Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: 9tR14DP8W6TQbECjzflOuOrHKNd+/TNvh99Pt5MVyhg=
Subject key identifier: F4:1F:1C:44:01:09:23:23:C8:D3:66:C0:50:B9:FE:B9:11:09:A8:4E
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019748FAACA6C8888642056070A2AEFA8698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0AF0
Signing time: Sat 07 Jun 2025 06:01:17 +0000
Manifest this update: Sat 07 Jun 2025 06:01:17 +0000
Manifest next update: Sun 08 Jun 2025 06:01:17 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: i012ffzfkhdVx3lMoQrsBn5WwvNdEOOTHHp00KOgcww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:ac:a6:c8:88:86:42:05:60:70:a2:ae:fa:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Jun 7 06:01:17 2025 GMT
Not After : Jun 8 06:01:17 2025 GMT
Subject: CN=f41f1c4401092323c8d366c050b9feb91109a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:98:10:ff:83:52:98:5e:a3:be:9f:9e:d0:
83:62:5a:9f:a4:e4:93:0f:db:01:93:f3:09:1b:a2:
61:57:8e:93:a7:0a:96:fd:34:9b:cb:09:31:7a:81:
72:7b:03:20:8c:90:d0:47:bf:ee:49:ca:fb:97:d5:
7c:be:c2:70:d3:c8:23:34:dc:0d:83:46:6d:78:32:
28:68:80:53:e6:ea:d3:d2:18:ab:9e:08:09:52:e0:
64:6a:ea:1e:c6:ac:98:13:28:e1:bf:f9:2d:33:51:
a0:4f:ab:5e:ba:53:24:5b:d3:16:ed:d3:38:66:61:
e3:0b:6b:e9:32:7b:08:b9:c8:b1:0a:38:34:84:f2:
a5:50:4e:a4:08:64:e5:36:65:4b:7c:92:6b:d0:0e:
ae:db:92:3a:3d:da:34:1d:44:d1:b8:e4:bc:bb:94:
e7:f4:5b:16:58:e9:57:30:7e:0b:09:c8:51:e9:ae:
01:aa:b5:7b:93:74:51:25:48:a3:70:94:d6:d8:c8:
f7:80:06:e1:4d:d8:90:5e:39:bc:bf:28:a5:7b:66:
56:86:89:46:ac:71:b9:8e:f9:e6:f7:2d:3f:2f:aa:
04:20:56:ac:e5:1d:a9:6c:3a:ce:f4:16:fd:9f:e8:
49:1b:45:7c:d8:1e:62:de:3c:33:a5:ca:c1:9c:c0:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:1C:44:01:09:23:23:C8:D3:66:C0:50:B9:FE:B9:11:09:A8:4E
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:4f:30:95:71:8a:94:8d:54:16:5a:31:a3:76:85:2f:11:
19:25:b5:9b:79:4f:e5:55:ce:19:e0:63:39:d1:0c:c4:ce:b2:
60:df:a3:fb:46:29:1a:5e:30:35:72:d7:9b:3e:93:df:6b:f7:
29:cb:26:95:0b:cb:6b:fc:3c:25:06:e9:1a:b5:e8:8c:ed:86:
72:54:da:1b:1f:6b:f9:6a:a2:d1:47:1e:bd:fd:1d:75:4c:55:
fb:8e:47:0b:62:74:31:09:c5:fb:67:71:9b:98:ed:fe:2b:ee:
6c:35:eb:06:a9:9c:e4:eb:b7:1e:a4:c3:49:d0:d6:9a:94:dc:
0a:21:0b:c8:1a:4e:7b:f9:57:1c:19:52:4b:7e:ed:05:6a:58:
32:13:78:26:c7:56:53:1c:b2:05:ef:a3:a0:7c:42:95:08:a8:
1e:da:57:57:7a:a5:71:54:63:67:82:00:41:d1:b9:4b:7a:33:
95:00:2e:05:eb:7d:a5:05:82:65:23:80:7f:a9:a1:5a:70:27:
13:3c:f8:2a:60:7a:4b:99:59:a6:c3:99:74:c7:09:79:3c:4f:
df:46:03:77:d5:f8:eb:8c:4a:84:c7:b3:b9:1d:f8:ce:db:c2:
03:c9:58:8c:62:67:61:7e:16:c4:44:4b:25:cf:c0:79:b7:00:
97:af:8b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+qymyIiGQgVgcKKu+oaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg5Y2U4MjZiYzhkMjY4NjliNDUyZjNjZDkzNjkwMmM1
NTJmYmYwHhcNMjUwNjA3MDYwMTE3WhcNMjUwNjA4MDYwMTE3WjAzMTEwLwYDVQQD
EyhmNDFmMWM0NDAxMDkyMzIzYzhkMzY2YzA1MGI5ZmViOTExMDlhODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgSYEP+DUpheo76fntCDYlqfpOST
D9sBk/MJG6JhV46TpwqW/TSbywkxeoFyewMgjJDQR7/uScr7l9V8vsJw08gjNNwN
g0ZteDIoaIBT5urT0hirnggJUuBkauoexqyYEyjhv/ktM1GgT6teulMkW9MW7dM4
ZmHjC2vpMnsIucixCjg0hPKlUE6kCGTlNmVLfJJr0A6u25I6Pdo0HUTRuOS8u5Tn
9FsWWOlXMH4LCchR6a4BqrV7k3RRJUijcJTW2Mj3gAbhTdiQXjm8vyile2ZWholG
rHG5jvnm9y0/L6oEIFas5R2pbDrO9Bb9n+hJG0V82B5i3jwzpcrBnMAClQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQfHEQBCSMjyNNmwFC5/rkRCahOMB8GA1UdIwQY
MBaAFMc4nOgmvI0mhptFLzzZNpAsVS+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2Et
NTIwMDhkMWNiOWI2LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2EtNTIwMDhkMWNiOWI2
LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAxPMJVx
ipSNVBZaMaN2hS8RGSW1m3lP5VXOGeBjOdEMxM6yYN+j+0YpGl4wNXLXmz6T32v3
KcsmlQvLa/w8JQbpGrXojO2GclTaGx9r+Wqi0Ucevf0ddUxV+45HC2J0MQnF+2dx
m5jt/ivubDXrBqmc5Ou3HqTDSdDWmpTcCiELyBpOe/lXHBlSS37tBWpYMhN4JsdW
UxyyBe+joHxClQioHtpXV3qlcVRjZ4IAQdG5S3ozlQAuBet9pQWCZSOAf6mhWnAn
Ezz4KmB6S5lZpsOZdMcJeTxP30YDd9X464xKhMezuR34ztvCA8lYjGJnYX4WxERL
Jc/AebcAl6+LlA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:21 2025 by rpki-client