Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: fMGKz4xzWXhC0NMO9Hfq+F3ZrZYkv5VhvJdoLJuLHc0=
Subject key identifier: 24:5D:22:6C:D0:5B:E8:ED:13:1F:1B:5A:A2:AE:5E:72:3A:73:79:98
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 01976BBCE54CE4923559688E808AB0B0B6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 00:00:30 +0000
Manifest this update: Sat 14 Jun 2025 00:00:30 +0000
Manifest next update: Sun 15 Jun 2025 00:00:30 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: TB2efKjhZZRWXR6MGR5vEXXYh7rBHZnJXusjyRkxYCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:e5:4c:e4:92:35:59:68:8e:80:8a:b0:b0:b6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Jun 14 00:00:30 2025 GMT
Not After : Jun 15 00:00:30 2025 GMT
Subject: CN=245d226cd05be8ed131f1b5aa2ae5e723a737998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:3b:ce:7a:60:50:7a:5b:f7:06:0a:10:d4:
e0:63:ea:51:53:c3:6e:68:d2:5a:90:d3:66:53:1a:
f5:e7:69:64:1d:9b:15:47:91:6a:44:0b:27:43:af:
ae:8d:fb:40:04:b4:61:76:4e:af:77:2d:36:74:f0:
01:f6:e5:5e:87:5d:fc:c5:c1:04:8f:ee:3d:b9:d0:
52:7b:41:63:c5:c1:80:38:91:3f:dc:c3:28:62:33:
4e:7c:48:47:d9:01:5e:55:e5:4c:25:17:75:35:6b:
da:3b:76:fa:7d:f6:26:bb:23:94:ee:45:e7:eb:e5:
77:2f:b5:53:3b:84:88:4c:ad:ac:1d:97:c0:10:0a:
22:27:f4:98:dd:91:a5:e2:6e:48:a4:d0:10:98:25:
bf:d9:ed:f8:9b:4c:1b:52:9a:94:f5:2e:dd:21:7d:
e9:df:3a:83:f3:77:ad:66:f1:82:0b:e1:ed:a5:9f:
59:11:3a:51:d7:04:89:d6:8e:38:af:da:86:a2:0e:
22:e3:2d:d8:81:fa:af:4c:b1:d8:99:c9:35:7a:18:
0e:78:ce:43:10:9c:0a:c6:56:c5:15:90:9c:ef:bc:
f8:bd:77:99:ca:cf:2d:a3:8c:49:5f:19:b1:a4:71:
aa:bf:3a:97:61:22:4a:2d:17:95:a7:e9:a6:08:98:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:22:6C:D0:5B:E8:ED:13:1F:1B:5A:A2:AE:5E:72:3A:73:79:98
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:bd:30:9c:5b:3a:6f:48:14:6c:eb:c8:94:54:c8:a6:ca:
f2:93:12:f1:ac:cc:f9:a7:38:2c:63:1a:16:ea:fe:90:45:47:
36:f4:75:01:34:9b:2d:cd:51:9a:9e:05:17:92:5d:11:f6:0b:
0e:31:32:22:51:2b:86:00:b6:c9:b5:52:c7:29:67:ab:8c:5a:
51:15:a7:7e:71:df:4c:34:08:51:50:f9:2a:34:65:ff:04:bc:
4d:8f:ba:00:9d:4c:a5:27:0f:a5:e6:bf:ae:26:7d:c1:24:6e:
59:47:7b:ea:c9:75:11:59:5c:0a:0b:07:a9:c0:ed:01:7a:04:
d3:7b:62:01:3b:82:1c:88:43:84:f2:ee:d9:42:4d:34:90:21:
57:a9:69:23:55:03:4c:4e:1a:06:cf:dc:fb:07:63:92:b6:d3:
ba:c1:78:23:e5:b4:6d:ae:74:cb:9c:86:9a:4d:dc:b0:10:a0:
97:7a:3b:3c:f8:f6:a5:44:f2:a7:78:26:b3:0f:cf:4e:a9:20:
ae:ef:1a:d7:b8:dd:c5:68:b7:51:9c:bf:eb:f9:ee:d1:da:5c:
d8:f5:a4:f3:e8:06:80:1e:58:fd:b2:bd:d7:52:c1:ff:12:8c:
0f:4b:da:36:5e:23:23:d7:c8:a2:d8:3c:26:1f:55:fc:5c:92:
be:46:63:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvOVM5JI1WWiOgIqwsLatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjIyMDNiYzAyODY3MDIzNDVhYzQ2NTUwMGI0NDg4YzAz
MWM2YjUwHhcNMjUwNjE0MDAwMDMwWhcNMjUwNjE1MDAwMDMwWjAzMTEwLwYDVQQD
EygyNDVkMjI2Y2QwNWJlOGVkMTMxZjFiNWFhMmFlNWU3MjNhNzM3OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5k7znpgUHpb9wYKENTgY+pRU8Nu
aNJakNNmUxr152lkHZsVR5FqRAsnQ6+ujftABLRhdk6vdy02dPAB9uVeh138xcEE
j+49udBSe0FjxcGAOJE/3MMoYjNOfEhH2QFeVeVMJRd1NWvaO3b6ffYmuyOU7kXn
6+V3L7VTO4SITK2sHZfAEAoiJ/SY3ZGl4m5IpNAQmCW/2e34m0wbUpqU9S7dIX3p
3zqD83etZvGCC+HtpZ9ZETpR1wSJ1o44r9qGog4i4y3YgfqvTLHYmck1ehgOeM5D
EJwKxlbFFZCc77z4vXeZys8to4xJXxmxpHGqvzqXYSJKLReVp+mmCJiaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRdImzQW+jtEx8bWqKuXnI6c3mYMB8GA1UdIwQY
MBaAFMXyIDvAKGcCNFrEZVALRIjAMca1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYt
MjQ0NWY2MzRlOTI4LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYtMjQ0NWY2MzRlOTI4
LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy69MJxb
Om9IFGzryJRUyKbK8pMS8azM+ac4LGMaFur+kEVHNvR1ATSbLc1Rmp4FF5JdEfYL
DjEyIlErhgC2ybVSxylnq4xaURWnfnHfTDQIUVD5KjRl/wS8TY+6AJ1MpScPpea/
riZ9wSRuWUd76sl1EVlcCgsHqcDtAXoE03tiATuCHIhDhPLu2UJNNJAhV6lpI1UD
TE4aBs/c+wdjkrbTusF4I+W0ba50y5yGmk3csBCgl3o7PPj2pUTyp3gmsw/PTqkg
ru8a17jdxWi3UZy/6/nu0dpc2PWk8+gGgB5Y/bK911LB/xKMD0vaNl4jI9fIotg8
Jh9V/FySvkZj9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:31:51 2025 by rpki-client