Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: DaKCnrJjIS+a0lVrpdHGcSLvILIhpPu2Lrd/UO4f9g0=
Subject key identifier: E9:11:51:F7:91:2B:EA:54:7E:76:53:21:24:0E:16:D1:DE:C1:1D:47
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019747E71EE44C2E5F19DD95E32FEE7CA0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 12B6
Signing time: Sat 07 Jun 2025 01:00:18 +0000
Manifest this update: Sat 07 Jun 2025 01:00:18 +0000
Manifest next update: Sun 08 Jun 2025 01:00:18 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: G50YqUiZpd7p8w6bIwacpxIpoAxk/7MccPPCzMj0n+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:1e:e4:4c:2e:5f:19:dd:95:e3:2f:ee:7c:a0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Jun 7 01:00:18 2025 GMT
Not After : Jun 8 01:00:18 2025 GMT
Subject: CN=e91151f7912bea547e765321240e16d1dec11d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:10:6c:fb:aa:f9:77:7a:ea:83:da:36:48:
4e:eb:f1:0a:cc:ca:81:17:53:f8:fc:75:ff:58:84:
7f:ec:60:01:40:8b:98:17:6f:1e:8c:60:e1:ea:93:
b6:4b:dd:71:84:5c:90:71:e2:77:0f:65:65:76:8e:
5a:0c:f4:96:08:9b:ed:f1:2d:22:ac:ea:4d:3b:c0:
8a:15:80:9c:65:5d:84:03:7a:f6:76:75:10:33:06:
48:bc:e6:d2:5d:f0:67:3b:aa:fa:8c:66:9d:20:2d:
3d:23:a4:0c:da:30:db:72:2b:ac:d5:4e:1a:ae:2a:
f5:f3:93:b6:b5:68:77:4a:e5:01:9b:17:e2:10:ea:
91:a2:d4:36:ff:61:78:e8:76:92:9a:e8:56:83:6b:
25:38:f1:c9:8c:03:0e:30:ec:cf:53:89:09:dd:23:
a5:a1:b0:1a:9d:be:b5:7f:6b:0c:ee:f7:67:33:63:
22:2a:17:02:ee:19:8d:3f:5d:3f:40:c0:e4:5a:d2:
28:a3:53:ab:74:4c:c7:de:6e:9d:e0:fc:6e:ea:16:
b2:77:cb:23:cc:89:09:ee:ca:d7:06:04:f4:7b:45:
24:58:39:be:3b:a0:b5:56:d7:87:e5:62:a5:3c:8c:
e9:35:49:29:ab:5a:65:d1:4d:13:43:1c:ec:91:a9:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:11:51:F7:91:2B:EA:54:7E:76:53:21:24:0E:16:D1:DE:C1:1D:47
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b3:1c:b6:a8:6d:4f:41:81:0e:d4:c2:f7:ee:e0:22:20:94:
a8:d2:9c:fc:66:81:8a:9e:ba:a8:39:99:00:32:35:9a:3d:2b:
1e:03:16:dc:ed:c6:12:6a:c5:5a:f1:d9:20:de:81:e1:91:c8:
ca:b5:d6:a3:a2:34:17:63:dd:f2:24:87:33:cc:1d:8a:f9:54:
8f:6a:26:e3:eb:ba:b8:e5:f5:15:d9:7c:c6:43:94:1d:0a:37:
69:ef:ee:03:ca:17:ad:06:23:79:72:09:3d:f5:fe:1c:2a:70:
82:4d:f8:be:6f:00:96:f1:26:b7:66:e4:78:c2:c0:c7:21:c0:
ec:82:ba:ea:12:87:0d:53:19:a5:78:76:1a:fb:ab:af:3b:64:
fd:7b:be:78:60:c4:bb:87:76:46:cd:be:46:86:08:af:29:dd:
af:05:63:01:d3:53:38:d4:db:44:37:90:69:ce:a8:f5:2d:7e:
04:0d:61:41:b1:47:60:8f:78:6a:bd:b8:e5:49:8d:54:6c:da:
55:db:0c:66:8e:52:19:cb:75:a2:ce:a7:0f:ec:e9:76:ba:72:
17:af:2a:cc:9c:1f:ae:17:a3:ff:5b:8a:20:46:92:a8:6c:9c:
de:bb:bb:65:b7:f6:32:bd:7b:14:11:44:3d:06:65:65:32:38:
2b:02:06:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH5x7kTC5fGd2V4y/ufKCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzA0NGI0Yjk2ZjIxZmE5YTg0NjQ1YmQ1ZTNhOWUxOTcy
MzA4MmQwHhcNMjUwNjA3MDEwMDE4WhcNMjUwNjA4MDEwMDE4WjAzMTEwLwYDVQQD
EyhlOTExNTFmNzkxMmJlYTU0N2U3NjUzMjEyNDBlMTZkMWRlYzExZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x8QbPuq+Xd66oPaNkhO6/EKzMqB
F1P4/HX/WIR/7GABQIuYF28ejGDh6pO2S91xhFyQceJ3D2Vldo5aDPSWCJvt8S0i
rOpNO8CKFYCcZV2EA3r2dnUQMwZIvObSXfBnO6r6jGadIC09I6QM2jDbcius1U4a
rir185O2tWh3SuUBmxfiEOqRotQ2/2F46HaSmuhWg2slOPHJjAMOMOzPU4kJ3SOl
obAanb61f2sM7vdnM2MiKhcC7hmNP10/QMDkWtIoo1OrdEzH3m6d4Pxu6hayd8sj
zIkJ7srXBgT0e0UkWDm+O6C1VteH5WKlPIzpNUkpq1pl0U0TQxzskamnuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkRUfeRK+pUfnZTISQOFtHewR1HMB8GA1UdIwQY
MBaAFF7ARLS5byH6moRkW9XjqeGXIwgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2It
NjFlNGViZjY3MWFiLzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2ItNjFlNGViZjY3MWFi
LzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrMctqht
T0GBDtTC9+7gIiCUqNKc/GaBip66qDmZADI1mj0rHgMW3O3GEmrFWvHZIN6B4ZHI
yrXWo6I0F2Pd8iSHM8wdivlUj2om4+u6uOX1Fdl8xkOUHQo3ae/uA8oXrQYjeXIJ
PfX+HCpwgk34vm8AlvEmt2bkeMLAxyHA7IK66hKHDVMZpXh2Gvurrztk/Xu+eGDE
u4d2Rs2+RoYIryndrwVjAdNTONTbRDeQac6o9S1+BA1hQbFHYI94ar245UmNVGza
VdsMZo5SGct1os6nD+zpdrpyF68qzJwfrhej/1uKIEaSqGyc3ru7Zbf2Mr17FBFE
PQZlZTI4KwIGBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:10 2025 by rpki-client