Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: wdw7ssIT//uVzK1xCNQ7hgFlxG3qawKhdZt7HwS+EdQ=
Subject key identifier: 0D:98:8A:C2:5F:23:1F:90:43:A2:A5:B0:A3:1E:73:3E:C0:30:52:62
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 01974D44FA78319AE658815817CA9DA392E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 02:00:55 +0000
Manifest this update: Sun 08 Jun 2025 02:00:55 +0000
Manifest next update: Mon 09 Jun 2025 02:00:55 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: YpAojoKD78FAHVYgFaWjU+l3jCkp6DlV6MrNyj4RBP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:fa:78:31:9a:e6:58:81:58:17:ca:9d:a3:92:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jun 8 02:00:55 2025 GMT
Not After : Jun 9 02:00:55 2025 GMT
Subject: CN=0d988ac25f231f9043a2a5b0a31e733ec0305262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:84:9b:7f:b0:fc:c5:58:10:7f:d1:51:1b:
d0:3d:45:68:9a:e8:95:09:65:24:42:59:39:61:b8:
3f:0e:8d:3b:29:27:ee:95:90:36:02:7e:37:e4:7b:
4f:7c:45:80:b0:99:f5:4c:f1:4f:93:da:31:d5:bc:
d1:af:40:8b:03:16:94:7d:43:46:5b:37:7a:e6:c7:
7d:c1:83:7f:d7:76:79:53:1f:d1:aa:6b:3d:00:67:
92:97:f8:ff:64:2f:ed:65:49:c1:60:e8:01:c8:26:
77:73:bb:f7:73:3e:08:58:ff:15:dc:88:da:c1:09:
08:ce:20:05:cc:c5:f5:b6:8b:49:1e:3f:ce:2b:62:
a0:da:96:b3:c1:26:f4:74:7d:b5:15:e0:33:5f:d8:
ce:91:a9:60:5c:e1:cc:6f:45:58:23:60:fd:3a:84:
5c:b2:f4:11:d9:dc:af:28:2a:8b:89:16:3e:85:3d:
08:2a:e0:57:7f:62:1f:bd:32:19:81:4f:7a:ed:5c:
ea:06:40:f2:9b:b8:01:1f:d5:b8:d5:8e:94:11:91:
cf:a8:fc:46:57:4f:a0:32:9a:c3:f0:90:5b:f3:3c:
6e:8a:be:77:2c:94:a2:dc:96:fc:4a:db:4d:c2:fc:
3d:b1:b4:8f:e5:5f:2f:81:6d:17:ad:86:26:57:13:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:98:8A:C2:5F:23:1F:90:43:A2:A5:B0:A3:1E:73:3E:C0:30:52:62
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:31:a6:88:77:b5:13:7b:ae:61:d2:ba:b4:45:03:1e:92:95:
84:b7:f1:74:24:86:57:c9:51:6d:d6:54:11:4a:ba:b2:c3:51:
ae:9d:c1:9d:dc:d7:c6:fd:c0:bb:b8:5c:32:b7:c8:78:47:72:
21:23:cf:b4:86:a0:ed:44:8b:c7:01:bf:76:cf:6f:0e:d5:1c:
0b:fe:01:ab:10:fe:2d:4d:6f:7b:51:c4:e5:5a:1b:d2:d0:c3:
19:aa:44:04:d9:12:5f:40:a6:f4:e0:eb:46:44:58:38:c2:5b:
86:9f:46:62:70:91:9a:40:ca:ff:31:2f:03:cc:e0:d3:c5:55:
fa:b1:63:65:d7:ce:d5:4a:08:c1:aa:8f:45:65:ef:1b:15:3c:
1b:d8:14:55:c3:83:ad:f7:86:56:cd:90:75:22:26:ef:5c:f7:
ec:fe:e2:4c:8c:8b:cf:f8:e2:86:d8:ad:c2:da:36:d5:94:42:
85:5b:e0:2a:b4:79:a6:ec:ad:2f:61:78:b4:26:58:05:5b:df:
f3:3b:c3:d4:ef:5b:c3:f0:4a:f3:1d:4b:a1:1e:4b:d5:19:4a:
e8:6d:2f:54:99:21:f7:68:c9:5d:18:38:a6:50:27:5e:f6:5f:
ae:e3:3b:9e:3a:7a:f9:66:1c:54:40:51:e6:85:ba:2f:9f:e6:
79:97:46:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRPp4MZrmWIFYF8qdo5LoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmNjZDdkN2UzMDhmODE4MDcwNTFmOGQ0ODdlOWQ4Mjlj
MjQ4NjgwHhcNMjUwNjA4MDIwMDU1WhcNMjUwNjA5MDIwMDU1WjAzMTEwLwYDVQQD
EygwZDk4OGFjMjVmMjMxZjkwNDNhMmE1YjBhMzFlNzMzZWMwMzA1MjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOCEm3+w/MVYEH/RURvQPUVomuiV
CWUkQlk5Ybg/Do07KSfulZA2An435HtPfEWAsJn1TPFPk9ox1bzRr0CLAxaUfUNG
Wzd65sd9wYN/13Z5Ux/Rqms9AGeSl/j/ZC/tZUnBYOgByCZ3c7v3cz4IWP8V3Ija
wQkIziAFzMX1totJHj/OK2Kg2pazwSb0dH21FeAzX9jOkalgXOHMb0VYI2D9OoRc
svQR2dyvKCqLiRY+hT0IKuBXf2IfvTIZgU967VzqBkDym7gBH9W41Y6UEZHPqPxG
V0+gMprD8JBb8zxuir53LJSi3Jb8SttNwvw9sbSP5V8vgW0XrYYmVxOw+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2YisJfIx+QQ6KlsKMecz7AMFJiMB8GA1UdIwQY
MBaAFF78zX1+MI+BgHBR+NSH6dgpwkhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQt
ZDFiZDA2ZjViZjAwLzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQtZDFiZDA2ZjViZjAw
LzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjGmiHe1
E3uuYdK6tEUDHpKVhLfxdCSGV8lRbdZUEUq6ssNRrp3BndzXxv3Au7hcMrfIeEdy
ISPPtIag7USLxwG/ds9vDtUcC/4BqxD+LU1ve1HE5Vob0tDDGapEBNkSX0Cm9ODr
RkRYOMJbhp9GYnCRmkDK/zEvA8zg08VV+rFjZdfO1UoIwaqPRWXvGxU8G9gUVcOD
rfeGVs2QdSIm71z37P7iTIyLz/jihtitwto21ZRChVvgKrR5puytL2F4tCZYBVvf
8zvD1O9bw/BK8x1LoR5L1RlK6G0vVJkh92jJXRg4plAnXvZfruM7njp6+WYcVEBR
5oW6L5/meZdGyw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:49:17 2025 by rpki-client