:ca:45:b4:ea:60:77:f6:03:60:59:c6:55:
79:32:41:a9:39:4b:eb:48:b9:27:3e:2d:bc:99:af:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:FD:83:4F:19:39:33:A6:B8:A0:87:D1:50:4D:5D:F1:C3:C9:A9
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:9f:1d:11:8a:c6:ee:cc:6b:28:5d:ac:0e:62:a1:d5:37:
c7:8b:41:6c:4c:5e:70:8c:36:8a:c7:a0:8c:a7:02:c3:3e:41:
39:f3:fe:3d:a1:d3:86:88:33:69:6e:f3:4c:36:92:e9:33:72:
a4:25:35:d2:31:96:7b:7e:19:a2:92:c4:b0:04:53:f7:fe:0d:
1f:69:5b:ae:c8:fc:cf:96:41:47:8b:89:04:66:32:65:8e:5d:
31:e5:c5:49:4d:6b:fb:96:76:50:bf:56:89:0e:16:3f:d4:ca:
71:4d:f8:0b:7a:41:94:ae:ee:b8:59:5f:ef:e3:84:d2:bd:8f:
59:a6:8c:29:ce:9f:5d:46:82:10:f3:19:51:8a:1a:fb:87:bd:
9f:7a:9f:b7:44:80:10:4d:9a:ee:5c:8a:31:10:51:f6:20:5b:
cc:f3:dc:06:6e:5d:33:f7:65:19:aa:13:87:3d:22:06:1b:34:
92:28:7f:a4:6d:da:76:e6:d0:38:9a:0b:03:a2:c5:a0:d9:66:
5f:1c:88:7f:0e:be:47:2d:dd:3e:15:97:07:da:6b:a2:3c:40:
c4:2f:fc:98:09:a6:3f:ea:29:d2:84:a8:b6:77:16:fc:f6:31:
97:7d:f3:c5:db:95:33:df:c0:c7:1e:27:db:fa:79:75:ec:78:
42:2a:ab:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSMW5Ckw4yIwMKdMFwimc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjUwNzI4MTgwMDI3WhcNMjUwNzI5MTgwMDI3WjAzMTEwLwYDVQQD
EyhkZTVkZmQ4MzRmMTkzOTMzYTZiOGEwODdkMTUwNGQ1ZGYxYzNjOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDKBTzrOWCpqnVs3gQGiUIwpvHLj
6rolOQVY0Kg4N3drVX6O186xMrJ+gEiBvBOifV+RUqoiJaBh9lvmnTaF/GxO1nUe
v0YIcaYOs+gYwD0KvSYyqJ0MSjmo7SqYqtUr74CdJwvs03+1aX07QtX1M/mbpgGv
4qiqiv0sYeQn8FTsHGOVWPnuU41qcBL28n/1h9fLIPTQnfAgs+6HKj0WjhtDELHt
W6KEbtIAhzdBTWhR0vHvlXi+sSF+KfNCKE00QPWd/h71grBurFG1zr/1cD4jbvON
+btv0r5GlRUTwXpM2TXKRbTqYHf2A2BZxlV5MkGpOUvrSLknPi28ma+8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5d/YNPGTkzprigh9FQTV3xw8mpMB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxmfHRGK
xu7MayhdrA5iodU3x4tBbExecIw2isegjKcCwz5BOfP+PaHThogzaW7zTDaS6TNy
pCU10jGWe34ZopLEsART9/4NH2lbrsj8z5ZBR4uJBGYyZY5dMeXFSU1r+5Z2UL9W
iQ4WP9TKcU34C3pBlK7uuFlf7+OE0r2PWaaMKc6fXUaCEPMZUYoa+4e9n3qft0SA
EE2a7lyKMRBR9iBbzPPcBm5dM/dlGaoThz0iBhs0kih/pG3adubQOJoLA6LFoNlm
XxyIfw6+Ry3dPhWXB9projxAxC/8mAmmP+op0oSotncW/PYxl33zxduVM9/Axx4n
2/p5dex4Qiqrhg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:35 2025 by rpki-client