Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: K8PPxkAgbFhv8p+fgP+kvJIkb8hagyc11ODecC0Q/Oo=
Subject key identifier: DB:7B:96:2D:27:D9:7A:09:06:E4:89:66:00:BF:49:CB:03:10:D1:5D
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01974A43C6FAFAE6883608F1FF774830AD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 12:00:45 +0000
Manifest this update: Sat 07 Jun 2025 12:00:45 +0000
Manifest next update: Sun 08 Jun 2025 12:00:45 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: QNLUuwu2CQ71dX3+WIIm+0STnjs4BICeOpaNEX46Fik=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c6:fa:fa:e6:88:36:08:f1:ff:77:48:30:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jun 7 12:00:45 2025 GMT
Not After : Jun 8 12:00:45 2025 GMT
Subject: CN=db7b962d27d97a0906e4896600bf49cb0310d15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:0d:e7:22:56:16:71:41:ff:0a:f3:86:df:
a1:d2:0b:c4:d9:ba:8d:bf:b7:6f:ff:84:c3:30:c4:
e0:ce:ba:5a:d5:7e:18:fb:13:47:5c:df:14:a8:4b:
67:03:88:8b:a8:e9:23:fa:bf:fc:7b:ad:88:9c:48:
f3:10:57:39:7b:17:a3:e0:14:d2:97:3c:84:75:db:
f7:c3:0d:38:19:50:92:52:b1:14:ee:9e:f3:1b:b5:
ce:08:b6:a5:76:3c:8d:87:f8:a8:b4:bb:8e:2d:2e:
0d:04:e9:2f:70:71:2d:97:e6:e0:d7:43:2d:ea:40:
19:81:12:5d:d5:06:4e:32:60:b3:e3:67:91:2d:f2:
31:9e:cf:d7:ce:1a:fd:25:d1:b7:d8:6d:62:5c:f0:
5c:0b:25:f9:b1:1e:ef:fb:da:1d:40:88:62:81:e0:
00:99:04:3c:b5:5a:92:89:70:a4:8a:bc:a6:03:ce:
ed:0a:0a:9c:ab:d4:50:9f:f1:69:05:41:83:a9:dd:
28:04:1e:42:01:b2:38:f7:e5:c2:c6:df:80:34:c3:
36:8e:09:e5:16:a1:67:d1:e2:66:9d:ce:a1:93:4a:
2a:a9:8a:f5:64:bd:b5:92:a3:9f:fe:5a:42:29:c0:
2a:34:32:93:33:60:88:61:ec:df:cb:ad:27:0c:f1:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:96:2D:27:D9:7A:09:06:E4:89:66:00:BF:49:CB:03:10:D1:5D
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b6:2a:31:26:ad:c1:28:20:2f:2f:02:68:1a:a0:30:36:4b:
f4:ed:9a:81:e9:23:f5:08:cb:3b:bd:b0:f7:1c:87:2c:29:b7:
5b:04:7c:32:73:42:dc:8c:f0:cf:f0:39:3d:bb:d2:56:71:04:
7f:a1:f3:e6:2d:31:25:a7:a4:0d:1e:90:e6:72:13:19:f3:ab:
4e:c6:02:e9:0e:92:bc:f5:3a:0a:a6:d6:0f:ad:15:5b:0c:6f:
d6:d9:7c:16:a0:bd:c5:15:fe:c1:98:25:d4:c8:66:33:db:ca:
c7:96:4b:2b:48:ec:40:f3:87:2d:5e:ae:3d:4a:4d:3f:20:84:
26:8d:68:91:dc:69:5c:a9:5b:62:ca:74:fa:7a:3a:a2:7c:32:
75:50:9c:96:27:aa:1a:bf:98:ab:18:d9:0c:07:a1:18:bd:09:
ee:02:d6:27:a0:4f:f2:1e:d0:73:69:fa:49:b8:6c:42:6d:80:
53:d3:d9:63:9d:63:5f:ea:79:79:a5:55:02:76:50:9c:e6:df:
f2:d2:7c:2a:78:1a:99:57:ee:42:53:7d:90:84:0d:26:4e:99:
2e:27:c4:17:bb:6d:79:d8:c5:6b:52:e9:46:88:b5:b6:de:b3:
96:c4:19:2a:3b:ca:eb:a6:04:e6:60:e7:33:14:37:c3:29:73:
e1:f8:b0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ8b6+uaINgjx/3dIMK1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjUwNjA3MTIwMDQ1WhcNMjUwNjA4MTIwMDQ1WjAzMTEwLwYDVQQD
EyhkYjdiOTYyZDI3ZDk3YTA5MDZlNDg5NjYwMGJmNDljYjAzMTBkMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquQN5yJWFnFB/wrzht+h0gvE2bqN
v7dv/4TDMMTgzrpa1X4Y+xNHXN8UqEtnA4iLqOkj+r/8e62InEjzEFc5exej4BTS
lzyEddv3ww04GVCSUrEU7p7zG7XOCLaldjyNh/iotLuOLS4NBOkvcHEtl+bg10Mt
6kAZgRJd1QZOMmCz42eRLfIxns/Xzhr9JdG32G1iXPBcCyX5sR7v+9odQIhigeAA
mQQ8tVqSiXCkirymA87tCgqcq9RQn/FpBUGDqd0oBB5CAbI49+XCxt+ANMM2jgnl
FqFn0eJmnc6hk0oqqYr1ZL21kqOf/lpCKcAqNDKTM2CIYezfy60nDPG2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt7li0n2XoJBuSJZgC/ScsDENFdMB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLYqMSat
wSggLy8CaBqgMDZL9O2agekj9QjLO72w9xyHLCm3WwR8MnNC3Izwz/A5PbvSVnEE
f6Hz5i0xJaekDR6Q5nITGfOrTsYC6Q6SvPU6CqbWD60VWwxv1tl8FqC9xRX+wZgl
1MhmM9vKx5ZLK0jsQPOHLV6uPUpNPyCEJo1okdxpXKlbYsp0+no6onwydVCclieq
Gr+YqxjZDAehGL0J7gLWJ6BP8h7Qc2n6SbhsQm2AU9PZY51jX+p5eaVVAnZQnObf
8tJ8KngamVfuQlN9kIQNJk6ZLifEF7ttedjFa1LpRoi1tt6zlsQZKjvK66YE5mDn
MxQ3wylz4fiwag==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:31 2025 by rpki-client