Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: K1WwMG00CKjBPmp8T1tsIvoMS3igrdfzBLmJ1ok0pPw=
Subject key identifier: DF:A7:B5:FC:BF:9A:0E:B2:FB:20:81:48:CC:D1:B5:6C:8D:90:FC:09
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019748C3418894CF1BB035A92D444B1B3877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0C13
Signing time: Sat 07 Jun 2025 05:00:45 +0000
Manifest this update: Sat 07 Jun 2025 05:00:45 +0000
Manifest next update: Sun 08 Jun 2025 05:00:45 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: oJi10e2s2/1wneuUasKKplZqz62XnckU+Z8xlavD57Q=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:41:88:94:cf:1b:b0:35:a9:2d:44:4b:1b:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Jun 7 05:00:45 2025 GMT
Not After : Jun 8 05:00:45 2025 GMT
Subject: CN=dfa7b5fcbf9a0eb2fb208148ccd1b56c8d90fc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:cc:a5:86:9a:19:d2:64:5d:4b:01:e7:72:
95:c2:03:87:c2:b9:33:0a:82:65:b5:78:db:3b:e3:
9f:1e:71:0d:01:ba:96:68:12:85:04:9b:42:d9:6c:
56:60:08:dd:bf:03:0d:f8:7a:27:64:cc:46:b3:56:
9d:77:6c:44:37:59:98:40:65:94:48:4a:ec:1e:66:
5a:a7:ae:a8:e4:87:b7:c7:41:dd:b9:93:cf:54:36:
34:fa:4c:1a:b2:ec:6c:04:c2:b5:04:83:de:56:af:
d2:73:8a:2b:79:60:6b:2e:f6:a2:ca:6b:f1:40:01:
71:68:27:c9:80:bc:9a:2d:b0:78:72:59:bb:97:4c:
96:bc:da:91:b1:bb:4c:80:bc:3d:34:83:05:36:ce:
2f:b0:81:62:25:5f:ea:4e:0e:e7:b9:8f:94:9b:cf:
c4:16:80:d3:40:a6:78:95:c6:2b:55:cd:d1:07:67:
a6:03:52:06:c5:c9:93:d0:e8:01:47:59:25:74:1c:
5c:24:8a:bc:38:85:d2:bc:c2:26:cb:4b:7a:c9:5f:
77:d9:06:db:7b:d7:ee:d3:2a:7d:5c:5c:81:88:46:
9f:17:d9:70:75:cf:e0:43:00:f0:08:7e:5e:4c:59:
62:26:5b:8f:88:8f:59:d2:12:70:f7:df:a0:f5:ee:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:B5:FC:BF:9A:0E:B2:FB:20:81:48:CC:D1:B5:6C:8D:90:FC:09
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a7:f9:29:d5:23:4b:86:40:10:0e:ba:ac:14:2d:00:67:89:
e5:81:eb:86:d8:bd:6f:97:9f:f2:f6:fa:a6:b9:93:5e:9c:4a:
ab:06:50:80:a7:b8:b1:06:89:2e:46:4a:da:be:27:a6:fe:d6:
45:f1:a2:af:80:af:64:42:75:6a:6f:7c:6d:1d:d9:64:14:ad:
06:73:74:0e:da:04:2c:50:f4:1c:8b:28:b5:7e:03:9d:87:6c:
55:88:d5:fd:b2:29:8c:b9:d5:83:73:84:33:d6:28:e3:2c:0a:
bd:5d:60:62:41:ea:4a:b1:d4:8e:ac:ac:49:f6:98:bd:95:59:
82:16:6c:48:4c:6c:90:b7:7b:8c:2c:81:47:aa:32:2f:8d:a4:
30:0e:b0:1f:ea:67:a7:88:ef:69:d6:9a:c7:3e:16:38:8a:83:
88:75:10:a4:45:00:e8:66:90:38:8f:c4:6f:41:c5:41:ad:e3:
5c:00:08:ad:2f:4b:12:c7:81:b3:96:3f:c1:9c:09:30:c6:8a:
f6:4a:79:a1:c2:b8:97:7f:a0:34:aa:be:bb:a5:ff:84:a4:7e:
04:03:44:4f:fa:01:66:c9:4e:3c:ee:54:18:32:7f:e3:6c:f1:
86:06:ce:11:d1:ed:3a:ec:07:02:08:1e:28:9b:1d:be:e7:93:
65:99:29:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw0GIlM8bsDWpLURLGzh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2Y2MzQwMTQwN2MxY2M3OTdiMTcwMzRlODEzZDIyNTRm
OTc3M2UwHhcNMjUwNjA3MDUwMDQ1WhcNMjUwNjA4MDUwMDQ1WjAzMTEwLwYDVQQD
EyhkZmE3YjVmY2JmOWEwZWIyZmIyMDgxNDhjY2QxYjU2YzhkOTBmYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbXMpYaaGdJkXUsB53KVwgOHwrkz
CoJltXjbO+OfHnENAbqWaBKFBJtC2WxWYAjdvwMN+HonZMxGs1add2xEN1mYQGWU
SErsHmZap66o5Ie3x0HduZPPVDY0+kwasuxsBMK1BIPeVq/Sc4oreWBrLvaiymvx
QAFxaCfJgLyaLbB4clm7l0yWvNqRsbtMgLw9NIMFNs4vsIFiJV/qTg7nuY+Um8/E
FoDTQKZ4lcYrVc3RB2emA1IGxcmT0OgBR1kldBxcJIq8OIXSvMImy0t6yV932Qbb
e9fu0yp9XFyBiEafF9lwdc/gQwDwCH5eTFliJluPiI9Z0hJw99+g9e6gWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+ntfy/mg6y+yCBSMzRtWyNkPwJMB8GA1UdIwQY
MBaAFF1/Y0AUB8HMeXsXA06BPSJU+Xc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMt
MzNmYjE0NTJiYjBhLzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMtMzNmYjE0NTJiYjBh
LzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaf5KdUj
S4ZAEA66rBQtAGeJ5YHrhti9b5ef8vb6prmTXpxKqwZQgKe4sQaJLkZK2r4npv7W
RfGir4CvZEJ1am98bR3ZZBStBnN0DtoELFD0HIsotX4DnYdsVYjV/bIpjLnVg3OE
M9Yo4ywKvV1gYkHqSrHUjqysSfaYvZVZghZsSExskLd7jCyBR6oyL42kMA6wH+pn
p4jvadaaxz4WOIqDiHUQpEUA6GaQOI/Eb0HFQa3jXAAIrS9LEseBs5Y/wZwJMMaK
9kp5ocK4l3+gNKq+u6X/hKR+BANET/oBZslOPO5UGDJ/42zxhgbOEdHtOuwHAgge
KJsdvueTZZkpxw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:43 2025 by rpki-client