Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: +MHT1OMxoFG3Yz3Uh0skLmg70GSPoa6urXIf9h4W978=
Subject key identifier: 8D:1A:52:50:90:4E:10:5E:2B:89:0E:27:01:C3:8C:FF:C1:BB:56:36
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 01974FD804578E6072FFD5E9C0FF9D4D80C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 14:00:46 +0000
Manifest this update: Sun 08 Jun 2025 14:00:46 +0000
Manifest next update: Mon 09 Jun 2025 14:00:46 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: f1j2K+wkSGCF5efprmIObHFPeSRDmrd1scg+AIANRPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:04:57:8e:60:72:ff:d5:e9:c0:ff:9d:4d:80:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jun 8 14:00:46 2025 GMT
Not After : Jun 9 14:00:46 2025 GMT
Subject: CN=8d1a5250904e105e2b890e2701c38cffc1bb5636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:a0:a5:5a:05:03:f0:69:61:22:85:a7:06:
e1:ef:57:fe:d0:0b:07:90:ee:f6:e6:71:1e:cf:58:
0f:22:f0:27:0c:b9:7a:c1:08:68:c1:09:4f:dc:42:
77:6a:9a:ff:e5:36:c0:c9:76:d8:fe:fb:0e:fb:f9:
1a:18:bf:8d:8c:05:c0:90:9a:c0:a4:79:b9:71:fe:
eb:82:f1:f4:9f:a4:96:dd:14:a3:40:9d:1c:69:e7:
0a:b7:f5:a2:42:c1:cb:fa:62:ea:f1:02:d5:eb:bb:
f4:04:1d:69:13:75:bd:28:e4:45:d1:b6:59:a7:01:
9b:94:0d:6e:b1:5d:aa:a7:7c:5f:fe:e1:68:19:24:
59:ca:13:e2:88:94:08:8f:6f:32:85:bc:e8:c4:0d:
da:a0:54:25:a1:90:b5:f0:32:5f:0d:46:c8:c5:9e:
38:43:88:a8:ac:0f:81:db:5f:e6:40:cb:ec:37:9d:
04:06:42:c2:56:f9:df:fd:ef:ab:92:34:17:e1:ff:
c2:3c:d3:d3:b0:2a:cf:a4:7e:4c:db:ba:03:91:60:
a3:60:ce:e6:4a:a2:c8:70:6a:0b:6a:03:d8:76:0e:
9f:1c:5b:41:a3:48:77:68:fc:1d:d1:10:76:8d:89:
7a:da:59:9a:f6:47:ed:5a:82:01:fc:05:ea:f1:5e:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:52:50:90:4E:10:5E:2B:89:0E:27:01:C3:8C:FF:C1:BB:56:36
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3b:db:65:33:90:a8:83:5a:75:88:59:0b:ab:11:c2:fe:73:
a2:1b:44:87:06:8c:c6:c0:a0:4e:20:e5:32:5d:11:fe:7c:fb:
1f:cd:83:94:a5:ab:33:d4:46:01:b3:e3:81:a3:63:5f:b3:30:
cf:b7:fd:26:20:8b:94:d4:17:93:d6:96:de:13:df:e6:e8:6b:
74:1d:eb:42:f6:11:09:97:17:c0:56:5e:1b:e4:69:cd:03:df:
92:c0:58:1a:28:1c:0f:a2:44:48:ac:f4:73:90:a5:4e:7c:85:
e1:87:f2:9d:b9:9e:33:70:74:bd:b7:ed:d5:27:ec:58:e1:bd:
d0:c9:48:b7:9d:18:01:59:cb:00:29:6e:9c:bf:f4:42:82:73:
c0:f1:e0:6f:8e:0c:e7:33:7f:98:ef:a7:ff:ac:ce:6a:c2:5d:
d7:9a:55:bb:84:d2:3e:85:ad:4c:15:ea:d5:97:be:95:e8:dc:
76:65:06:26:6d:78:dc:c4:2d:65:c4:63:fe:9b:49:f1:86:05:
a3:7e:42:3c:48:bf:14:e0:36:5a:3d:f2:00:3c:6f:40:3b:02:
bf:a3:94:5c:76:d0:be:76:86:81:a1:16:3a:02:07:ad:cf:0c:
c9:a3:ce:d8:c4:2c:2c:9a:3c:52:be:b2:f3:8a:0f:93:13:ea:
a7:a9:e2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP2ARXjmBy/9XpwP+dTYDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5
YWJhMDQwHhcNMjUwNjA4MTQwMDQ2WhcNMjUwNjA5MTQwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZDFhNTI1MDkwNGUxMDVlMmI4OTBlMjcwMWMzOGNmZmMxYmI1NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdygpVoFA/BpYSKFpwbh71f+0AsH
kO725nEez1gPIvAnDLl6wQhowQlP3EJ3apr/5TbAyXbY/vsO+/kaGL+NjAXAkJrA
pHm5cf7rgvH0n6SW3RSjQJ0caecKt/WiQsHL+mLq8QLV67v0BB1pE3W9KORF0bZZ
pwGblA1usV2qp3xf/uFoGSRZyhPiiJQIj28yhbzoxA3aoFQloZC18DJfDUbIxZ44
Q4iorA+B21/mQMvsN50EBkLCVvnf/e+rkjQX4f/CPNPTsCrPpH5M27oDkWCjYM7m
SqLIcGoLagPYdg6fHFtBo0h3aPwd0RB2jYl62lma9kftWoIB/AXq8V4PmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0aUlCQThBeK4kOJwHDjP/Bu1Y2MB8GA1UdIwQY
MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct
NmJjZTc3OTljYmVhLzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh
LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDvbZTOQ
qINadYhZC6sRwv5zohtEhwaMxsCgTiDlMl0R/nz7H82DlKWrM9RGAbPjgaNjX7Mw
z7f9JiCLlNQXk9aW3hPf5uhrdB3rQvYRCZcXwFZeG+RpzQPfksBYGigcD6JESKz0
c5ClTnyF4YfynbmeM3B0vbft1SfsWOG90MlIt50YAVnLAClunL/0QoJzwPHgb44M
5zN/mO+n/6zOasJd15pVu4TSPoWtTBXq1Ze+lejcdmUGJm143MQtZcRj/ptJ8YYF
o35CPEi/FOA2Wj3yADxvQDsCv6OUXHbQvnaGgaEWOgIHrc8MyaPO2MQsLJo8Ur6y
84oPkxPqp6ni6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:51 2025 by rpki-client