Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: gld3iO1hlS/7qwJePz7rLxIPL8g2yCNnD2dBUxyu7fw=
Subject key identifier: 19:8E:AA:A0:4E:E2:88:FB:09:7F:E5:5D:B4:F3:BE:10:6D:12:E9:A0
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0197439D390BDE114D93A30D128A9505C282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 08E6
Signing time: Fri 06 Jun 2025 05:01:06 +0000
Manifest this update: Fri 06 Jun 2025 05:01:06 +0000
Manifest next update: Sat 07 Jun 2025 05:01:06 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: dyuxBmXvyZq7UyqdKWGuHLvv4qDNNr9QzFDv5jZnz+g=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:39:0b:de:11:4d:93:a3:0d:12:8a:95:05:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jun 6 05:01:06 2025 GMT
Not After : Jun 7 05:01:06 2025 GMT
Subject: CN=198eaaa04ee288fb097fe55db4f3be106d12e9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:e0:8b:43:55:14:5a:90:eb:8c:56:6c:85:
da:eb:ab:28:e3:dd:f7:79:38:00:93:81:e7:a7:5c:
22:da:f4:47:7e:4e:c0:30:81:02:bc:65:6b:6c:e0:
f5:6e:43:1a:8a:e0:a1:df:65:95:f9:ef:a1:17:5a:
49:dc:62:ae:c6:be:10:a2:57:6e:dd:d4:ef:e0:95:
f2:25:df:f0:9c:59:47:45:2a:13:b2:c1:e0:d7:5f:
97:1d:24:ef:d6:c3:10:89:65:25:3f:03:9e:e9:c2:
29:f2:42:0f:f6:31:24:81:72:81:bc:16:2e:ec:88:
2b:7f:ee:cb:98:17:2a:21:7e:d3:8c:7f:2d:07:eb:
c4:ca:bc:46:3d:13:6a:04:48:a0:c4:f0:7b:7b:da:
a0:b6:7e:5d:2e:76:64:17:20:5c:67:5a:5e:bb:44:
e0:3a:8b:ff:86:9d:71:8e:f2:fb:05:54:02:10:d6:
96:f3:a0:e6:a5:26:49:3f:7f:87:ab:bc:e1:4a:36:
3a:96:98:c1:2e:9c:ff:34:f7:74:f5:1c:64:6e:77:
aa:bf:80:73:78:65:97:57:ac:62:ce:74:0c:e0:4b:
db:69:ff:ba:6a:0f:9b:32:47:d4:71:22:78:df:46:
a2:cd:cc:35:ab:cd:2d:1e:94:d6:59:4f:13:f4:16:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:AA:A0:4E:E2:88:FB:09:7F:E5:5D:B4:F3:BE:10:6D:12:E9:A0
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8f:49:85:9f:12:10:e6:19:28:ad:cd:44:eb:4e:51:7d:70:
d3:a1:85:5f:05:6c:95:3b:bd:13:7e:45:9b:e2:28:cb:bf:ab:
a3:a5:1e:32:17:0d:31:09:08:ed:fc:cd:6b:07:58:65:34:62:
da:35:63:83:1c:57:3d:71:bc:69:9c:da:4c:1d:d2:8a:3c:f6:
e2:2a:15:92:86:55:22:96:e8:03:68:02:77:c7:67:58:c0:67:
7f:f5:2d:33:43:03:f1:f5:43:af:d1:bd:26:08:44:aa:11:03:
7b:49:d0:65:b4:6a:40:ae:21:a4:42:d8:56:10:d5:56:b1:9b:
30:c0:3c:69:4e:1f:c9:7f:94:73:75:62:f6:c3:f1:14:1c:a8:
72:df:55:1c:69:b6:28:ad:df:db:35:0a:84:e7:52:45:e0:a6:
55:3f:b6:d8:67:7d:da:1e:a7:7f:06:62:a2:96:a0:83:0b:6e:
a9:38:26:fe:90:e6:d2:7d:89:c4:cd:06:c5:bb:01:73:7b:f9:
c5:95:c5:2a:a6:bb:a7:dd:e0:48:8f:49:85:e7:b9:85:ff:e2:
a0:5b:d6:e0:2b:10:e8:0b:aa:4b:4b:3d:fe:46:0c:93:f9:39:
dc:1a:1d:41:86:b6:6c:b7:ca:fa:b8:6f:05:80:ae:d3:bb:e8:
e8:4a:ef:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdDnTkL3hFNk6MNEoqVBcKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4
OTE0YTIwHhcNMjUwNjA2MDUwMTA2WhcNMjUwNjA3MDUwMTA2WjAzMTEwLwYDVQQD
EygxOThlYWFhMDRlZTI4OGZiMDk3ZmU1NWRiNGYzYmUxMDZkMTJlOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp23gi0NVFFqQ64xWbIXa66so4933
eTgAk4Hnp1wi2vRHfk7AMIECvGVrbOD1bkMaiuCh32WV+e+hF1pJ3GKuxr4Qoldu
3dTv4JXyJd/wnFlHRSoTssHg11+XHSTv1sMQiWUlPwOe6cIp8kIP9jEkgXKBvBYu
7Igrf+7LmBcqIX7TjH8tB+vEyrxGPRNqBEigxPB7e9qgtn5dLnZkFyBcZ1peu0Tg
Oov/hp1xjvL7BVQCENaW86DmpSZJP3+Hq7zhSjY6lpjBLpz/NPd09Rxkbneqv4Bz
eGWXV6xiznQM4Evbaf+6ag+bMkfUcSJ430aizcw1q80tHpTWWU8T9BaaiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmOqqBO4oj7CX/lXbTzvhBtEumgMB8GA1UdIwQY
MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt
NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm
LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo9JhZ8S
EOYZKK3NROtOUX1w06GFXwVslTu9E35Fm+Ioy7+ro6UeMhcNMQkI7fzNawdYZTRi
2jVjgxxXPXG8aZzaTB3Sijz24ioVkoZVIpboA2gCd8dnWMBnf/UtM0MD8fVDr9G9
JghEqhEDe0nQZbRqQK4hpELYVhDVVrGbMMA8aU4fyX+Uc3Vi9sPxFByoct9VHGm2
KK3f2zUKhOdSReCmVT+22Gd92h6nfwZiopaggwtuqTgm/pDm0n2JxM0GxbsBc3v5
xZXFKqa7p93gSI9Jhee5hf/ioFvW4CsQ6AuqS0s9/kYMk/k53BodQYa2bLfK+rhv
BYCu07vo6ErvvQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 11:38:01 2025 by rpki-client