Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: QGsSdS2lyA+yTmFgOy5rxQ64si6IE1pzp/FDGmR+M04=
Subject key identifier: 5D:F0:DE:E5:06:81:6A:3B:00:1E:C1:3E:06:54:88:79:76:21:81:2E
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0197673B7D38193AA913B6A877C823C9AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 03:00:41 +0000
Manifest this update: Fri 13 Jun 2025 03:00:41 +0000
Manifest next update: Sat 14 Jun 2025 03:00:41 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 0CxTFKoOvN8ywkybB1mEljj3dSPig3zhgc86vnfwQ8E=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:7d:38:19:3a:a9:13:b6:a8:77:c8:23:c9:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jun 13 03:00:41 2025 GMT
Not After : Jun 14 03:00:41 2025 GMT
Subject: CN=5df0dee506816a3b001ec13e065488797621812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:8c:93:0b:9f:da:ff:d3:dd:bc:74:a8:ef:
49:d5:b2:c0:8b:68:c3:0b:3a:8f:bb:3f:75:69:30:
d9:cf:9d:44:07:21:b8:68:77:0a:7d:b5:da:ae:2f:
25:83:97:f7:54:38:4f:2e:d2:bc:f8:a7:8d:e9:d5:
3c:18:0f:65:93:e9:99:1d:b2:61:c6:17:de:e6:e7:
25:0b:93:ff:6e:b7:53:80:dd:a2:3b:5a:a1:be:b3:
c5:aa:e2:11:4d:b8:95:54:8f:b0:71:3b:3d:72:b5:
40:2d:41:e2:4b:45:2a:8d:95:1b:cd:b3:59:f7:ef:
44:12:25:a9:04:29:0f:cc:8d:0f:8a:16:50:be:47:
d3:5d:6c:2b:51:cb:bc:0b:36:8d:e1:60:de:85:83:
58:23:54:59:e1:3f:9f:42:2c:19:8f:77:88:d7:a5:
3a:2e:83:51:da:4f:95:22:2a:f2:9f:e7:8b:c8:2e:
7a:8d:6f:1b:23:08:8b:5a:5b:ef:1f:f7:fa:bc:4b:
f5:3d:d2:cf:38:66:bc:1a:7f:95:a9:f4:60:02:79:
02:57:c4:19:2b:2f:5c:ff:cd:61:bd:56:d0:ea:7e:
c7:b3:8f:90:43:19:ad:5d:ac:d0:61:06:d4:67:7d:
fe:c7:1b:9b:d5:72:ec:8a:36:67:9f:70:e1:c5:03:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F0:DE:E5:06:81:6A:3B:00:1E:C1:3E:06:54:88:79:76:21:81:2E
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0e:69:4d:a1:94:c4:d9:81:67:32:0c:da:bf:b2:29:db:dc:
00:35:97:3d:2f:f2:20:54:c2:dd:85:4e:cc:43:db:e1:d4:07:
6f:eb:9c:d9:9a:24:c2:6a:e6:84:8a:da:86:1c:f9:f5:eb:b0:
e3:7e:ef:51:63:17:d6:9c:23:98:60:60:e7:2a:a9:97:26:40:
a9:89:65:90:45:df:99:13:96:d5:51:cb:29:af:29:0b:be:9c:
8f:5b:a4:f3:09:79:16:44:8e:99:9a:6c:31:30:05:ec:b1:a4:
c7:25:f9:3b:3e:53:f1:a1:51:68:39:a7:93:59:4f:66:85:a3:
00:12:43:5d:52:9b:ce:47:0c:b6:b8:7c:42:cc:31:65:c9:57:
47:b8:51:62:59:db:fd:1e:38:4e:ad:75:c1:8a:f3:64:ed:fe:
76:a7:a3:d8:d8:bc:cc:36:ce:56:5c:3e:3e:62:86:11:d6:2c:
44:f3:79:ef:df:9d:fb:8f:55:44:1a:55:1e:7a:40:14:60:44:
3b:24:1e:53:25:6a:17:8c:89:03:10:f3:02:8e:55:86:28:88:
a0:6c:66:b5:41:d6:c0:76:ff:4d:c1:90:8d:f2:8e:a1:7f:3a:
eb:a9:8b:71:8f:4f:1b:40:fb:16:17:6f:95:6c:bb:65:75:0b:
b4:e0:fd:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO304GTqpE7aod8gjyauOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1
NTM1MzMwHhcNMjUwNjEzMDMwMDQxWhcNMjUwNjE0MDMwMDQxWjAzMTEwLwYDVQQD
Eyg1ZGYwZGVlNTA2ODE2YTNiMDAxZWMxM2UwNjU0ODg3OTc2MjE4MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10eMkwuf2v/T3bx0qO9J1bLAi2jD
CzqPuz91aTDZz51EByG4aHcKfbXari8lg5f3VDhPLtK8+KeN6dU8GA9lk+mZHbJh
xhfe5uclC5P/brdTgN2iO1qhvrPFquIRTbiVVI+wcTs9crVALUHiS0UqjZUbzbNZ
9+9EEiWpBCkPzI0PihZQvkfTXWwrUcu8CzaN4WDehYNYI1RZ4T+fQiwZj3eI16U6
LoNR2k+VIiryn+eLyC56jW8bIwiLWlvvH/f6vEv1PdLPOGa8Gn+VqfRgAnkCV8QZ
Ky9c/81hvVbQ6n7Hs4+QQxmtXazQYQbUZ33+xxub1XLsijZnn3DhxQMdowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3w3uUGgWo7AB7BPgZUiHl2IYEuMB8GA1UdIwQY
MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt
MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl
LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA5pTaGU
xNmBZzIM2r+yKdvcADWXPS/yIFTC3YVOzEPb4dQHb+uc2ZokwmrmhIrahhz59euw
437vUWMX1pwjmGBg5yqplyZAqYllkEXfmROW1VHLKa8pC76cj1uk8wl5FkSOmZps
MTAF7LGkxyX5Oz5T8aFRaDmnk1lPZoWjABJDXVKbzkcMtrh8QswxZclXR7hRYlnb
/R44Tq11wYrzZO3+dqej2Ni8zDbOVlw+PmKGEdYsRPN579+d+49VRBpVHnpAFGBE
OyQeUyVqF4yJAxDzAo5VhiiIoGxmtUHWwHb/TcGQjfKOoX8666mLcY9PG0D7Fhdv
lWy7ZXULtOD9yg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:00:15 2025 by rpki-client