Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: u8DwNz9Qoh/2HzFyVupawEwWFvbVqwJAspVvg0e3b8U=
Subject key identifier: 80:0A:98:BB:23:74:31:77:8E:1D:45:9E:C3:D2:73:87:D0:D7:85:E4
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 019747B0D989ACA8F243EC084C590DE83BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 00:01:01 +0000
Manifest this update: Sat 07 Jun 2025 00:01:01 +0000
Manifest next update: Sun 08 Jun 2025 00:01:01 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: 4hHPi8FEo7rDBj0Uni5TqZxa7mnlPsmOi2GTBG6IYmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:d9:89:ac:a8:f2:43:ec:08:4c:59:0d:e8:3b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jun 7 00:01:01 2025 GMT
Not After : Jun 8 00:01:01 2025 GMT
Subject: CN=800a98bb237431778e1d459ec3d27387d0d785e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:99:b0:50:d3:ef:18:33:ed:a5:ec:dc:e5:
82:c1:e7:33:0e:4f:8f:86:4e:74:85:85:17:e6:33:
a9:a5:42:45:37:fa:0f:7b:31:7f:74:34:16:28:c6:
a9:d9:1e:2c:6b:43:41:b2:6d:12:e8:89:c7:ab:80:
58:18:d4:5f:3b:fd:f4:92:9c:e1:52:91:5c:d0:48:
88:07:52:00:a1:64:50:1c:60:7b:45:e8:4e:7a:2e:
61:3b:2e:e7:ee:40:89:55:45:e3:78:48:b6:0a:7e:
20:14:35:b2:17:9c:ee:46:33:0f:4e:5a:a0:4e:7c:
43:78:f1:61:6e:b9:68:39:d4:e8:3c:3c:11:6d:69:
89:86:51:b4:67:0a:fe:99:37:d8:19:7a:97:f3:be:
d8:ef:ca:74:46:bf:fe:e7:30:b7:f1:39:84:d4:b3:
9f:d9:3d:25:f0:58:21:ba:94:3f:27:11:fc:7e:a9:
b6:89:3a:c9:b4:73:c7:87:f4:67:0f:22:6a:db:0c:
d9:68:bd:b1:ff:e9:14:4a:15:e9:bb:81:ea:43:2a:
5a:f1:d0:93:d6:e9:38:11:14:78:0c:04:69:02:7b:
56:b4:5b:1f:24:53:31:f3:97:48:91:a3:8b:7a:ef:
bc:63:25:be:f8:7e:1e:db:08:80:10:58:b7:ce:e4:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:98:BB:23:74:31:77:8E:1D:45:9E:C3:D2:73:87:D0:D7:85:E4
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:6e:24:0a:27:da:9f:4e:37:2a:a4:94:30:9f:fd:59:38:
4b:11:51:08:7d:99:1a:3e:9c:29:14:dd:9f:7a:06:11:30:46:
7c:1c:76:58:84:75:ca:c1:af:07:a8:f6:17:98:0f:08:d0:fc:
c1:9a:f7:6a:6d:0c:8a:2f:b2:d9:01:b7:7a:cc:ab:9c:80:38:
13:c5:a1:e9:b6:73:68:99:b4:64:12:03:a8:38:0e:a8:6b:82:
b6:c2:88:9d:5a:83:ba:be:c8:4f:43:6c:65:fd:a3:3c:b4:66:
87:4c:5e:fe:f2:11:90:66:8a:25:0d:94:af:e0:07:b2:77:83:
8f:dd:e7:7e:cd:98:8f:91:d6:08:b4:26:e2:cb:6e:63:6d:a7:
74:0d:9d:87:f1:5c:2a:f7:9d:c2:3a:09:1c:3a:ec:92:d5:8b:
46:06:c6:9d:9d:7e:b3:d0:ef:a6:68:ab:22:82:fd:bc:e4:a4:
85:0b:93:61:a5:4c:ff:5c:4e:3b:9d:8c:9f:28:69:50:d7:4c:
22:e6:64:69:29:13:89:35:0b:2e:d6:8e:e9:a8:62:f1:f2:ef:
6b:e3:72:83:93:e1:d0:15:8a:c4:bb:67:56:5f:e8:02:0e:1b:
1b:ec:b1:0b:f4:fe:19:01:e5:2e:68:6f:5f:45:4d:97:56:15:
03:9f:21:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsNmJrKjyQ+wITFkN6DvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGMyN2Y4NTU4MWUyZTdiZGUwYzk4ZmJkNTRiZTFkNDk2
NzA1MTcwHhcNMjUwNjA3MDAwMTAxWhcNMjUwNjA4MDAwMTAxWjAzMTEwLwYDVQQD
Eyg4MDBhOThiYjIzNzQzMTc3OGUxZDQ1OWVjM2QyNzM4N2QwZDc4NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5qZsFDT7xgz7aXs3OWCweczDk+P
hk50hYUX5jOppUJFN/oPezF/dDQWKMap2R4sa0NBsm0S6InHq4BYGNRfO/30kpzh
UpFc0EiIB1IAoWRQHGB7RehOei5hOy7n7kCJVUXjeEi2Cn4gFDWyF5zuRjMPTlqg
TnxDePFhbrloOdToPDwRbWmJhlG0Zwr+mTfYGXqX877Y78p0Rr/+5zC38TmE1LOf
2T0l8FghupQ/JxH8fqm2iTrJtHPHh/RnDyJq2wzZaL2x/+kUShXpu4HqQypa8dCT
1uk4ERR4DARpAntWtFsfJFMx85dIkaOLeu+8YyW++H4e2wiAEFi3zuSA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAKmLsjdDF3jh1FnsPSc4fQ14XkMB8GA1UdIwQY
MBaAFF0MJ/hVgeLnveDJj71Uvh1JZwUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMt
MzQxZjUxNzNmY2Y3LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMtMzQxZjUxNzNmY2Y3
LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE1uJAon
2p9ONyqklDCf/Vk4SxFRCH2ZGj6cKRTdn3oGETBGfBx2WIR1ysGvB6j2F5gPCND8
wZr3am0Mii+y2QG3esyrnIA4E8Wh6bZzaJm0ZBIDqDgOqGuCtsKInVqDur7IT0Ns
Zf2jPLRmh0xe/vIRkGaKJQ2Ur+AHsneDj93nfs2Yj5HWCLQm4stuY22ndA2dh/Fc
KvedwjoJHDrsktWLRgbGnZ1+s9DvpmirIoL9vOSkhQuTYaVM/1xOO52MnyhpUNdM
IuZkaSkTiTULLtaO6ahi8fLva+Nyg5Ph0BWKxLtnVl/oAg4bG+yxC/T+GQHlLmhv
X0VNl1YVA58hUg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:26:58 2025 by rpki-client