Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: fcz+DUpt6AL7nXJgTuAS+lb355s1F/CtFmSD+oKFE4E=
Subject key identifier: A2:22:17:E8:7A:10:A7:68:72:FF:15:1D:E1:09:4B:AD:A4:B8:6E:6F
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019759B6D82C6FC23EB7C9D817FDF7B7D6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 12:00:44 +0000
Manifest this update: Tue 10 Jun 2025 12:00:44 +0000
Manifest next update: Wed 11 Jun 2025 12:00:44 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: dcsUz/+5XFaXR5QPBiQ1fj1P5u+vLlRuF4QgtAI2Xec=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:d8:2c:6f:c2:3e:b7:c9:d8:17:fd:f7:b7:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 10 12:00:44 2025 GMT
Not After : Jun 11 12:00:44 2025 GMT
Subject: CN=a22217e87a10a76872ff151de1094bada4b86e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:d9:8c:c8:43:0e:58:ae:1d:b8:0e:c1:df:
34:96:fe:aa:9f:6a:df:6d:2b:34:41:b0:ad:a9:e3:
b9:13:7c:88:cb:0e:c4:84:91:18:6a:16:82:eb:0b:
9f:88:7b:e9:59:ed:0c:24:35:ca:29:d0:eb:d5:bc:
da:82:e0:d1:64:c1:c2:9f:35:b4:37:fa:25:c1:5c:
e4:cb:fe:cd:ce:d9:31:f4:f5:04:e3:3e:95:50:66:
f3:4e:54:c1:22:75:5e:cc:f7:e8:5b:00:23:f5:7e:
20:d6:af:af:fb:fd:b0:50:ac:53:23:63:04:4d:9f:
fa:92:64:7a:8d:e6:f5:3b:a7:02:42:f9:6d:b8:08:
ac:86:56:51:14:fe:2c:54:21:f5:e7:02:a5:c3:b6:
bd:e2:b2:c8:0c:4a:70:a1:a2:d6:6f:9d:d1:47:1b:
b2:31:c0:62:bf:d2:b9:64:14:f2:46:45:ac:1f:3d:
e8:bb:88:4e:b5:d7:fc:19:60:d9:a3:21:29:c3:cc:
2e:2e:b8:ba:8d:b0:86:2a:a2:52:87:33:05:45:56:
fb:2c:0e:10:ac:6c:93:ab:48:f9:d2:70:83:2b:8c:
38:4a:04:7f:ae:f5:b1:a3:6f:c4:85:45:7a:54:d4:
fd:de:4b:f4:94:e0:7d:43:b8:40:f0:80:ac:b2:f3:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:17:E8:7A:10:A7:68:72:FF:15:1D:E1:09:4B:AD:A4:B8:6E:6F
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:59:c3:d0:68:90:96:a5:74:32:0d:54:1f:e5:01:58:35:
e2:28:b8:3e:ea:c6:b8:d8:48:38:13:ca:6a:c7:84:6b:40:36:
c6:aa:8f:7a:18:4b:ad:b0:90:25:13:6f:37:09:07:4a:8c:36:
44:b2:f9:76:a0:0d:d7:df:81:03:82:ab:52:18:71:46:da:41:
b5:b9:97:fe:97:d0:79:2f:ae:d6:e5:89:a3:d9:72:fe:41:a9:
aa:64:8f:a3:a2:25:5a:52:d8:f8:65:be:31:bb:9c:d9:1b:08:
67:20:fc:06:b2:2a:c5:a1:82:44:1b:f4:a0:93:f0:69:3b:bb:
ec:91:45:f6:9d:55:8a:4e:b3:84:ff:22:17:2d:cc:0c:84:4d:
93:93:fe:35:dd:82:5e:bb:7a:5b:15:56:9e:c5:83:1c:bf:a0:
7d:04:53:3d:30:3c:63:f3:dd:a1:c7:ca:e1:1a:0c:2f:49:97:
0a:0a:4e:22:85:49:39:8c:7b:a7:1d:90:d0:47:ff:95:5b:a6:
b9:63:ee:32:13:59:b4:99:e9:00:bb:8a:06:6f:de:54:36:08:
f1:41:3b:67:d5:7e:98:0d:00:d4:de:a8:a3:7b:12:dd:ee:23:
fc:14:0d:07:ea:71:57:57:ca:f3:b1:3f:d5:f4:a2:38:d6:ac:
76:6c:5d:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZttgsb8I+t8nYF/33t9a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3
ZmQ0ZmEwHhcNMjUwNjEwMTIwMDQ0WhcNMjUwNjExMTIwMDQ0WjAzMTEwLwYDVQQD
EyhhMjIyMTdlODdhMTBhNzY4NzJmZjE1MWRlMTA5NGJhZGE0Yjg2ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzafZjMhDDliuHbgOwd80lv6qn2rf
bSs0QbCtqeO5E3yIyw7EhJEYahaC6wufiHvpWe0MJDXKKdDr1bzaguDRZMHCnzW0
N/olwVzky/7Nztkx9PUE4z6VUGbzTlTBInVezPfoWwAj9X4g1q+v+/2wUKxTI2ME
TZ/6kmR6jeb1O6cCQvltuAishlZRFP4sVCH15wKlw7a94rLIDEpwoaLWb53RRxuy
McBiv9K5ZBTyRkWsHz3ou4hOtdf8GWDZoyEpw8wuLri6jbCGKqJShzMFRVb7LA4Q
rGyTq0j50nCDK4w4SgR/rvWxo2/EhUV6VNT93kv0lOB9Q7hA8ICssvP1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIiF+h6EKdocv8VHeEJS62kuG5vMB8GA1UdIwQY
MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2hZw9Bo
kJaldDINVB/lAVg14ii4PurGuNhIOBPKaseEa0A2xqqPehhLrbCQJRNvNwkHSow2
RLL5dqAN19+BA4KrUhhxRtpBtbmX/pfQeS+u1uWJo9ly/kGpqmSPo6IlWlLY+GW+
Mbuc2RsIZyD8BrIqxaGCRBv0oJPwaTu77JFF9p1Vik6zhP8iFy3MDIRNk5P+Nd2C
Xrt6WxVWnsWDHL+gfQRTPTA8Y/PdocfK4RoML0mXCgpOIoVJOYx7px2Q0Ef/lVum
uWPuMhNZtJnpALuKBm/eVDYI8UE7Z9V+mA0A1N6oo3sS3e4j/BQNB+pxV1fK87E/
1fSiONasdmxdPg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:43:13 2025 by rpki-client