Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: bqD1tDOECJ7b3FkAvOuxLmljAzLS2dKE+2d6vBqNp/k=
Subject key identifier: BE:76:43:A8:A0:C2:00:90:68:D9:67:28:1B:7F:42:A4:C5:7C:75:07
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019745F8DA7A871CD2C35B5181C0109B8FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 16:00:26 +0000
Manifest this update: Fri 06 Jun 2025 16:00:26 +0000
Manifest next update: Sat 07 Jun 2025 16:00:26 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: AWxsDpEHFWp8q6zQ5mW67txrpv1mBfNh8c0Uu/MyXVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:da:7a:87:1c:d2:c3:5b:51:81:c0:10:9b:8f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jun 6 16:00:26 2025 GMT
Not After : Jun 7 16:00:26 2025 GMT
Subject: CN=be7643a8a0c2009068d967281b7f42a4c57c7507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:94:2f:bb:16:66:80:d2:a5:26:05:f2:65:
87:6e:91:50:53:4c:fd:04:46:54:6e:79:6a:e4:9b:
b8:1d:4a:69:ad:7f:64:fb:2d:51:4a:70:b5:3e:ba:
01:05:56:16:f1:40:d1:54:35:b2:8d:9c:7d:f2:56:
ed:78:21:f2:ec:b1:83:81:9d:e1:7c:6c:2a:11:64:
38:6d:9a:be:93:14:43:b9:9e:2d:7c:21:c6:16:2c:
77:eb:0e:7e:c0:2f:cd:60:b3:1f:97:29:f4:58:a9:
5b:8a:ab:37:63:57:df:13:cf:61:58:78:0e:29:43:
b8:bb:23:36:75:96:3f:2a:87:41:96:3e:1e:0c:38:
54:44:c5:d0:03:dd:e0:8c:ff:c7:b8:ab:2a:76:c8:
2b:b0:6f:42:d7:bb:9c:28:76:ce:7a:0e:67:12:a8:
7f:f4:ea:e8:dc:eb:e0:cd:a6:fb:4e:07:0a:a8:6c:
71:ff:bf:62:d5:91:da:cf:bd:bc:12:3f:cc:a7:03:
68:6e:41:26:07:d7:d1:d6:61:10:61:5f:35:5f:48:
70:7a:c5:ee:92:ba:bc:85:b6:6a:d5:87:3d:94:37:
df:d0:1d:f4:7c:04:81:72:25:e0:8f:14:53:63:ee:
68:08:0f:73:f3:aa:fc:73:47:aa:08:00:40:46:c0:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:43:A8:A0:C2:00:90:68:D9:67:28:1B:7F:42:A4:C5:7C:75:07
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:34:ff:e4:c6:d5:a5:53:6b:c4:56:aa:2a:ad:27:76:0f:
8b:b1:3a:35:42:a0:f9:2a:80:2f:40:d6:d7:c7:93:7a:75:e2:
84:7f:a8:6f:c8:a5:dd:1a:e3:71:f2:fe:30:85:78:10:ef:c0:
46:98:5d:9b:f2:b2:aa:21:d7:3f:58:c2:24:20:f9:d2:b9:13:
af:86:ae:95:90:4e:09:04:48:e3:db:c8:17:a7:a7:db:27:10:
ab:28:e0:4f:f4:20:13:e2:57:52:c1:e4:91:57:cc:cb:cc:aa:
db:44:87:4b:57:9d:18:a1:c2:26:31:62:36:e6:95:b3:16:d8:
a6:35:26:64:97:a2:6b:e8:b5:84:d0:c8:85:3d:15:17:96:42:
b6:b9:72:25:23:26:2d:59:1d:a7:4b:85:6f:fd:20:be:bc:fe:
91:d2:64:84:0b:1d:a1:89:ed:ad:82:8b:83:ff:e0:7b:7c:57:
c5:73:82:42:8f:d3:c4:15:67:7d:6f:f4:41:39:d7:a5:5e:5a:
b6:af:9f:1d:11:1b:de:2b:2f:23:12:c1:e5:02:31:a4:dc:8a:
73:a5:aa:59:17:7d:9f:37:28:fd:82:90:6e:58:e3:cc:3e:ab:
28:13:31:07:0e:a8:2d:29:96:72:06:96:52:be:d0:4b:38:37:
96:2a:8c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+Np6hxzSw1tRgcAQm4/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjUwNjA2MTYwMDI2WhcNMjUwNjA3MTYwMDI2WjAzMTEwLwYDVQQD
EyhiZTc2NDNhOGEwYzIwMDkwNjhkOTY3MjgxYjdmNDJhNGM1N2M3NTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGyUL7sWZoDSpSYF8mWHbpFQU0z9
BEZUbnlq5Ju4HUpprX9k+y1RSnC1ProBBVYW8UDRVDWyjZx98lbteCHy7LGDgZ3h
fGwqEWQ4bZq+kxRDuZ4tfCHGFix36w5+wC/NYLMflyn0WKlbiqs3Y1ffE89hWHgO
KUO4uyM2dZY/KodBlj4eDDhURMXQA93gjP/HuKsqdsgrsG9C17ucKHbOeg5nEqh/
9Oro3Ovgzab7TgcKqGxx/79i1ZHaz728Ej/MpwNobkEmB9fR1mEQYV81X0hwesXu
krq8hbZq1Yc9lDff0B30fASBciXgjxRTY+5oCA9z86r8c0eqCABARsDOfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL52Q6igwgCQaNlnKBt/QqTFfHUHMB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchY0/+TG
1aVTa8RWqiqtJ3YPi7E6NUKg+SqAL0DW18eTenXihH+ob8il3RrjcfL+MIV4EO/A
Rphdm/KyqiHXP1jCJCD50rkTr4aulZBOCQRI49vIF6en2ycQqyjgT/QgE+JXUsHk
kVfMy8yq20SHS1edGKHCJjFiNuaVsxbYpjUmZJeia+i1hNDIhT0VF5ZCtrlyJSMm
LVkdp0uFb/0gvrz+kdJkhAsdoYntrYKLg//ge3xXxXOCQo/TxBVnfW/0QTnXpV5a
tq+fHREb3isvIxLB5QIxpNyKc6WqWRd9nzco/YKQbljjzD6rKBMxBw6oLSmWcgaW
Ur7QSzg3liqMlA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:33:53 2025 by rpki-client