
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: wgO+ILNLNzzfUFNvh5A2gctd8ziwJkbtl4KcN1ryvtI=
Subject key identifier: 07:58:DC:70:9A:DB:C3:06:0B:58:25:72:D4:AA:B7:82:E9:27:25:AC
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 01974B1FBE3B8C4ACF0D966332093ECCF006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0C62
Signing time: Sat 07 Jun 2025 16:01:00 +0000
Manifest this update: Sat 07 Jun 2025 16:01:00 +0000
Manifest next update: Sun 08 Jun 2025 16:01:00 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: Yh0AQfXqoG6ASbP1K52qyc0a56Rejyrd8TLw8T5LdUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:be:3b:8c:4a:cf:0d:96:63:32:09:3e:cc:f0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Jun 7 16:01:00 2025 GMT
Not After : Jun 8 16:01:00 2025 GMT
Subject: CN=0758dc709adbc3060b582572d4aab782e92725ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:de:0e:62:7d:08:6d:ec:38:2d:6e:cb:7d:
eb:df:d2:e1:8a:b4:55:fb:d9:8f:b1:e9:5a:45:2a:
06:a7:c2:ba:82:ed:43:d9:54:22:49:c6:96:4d:09:
3f:03:fc:18:a0:7c:73:29:d9:e6:47:9c:32:be:38:
19:cd:ed:73:f2:4f:f5:6a:02:85:37:10:c9:4c:7a:
12:03:cb:d8:5b:aa:58:4f:bf:39:ed:06:22:15:ba:
74:32:cc:33:cb:ef:e1:09:1a:df:96:33:60:96:07:
5e:4c:8d:9f:11:b9:d3:f9:21:a8:ee:84:e9:d2:1b:
f5:4d:e1:78:38:40:59:0f:14:ad:61:7d:96:40:a3:
07:3d:15:bf:97:bc:9d:6f:42:0e:a2:3a:09:e4:a6:
72:37:71:11:2d:4c:1a:2b:6c:ac:f7:80:88:8c:e2:
d5:d1:fb:c2:09:ae:4f:8d:d7:90:56:01:88:48:1c:
22:ae:91:26:f4:df:32:33:90:ce:af:41:ee:a1:f7:
14:f8:7d:eb:d5:f5:c4:a4:8d:4f:d1:34:6f:72:bc:
8f:73:85:b6:6d:26:31:23:80:19:93:5f:90:bc:aa:
63:8f:81:26:e1:89:8c:69:c4:dd:0f:93:78:44:4b:
3b:f8:39:71:ab:14:16:aa:89:7a:0f:01:9d:6b:80:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:DC:70:9A:DB:C3:06:0B:58:25:72:D4:AA:B7:82:E9:27:25:AC
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:de:4e:60:d3:c0:b8:7d:7e:6b:91:24:e1:d0:2e:d9:cc:
ef:c6:cf:0a:e0:83:7c:42:c5:c3:cd:f1:9b:45:6b:16:0e:47:
a7:a9:7f:01:54:a7:80:a4:5c:55:e9:1b:35:4c:e3:43:bc:1d:
fe:fa:8e:09:9a:cb:dc:5f:53:b5:e7:2e:7d:b5:8b:6f:7d:cc:
98:f5:f5:15:dc:3a:b7:db:cc:c3:d0:74:28:e4:55:20:3e:63:
0a:5a:85:69:0e:de:82:22:40:c6:e3:b1:6d:6f:d9:54:bb:3f:
10:80:db:de:cc:12:16:5b:fd:15:94:f5:81:88:52:7c:bf:25:
2b:09:40:4c:35:ab:07:61:64:2b:6a:54:0a:af:81:37:99:85:
8a:52:68:5e:8a:74:7a:ef:85:6b:7d:37:b2:86:fb:c6:95:c9:
3e:82:20:9b:73:d1:e9:0c:29:ea:d5:4a:73:99:ec:7e:53:d3:
fb:72:07:c1:5b:58:5c:1f:36:d9:ae:39:34:e3:a3:bc:d8:24:
36:b4:94:2d:db:63:5a:9f:a5:17:a0:1a:f1:4d:18:cc:21:bb:
f1:0c:06:e2:de:87:48:d9:44:39:28:02:7a:e3:d8:f7:69:e3:
ca:ac:ea:59:70:6d:72:c4:4b:6b:ac:d7:31:06:0a:25:b9:ee:
22:98:7e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH747jErPDZZjMgk+zPAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjc5MzllZDcwYzhhZWEzMWJlNDkzZTc4ZTg4ZjQ4NjFm
NTMxMjEwHhcNMjUwNjA3MTYwMTAwWhcNMjUwNjA4MTYwMTAwWjAzMTEwLwYDVQQD
EygwNzU4ZGM3MDlhZGJjMzA2MGI1ODI1NzJkNGFhYjc4MmU5MjcyNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4LeDmJ9CG3sOC1uy33r39LhirRV
+9mPselaRSoGp8K6gu1D2VQiScaWTQk/A/wYoHxzKdnmR5wyvjgZze1z8k/1agKF
NxDJTHoSA8vYW6pYT7857QYiFbp0Mswzy+/hCRrfljNglgdeTI2fEbnT+SGo7oTp
0hv1TeF4OEBZDxStYX2WQKMHPRW/l7ydb0IOojoJ5KZyN3ERLUwaK2ys94CIjOLV
0fvCCa5PjdeQVgGISBwirpEm9N8yM5DOr0HuofcU+H3r1fXEpI1P0TRvcryPc4W2
bSYxI4AZk1+QvKpjj4Em4YmMacTdD5N4REs7+DlxqxQWqol6DwGda4A6EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdY3HCa28MGC1glctSqt4LpJyWsMB8GA1UdIwQY
MBaAFFy3k57XDIrqMb5JPnjoj0hh9TEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYt
MmVkYWZjNjBmMmRmLzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYtMmVkYWZjNjBmMmRm
LzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6DeTmDT
wLh9fmuRJOHQLtnM78bPCuCDfELFw83xm0VrFg5Hp6l/AVSngKRcVekbNUzjQ7wd
/vqOCZrL3F9TtecufbWLb33MmPX1Fdw6t9vMw9B0KORVID5jClqFaQ7egiJAxuOx
bW/ZVLs/EIDb3swSFlv9FZT1gYhSfL8lKwlATDWrB2FkK2pUCq+BN5mFilJoXop0
eu+Fa303sob7xpXJPoIgm3PR6Qwp6tVKc5nsflPT+3IHwVtYXB822a45NOOjvNgk
NrSULdtjWp+lF6Aa8U0YzCG78QwG4t6HSNlEOSgCeuPY92njyqzqWXBtcsRLa6zX
MQYKJbnuIph+Jw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:40:42 2025 by rpki-client