
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: 8RogaRLQ/0loCgOtcYK/AFh0u2unJ3++PQa2QCb04YU=
Subject key identifier: A9:E0:5F:25:FD:B8:89:BA:F1:A5:D5:18:0D:7B:BE:26:41:D7:DD:67
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 01974742524C9F3A2767207ADF8F75B16E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 93
Signing time: Fri 06 Jun 2025 22:00:18 +0000
Manifest this update: Fri 06 Jun 2025 22:00:18 +0000
Manifest next update: Sat 07 Jun 2025 22:00:18 +0000
Files and hashes: 1: HnXYP_nGkSYGI2gsUnR5joaBv0k.roa (hash: QHASI9erDv03GyXaVaSPKxwrTHTkAuv0FPn5tlS8GC8=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: 31KukqXp3kyR+9IAxByc2S8TA+YqTNJiIzH9+Oidfhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:52:4c:9f:3a:27:67:20:7a:df:8f:75:b1:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Jun 6 22:00:18 2025 GMT
Not After : Jun 7 22:00:18 2025 GMT
Subject: CN=a9e05f25fdb889baf1a5d5180d7bbe2641d7dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:e4:d6:08:72:59:9f:87:8e:75:d8:ca:d9:
d0:60:a6:1c:36:38:46:56:8a:d9:d2:ee:40:03:35:
c3:a5:5c:ea:1e:1b:b1:65:9d:09:78:6f:c5:36:b0:
a8:f9:7c:55:d7:81:d8:08:60:db:6e:51:60:09:8a:
1d:2c:8f:30:83:36:7f:68:bf:91:83:91:34:50:bf:
aa:25:ea:fb:0f:05:c9:70:06:3f:0b:be:70:72:aa:
1f:c6:1c:6f:2e:3d:bd:98:3d:b8:93:7b:e5:83:bf:
7e:c4:a2:19:8d:83:e8:f3:ef:17:6c:03:df:37:74:
b4:6d:1b:56:57:4a:78:dc:6e:d3:8c:9f:26:25:2c:
a3:33:d8:e0:8e:29:92:2b:fb:dd:69:c3:f1:d3:f0:
2d:89:d5:1f:8e:4e:1e:61:a5:32:7f:cd:4a:85:0f:
94:f6:24:9b:06:f7:44:18:bd:45:8d:de:ad:f4:31:
8b:56:57:eb:a0:df:63:dd:eb:1b:34:4d:1f:42:a3:
b2:24:34:04:2c:1c:89:e5:47:53:16:2d:00:d0:e5:
54:28:99:6a:06:21:be:25:a6:df:c3:76:89:f0:16:
73:e9:72:62:d6:dc:6d:9f:11:ab:cf:76:eb:4c:ba:
26:db:06:0b:71:43:ee:4c:43:ef:78:4c:f7:c3:a1:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:5F:25:FD:B8:89:BA:F1:A5:D5:18:0D:7B:BE:26:41:D7:DD:67
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:3e:8b:b7:c5:1a:3c:e3:ca:bf:f2:10:4e:27:9d:90:53:
fa:a0:cd:aa:3e:06:a2:dc:31:7b:03:23:ec:7b:fd:20:37:ed:
73:85:e7:21:aa:63:99:18:78:89:31:d7:ea:78:66:fb:f6:a9:
44:62:d0:f1:85:f5:8e:63:c1:09:34:87:fa:1a:cc:c2:fb:41:
c2:e5:43:a4:d5:a2:94:fe:6c:ef:69:cc:30:f7:0e:15:8c:92:
83:05:1d:a6:3f:62:dc:e6:20:c9:fe:d3:7a:f7:e2:27:de:5f:
b4:e9:97:fa:27:8c:5e:f8:69:d7:36:da:e7:26:0b:6c:73:96:
7c:bb:4e:7b:0a:be:d2:ff:65:d0:91:ea:70:4c:31:e0:d5:21:
ba:26:de:d8:f5:8a:96:3b:3e:d7:94:74:86:23:a5:cf:7e:27:
83:c2:7c:4a:26:85:24:08:e1:2c:2f:a1:63:66:92:25:06:fb:
0a:a5:16:a3:ca:3b:ce:ab:30:2e:68:27:da:7d:f8:eb:c9:76:
c8:4c:c9:f7:fc:45:19:c2:c0:78:51:ed:9c:2d:61:86:8a:95:
0f:e7:a0:2e:0a:87:a4:ac:42:e0:5b:96:32:05:af:67:06:4d:
6b:63:67:e5:5f:dc:20:85:9e:75:48:01:dd:71:75:04:9f:fc:
97:53:83:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQlJMnzonZyB63491sW5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzgyNjUwODljYmRkZTZhNmM1NzljZDc3NmI1ZjgwYzBm
OGFkZDQwHhcNMjUwNjA2MjIwMDE4WhcNMjUwNjA3MjIwMDE4WjAzMTEwLwYDVQQD
EyhhOWUwNWYyNWZkYjg4OWJhZjFhNWQ1MTgwZDdiYmUyNjQxZDdkZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX/k1ghyWZ+HjnXYytnQYKYcNjhG
VorZ0u5AAzXDpVzqHhuxZZ0JeG/FNrCo+XxV14HYCGDbblFgCYodLI8wgzZ/aL+R
g5E0UL+qJer7DwXJcAY/C75wcqofxhxvLj29mD24k3vlg79+xKIZjYPo8+8XbAPf
N3S0bRtWV0p43G7TjJ8mJSyjM9jgjimSK/vdacPx0/AtidUfjk4eYaUyf81KhQ+U
9iSbBvdEGL1Fjd6t9DGLVlfroN9j3esbNE0fQqOyJDQELByJ5UdTFi0A0OVUKJlq
BiG+Jabfw3aJ8BZz6XJi1txtnxGrz3brTLom2wYLcUPuTEPveEz3w6E53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKngXyX9uIm68aXVGA17viZB191nMB8GA1UdIwQY
MBaAFMXIJlCJy93mpsV5zXdrX4DA+K3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEt
NDM4ODIwZmJhMjU0LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEtNDM4ODIwZmJhMjU0
LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBQ+i7fF
Gjzjyr/yEE4nnZBT+qDNqj4GotwxewMj7Hv9IDftc4XnIapjmRh4iTHX6nhm+/ap
RGLQ8YX1jmPBCTSH+hrMwvtBwuVDpNWilP5s72nMMPcOFYySgwUdpj9i3OYgyf7T
evfiJ95ftOmX+ieMXvhp1zba5yYLbHOWfLtOewq+0v9l0JHqcEwx4NUhuibe2PWK
ljs+15R0hiOlz34ng8J8SiaFJAjhLC+hY2aSJQb7CqUWo8o7zqswLmgn2n3468l2
yEzJ9/xFGcLAeFHtnC1hhoqVD+egLgqHpKxC4FuWMgWvZwZNa2Nn5V/cIIWedUgB
3XF1BJ/8l1ODRg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:33:45 2025 by rpki-client