Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: +MahuZJ3LpGLgmTabTUjmgTM8PwQ3Z8cwu56XvpFOZA=
Subject key identifier: 11:C4:E0:F2:78:64:B5:69:D0:DC:A0:FA:96:A0:40:90:85:39:A9:6D
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0197488CFD24B740089EAC2B3403CE9A63E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:28 +0000
Manifest this update: Sat 07 Jun 2025 04:01:28 +0000
Manifest next update: Sun 08 Jun 2025 04:01:28 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 1EyA9+1aiHpiTOrbcrBmlZNKU9BMK9HdVizJaIAhF1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:fd:24:b7:40:08:9e:ac:2b:34:03:ce:9a:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jun 7 04:01:28 2025 GMT
Not After : Jun 8 04:01:28 2025 GMT
Subject: CN=11c4e0f27864b569d0dca0fa96a040908539a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:19:3d:bf:86:34:ec:90:33:03:31:e0:4c:
97:a0:43:28:97:25:bd:13:07:e4:c8:2b:a1:27:17:
36:11:74:28:71:60:d0:11:e3:a5:99:e0:97:fb:98:
bb:a3:ca:83:9b:d4:6d:5e:6e:f4:a3:88:81:19:3a:
a3:f5:49:eb:df:64:d1:bf:9e:1a:fd:be:be:90:43:
ec:8f:db:77:b9:eb:36:40:bb:af:cc:22:66:eb:14:
56:52:10:e0:02:d3:bd:96:c0:5a:fc:e4:c9:5d:e6:
58:7c:d8:cd:e9:f4:1b:11:30:3b:91:81:a1:67:08:
36:33:80:b8:24:f7:39:ed:30:5d:8f:86:0f:d8:06:
30:c5:91:35:7a:fe:45:40:54:dd:b6:24:38:eb:b9:
23:08:c0:8d:aa:92:7c:80:7c:40:01:a5:36:11:50:
a6:33:9f:f6:ab:fc:00:41:8d:e4:c4:04:2d:f6:51:
2b:83:fe:f8:2b:52:ab:f2:94:76:c2:64:5f:8d:a0:
da:5b:f9:bf:15:3c:ab:e5:4d:fa:4b:41:9d:ab:97:
32:65:a3:9f:d8:75:fb:f6:67:22:7d:76:ef:ea:aa:
4e:55:da:c0:4c:ce:0f:d4:74:85:01:69:56:67:81:
64:46:37:8d:e9:a7:4b:45:97:f2:96:ec:d1:b9:7e:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:E0:F2:78:64:B5:69:D0:DC:A0:FA:96:A0:40:90:85:39:A9:6D
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:25:e0:02:64:ba:d7:32:69:1e:c0:e0:f8:cc:a2:ae:76:
cf:e7:b9:71:91:be:26:e7:0c:22:5f:80:2a:82:cb:ea:ef:a2:
53:85:d5:8d:78:66:31:50:9d:0e:0b:bc:12:e8:99:3e:2e:88:
c1:7e:76:40:44:44:39:2e:be:ab:94:04:7c:52:55:73:a6:09:
ff:24:87:4a:8c:5d:c0:d2:a7:a9:80:47:85:13:fb:0f:5a:d9:
6c:80:84:e7:23:3d:8c:02:2d:b4:69:9c:9a:12:b1:e0:a9:eb:
12:46:c3:a9:39:8c:40:cb:dc:5a:22:03:ff:29:42:5f:bb:fa:
e6:7a:63:f9:00:20:f4:c2:04:08:0e:bb:ae:57:ca:d6:6f:c7:
4d:11:c1:84:8e:88:a0:a8:f6:93:42:3e:a8:4a:04:bc:ae:4b:
f1:33:0c:bb:a3:2a:01:fa:0c:48:5e:aa:e8:d4:61:cc:b3:2b:
f3:02:b4:52:94:30:d8:df:79:c6:1e:2f:a1:f9:ae:8c:f0:08:
21:93:2c:19:d9:27:a5:2d:c3:d1:e2:37:72:dc:12:ea:9f:2f:
6c:f4:2f:2e:d8:10:93:34:d1:d8:b8:5e:87:f3:92:4e:e4:06:
0b:d7:36:11:72:29:29:04:3a:76:60:6a:ce:9c:dd:0d:81:47:
a9:52:23:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjP0kt0AInqwrNAPOmmPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4
OWQ3ZmIwHhcNMjUwNjA3MDQwMTI4WhcNMjUwNjA4MDQwMTI4WjAzMTEwLwYDVQQD
EygxMWM0ZTBmMjc4NjRiNTY5ZDBkY2EwZmE5NmEwNDA5MDg1MzlhOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuoZPb+GNOyQMwMx4EyXoEMolyW9
EwfkyCuhJxc2EXQocWDQEeOlmeCX+5i7o8qDm9RtXm70o4iBGTqj9Unr32TRv54a
/b6+kEPsj9t3ues2QLuvzCJm6xRWUhDgAtO9lsBa/OTJXeZYfNjN6fQbETA7kYGh
Zwg2M4C4JPc57TBdj4YP2AYwxZE1ev5FQFTdtiQ467kjCMCNqpJ8gHxAAaU2EVCm
M5/2q/wAQY3kxAQt9lErg/74K1Kr8pR2wmRfjaDaW/m/FTyr5U36S0Gdq5cyZaOf
2HX79mcifXbv6qpOVdrATM4P1HSFAWlWZ4FkRjeN6adLRZfyluzRuX6IbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHE4PJ4ZLVp0Nyg+pagQJCFOaltMB8GA1UdIwQY
MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt
OWQzZTU5ZGE1YWQxLzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx
LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcScl4AJk
utcyaR7A4PjMoq52z+e5cZG+JucMIl+AKoLL6u+iU4XVjXhmMVCdDgu8EuiZPi6I
wX52QEREOS6+q5QEfFJVc6YJ/ySHSoxdwNKnqYBHhRP7D1rZbICE5yM9jAIttGmc
mhKx4KnrEkbDqTmMQMvcWiID/ylCX7v65npj+QAg9MIECA67rlfK1m/HTRHBhI6I
oKj2k0I+qEoEvK5L8TMMu6MqAfoMSF6q6NRhzLMr8wK0UpQw2N95xh4vofmujPAI
IZMsGdknpS3D0eI3ctwS6p8vbPQvLtgQkzTR2Lheh/OSTuQGC9c2EXIpKQQ6dmBq
zpzdDYFHqVIjrA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:46 2025 by rpki-client