Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: GIM8Pryt+po0v/iOw4ssBtbZvNED4SV7AXskeQgvlQA=
Subject key identifier: 95:92:FE:2E:94:30:3D:9B:4D:92:43:DF:25:A9:E6:EA:1B:8D:C6:27
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 01974A7AA98810089524F24BAFB75735F8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 053B
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: 9TEFn+fqyQr3xYntziJYclftPjRKuGPrDgDwXS4sGNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a9:88:10:08:95:24:f2:4b:af:b7:57:35:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=9592fe2e94303d9b4d9243df25a9e6ea1b8dc627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:26:1c:31:3c:f3:ae:09:b9:4b:69:47:cd:
ad:cb:1b:0f:dd:e0:41:3a:10:7d:71:7c:75:30:43:
ab:d9:9d:03:8b:6d:79:8d:ba:2e:9a:04:5f:d4:f2:
9c:a8:0f:ee:c1:74:2b:39:cf:0a:84:7e:94:93:72:
fe:dc:04:50:38:ab:df:51:85:a2:3b:74:16:a8:85:
33:55:b7:3e:92:10:67:57:d6:0b:35:17:b4:45:e7:
c1:08:e3:f1:67:b2:e1:c1:15:48:73:df:d0:47:27:
6d:aa:2f:bf:5b:18:c2:a1:d6:a3:1f:6f:0b:61:e3:
44:44:e0:1f:47:da:53:1b:5c:8e:78:86:bb:4c:a9:
e6:4e:72:80:0d:ad:98:af:61:b2:f3:bb:f8:21:76:
51:22:4e:1a:ca:8f:9c:29:86:c5:75:70:69:1f:75:
d8:9a:b6:83:13:d5:35:a0:e0:66:ab:68:27:60:67:
3c:e2:b8:53:7f:d9:58:34:8c:84:94:9b:1b:3b:1b:
f6:4c:83:70:e4:6a:d6:14:74:bd:bd:b4:6b:6a:30:
ab:5f:a3:f8:e2:3b:cc:04:a9:68:ac:4a:9f:8c:76:
ef:8f:70:15:1d:8a:a6:1f:7f:3b:37:77:70:1c:a2:
24:48:ce:f0:74:95:d7:6c:8f:a9:53:bd:fb:de:01:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:FE:2E:94:30:3D:9B:4D:92:43:DF:25:A9:E6:EA:1B:8D:C6:27
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:40:27:db:c3:b5:fd:a1:3e:01:74:9f:9e:8c:26:d2:da:b0:
1b:ea:c1:ff:3c:75:70:83:a9:6f:26:c2:98:5d:32:68:4c:2f:
56:db:a0:bd:34:12:ee:b1:c9:b1:47:89:cb:4d:de:e1:81:56:
5e:e3:36:7d:4a:87:57:02:a0:7f:38:9d:cc:89:96:fb:73:92:
4c:a0:9e:f2:ad:6a:c3:a7:85:3d:3d:0d:29:cb:d9:cd:4d:99:
e3:87:c8:4c:d1:30:a3:b5:6d:f2:68:7e:05:3f:19:2d:c1:4f:
ed:80:1b:dd:de:c3:ba:b5:1d:a1:08:36:83:de:95:51:f1:5c:
96:31:04:da:b5:e2:fa:61:3b:98:71:1e:69:b4:58:c4:d5:4f:
90:7d:19:21:c5:85:f8:4e:30:57:9f:64:6f:76:f4:59:c6:92:
bb:d9:b9:af:f2:7b:c8:3d:38:b5:7a:54:df:72:1d:57:68:aa:
79:85:62:ce:1f:21:d1:71:54:43:06:14:7a:bc:7a:3d:a2:9c:
b3:bb:85:15:b0:87:9a:0d:74:e8:8d:cf:21:e3:9d:31:8c:79:
21:6a:23:46:2e:d2:d0:7d:89:3e:32:5a:fb:30:aa:07:9e:4c:
7e:72:bf:ed:b0:3a:80:00:05:5f:ee:fd:33:f8:5d:99:11:eb:
50:50:fb:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqmIEAiVJPJLr7dXNfiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNGYxYTMyYTM3ZTA4MzkwMGFiYTU2MTcwOGU1MmFiMjM0
ZTNhMzgwHhcNMjUwNjA3MTMwMDQyWhcNMjUwNjA4MTMwMDQyWjAzMTEwLwYDVQQD
Eyg5NTkyZmUyZTk0MzAzZDliNGQ5MjQzZGYyNWE5ZTZlYTFiOGRjNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsEmHDE8864JuUtpR82tyxsP3eBB
OhB9cXx1MEOr2Z0Di215jboumgRf1PKcqA/uwXQrOc8KhH6Uk3L+3ARQOKvfUYWi
O3QWqIUzVbc+khBnV9YLNRe0RefBCOPxZ7LhwRVIc9/QRydtqi+/WxjCodajH28L
YeNEROAfR9pTG1yOeIa7TKnmTnKADa2Yr2Gy87v4IXZRIk4ayo+cKYbFdXBpH3XY
mraDE9U1oOBmq2gnYGc84rhTf9lYNIyElJsbOxv2TINw5GrWFHS9vbRrajCrX6P4
4jvMBKlorEqfjHbvj3AVHYqmH387N3dwHKIkSM7wdJXXbI+pU7373gH9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWS/i6UMD2bTZJD3yWp5uobjcYnMB8GA1UdIwQY
MBaAFF5PGjKjfgg5AKulYXCOUqsjTjo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQt
NGMyYWNiNzgzMDllLzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQtNGMyYWNiNzgzMDll
LzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUAn28O1
/aE+AXSfnowm0tqwG+rB/zx1cIOpbybCmF0yaEwvVtugvTQS7rHJsUeJy03e4YFW
XuM2fUqHVwKgfzidzImW+3OSTKCe8q1qw6eFPT0NKcvZzU2Z44fITNEwo7Vt8mh+
BT8ZLcFP7YAb3d7DurUdoQg2g96VUfFcljEE2rXi+mE7mHEeabRYxNVPkH0ZIcWF
+E4wV59kb3b0WcaSu9m5r/J7yD04tXpU33IdV2iqeYVizh8h0XFUQwYUerx6PaKc
s7uFFbCHmg106I3PIeOdMYx5IWojRi7S0H2JPjJa+zCqB55MfnK/7bA6gAAFX+79
M/hdmRHrUFD7Ww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:07:20 2025 by rpki-client