Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: cCUy7DUcudYkrVZYceY4aeCNjBT+3afG4tFqHZ1xLew=
Subject key identifier: E7:0E:A8:E5:BC:0E:3E:BD:A5:68:E2:AB:C5:65:81:1E:E9:4A:75:4D
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 0197470BD29832046B72919343CBC9B67355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0597
Signing time: Fri 06 Jun 2025 21:00:46 +0000
Manifest this update: Fri 06 Jun 2025 21:00:46 +0000
Manifest next update: Sat 07 Jun 2025 21:00:46 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: 8ZxFQhjtvGMehzVdyZj2FM0znp3aIyH9dExaIxHKLQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d2:98:32:04:6b:72:91:93:43:cb:c9:b6:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jun 6 21:00:46 2025 GMT
Not After : Jun 7 21:00:46 2025 GMT
Subject: CN=e70ea8e5bc0e3ebda568e2abc565811ee94a754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:6b:a9:78:2e:f4:72:33:23:85:01:2a:a6:
c0:15:b8:56:36:e7:c3:20:86:2b:7d:3a:ba:11:c3:
e8:4a:3b:5a:bc:18:22:17:f8:22:7e:a3:30:d5:57:
da:15:de:3d:a3:65:19:94:86:6c:b7:0e:8e:a9:ed:
17:d3:2d:4b:16:06:06:61:4d:b0:82:b3:04:41:08:
4a:f4:1f:30:09:75:fa:7b:95:f7:43:75:fd:ac:08:
47:07:7a:a0:ac:45:5d:c9:58:44:37:9d:10:55:87:
e4:1b:a3:c5:cc:93:92:03:af:a4:45:d7:91:a5:d7:
46:4e:9c:af:f0:c2:c0:62:19:fa:99:87:c5:62:7f:
06:14:5c:f9:44:8e:0f:7e:f0:bb:25:85:16:d5:31:
90:8e:99:b4:c4:ca:9d:f4:2f:6a:e9:d6:10:5a:a9:
96:e7:db:b0:f3:4c:cb:89:2e:bf:e0:d1:a1:79:c8:
bf:4e:9a:03:be:8a:75:c7:22:38:c0:94:16:d2:5a:
80:cb:d5:7a:a3:eb:ad:67:58:f9:da:8b:93:ff:29:
81:7a:7a:a3:8f:2e:13:97:0f:a9:9d:56:23:3e:cd:
60:29:ad:e0:94:81:c0:e2:70:a9:9a:a2:62:b9:8c:
d6:d9:0a:a8:27:30:27:fc:0f:09:8b:93:60:4f:5f:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:A8:E5:BC:0E:3E:BD:A5:68:E2:AB:C5:65:81:1E:E9:4A:75:4D
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:46:f3:b2:ee:00:39:74:64:ab:1e:59:91:16:8b:69:e4:b0:
a6:26:c1:bf:71:30:76:1a:c1:37:5d:cb:fa:0c:14:38:34:fd:
54:89:84:31:05:d1:cf:69:ad:d9:fd:c3:52:21:d0:04:0c:5d:
81:f8:88:6b:b8:a0:8e:c2:a0:d9:8c:d7:c9:7d:75:3d:28:14:
fc:5e:e3:e6:a2:64:a7:74:2e:13:9d:bf:42:25:24:c4:2f:3f:
00:8e:a1:8a:d3:b8:2e:2f:59:c0:99:a7:66:28:24:e5:4a:b0:
93:9d:47:14:cd:f3:6f:75:b2:4b:59:a6:48:1b:44:57:9d:53:
db:05:d3:e2:5d:eb:a5:2f:3d:50:47:7f:2f:b9:66:56:ab:bd:
6b:2e:c6:f8:12:f6:ef:32:cd:7b:bc:92:8c:70:75:4d:fa:bc:
2f:7f:ae:56:cd:cb:a7:c6:a6:40:67:ee:09:b2:86:78:fb:9b:
db:24:23:40:69:5f:22:54:24:4a:a2:9c:5c:9c:f0:ce:dd:13:
3b:72:84:ef:c9:ae:2a:00:bc:d8:e0:c2:d8:5d:55:4c:55:b8:
a4:35:28:51:e0:c7:2f:73:89:56:7a:05:ad:e0:24:13:ee:98:
08:7b:1e:63:02:39:f7:e0:5b:f6:9a:ea:d3:19:5c:65:d7:10:
72:2f:4f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC9KYMgRrcpGTQ8vJtnNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1
MTRmNmIwHhcNMjUwNjA2MjEwMDQ2WhcNMjUwNjA3MjEwMDQ2WjAzMTEwLwYDVQQD
EyhlNzBlYThlNWJjMGUzZWJkYTU2OGUyYWJjNTY1ODExZWU5NGE3NTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGNrqXgu9HIzI4UBKqbAFbhWNufD
IIYrfTq6EcPoSjtavBgiF/gifqMw1VfaFd49o2UZlIZstw6Oqe0X0y1LFgYGYU2w
grMEQQhK9B8wCXX6e5X3Q3X9rAhHB3qgrEVdyVhEN50QVYfkG6PFzJOSA6+kRdeR
pddGTpyv8MLAYhn6mYfFYn8GFFz5RI4PfvC7JYUW1TGQjpm0xMqd9C9q6dYQWqmW
59uw80zLiS6/4NGheci/TpoDvop1xyI4wJQW0lqAy9V6o+utZ1j52ouT/ymBenqj
jy4Tlw+pnVYjPs1gKa3glIHA4nCpmqJiuYzW2QqoJzAn/A8Ji5NgT1/2dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcOqOW8Dj69pWjiq8VlgR7pSnVNMB8GA1UdIwQY
MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt
MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw
LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkbzsu4A
OXRkqx5ZkRaLaeSwpibBv3EwdhrBN13L+gwUODT9VImEMQXRz2mt2f3DUiHQBAxd
gfiIa7igjsKg2YzXyX11PSgU/F7j5qJkp3QuE52/QiUkxC8/AI6hitO4Li9ZwJmn
Zigk5Uqwk51HFM3zb3WyS1mmSBtEV51T2wXT4l3rpS89UEd/L7lmVqu9ay7G+BL2
7zLNe7ySjHB1Tfq8L3+uVs3Lp8amQGfuCbKGePub2yQjQGlfIlQkSqKcXJzwzt0T
O3KE78muKgC82ODC2F1VTFW4pDUoUeDHL3OJVnoFreAkE+6YCHseYwI59+Bb9prq
0xlcZdcQci9PaA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:31 2025 by rpki-client