Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: K+IXGRi0oMtxM5z5SOk8yDC2HQLLql+qjQC+RP2Af90=
Subject key identifier: 85:9F:84:BF:CF:F2:B1:6C:22:E5:4D:FA:33:56:2F:14:3C:4A:C9:67
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 01974A7A807596AC8D65556C7A6F30F55F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 13D8
Signing time: Sat 07 Jun 2025 13:00:31 +0000
Manifest this update: Sat 07 Jun 2025 13:00:31 +0000
Manifest next update: Sun 08 Jun 2025 13:00:31 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: ypjG8c2XAlgr+eCyYtU538LuA/7gc6y1+4nNidVAtXM=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:80:75:96:ac:8d:65:55:6c:7a:6f:30:f5:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Jun 7 13:00:31 2025 GMT
Not After : Jun 8 13:00:31 2025 GMT
Subject: CN=859f84bfcff2b16c22e54dfa33562f143c4ac967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:03:bd:0f:27:a6:1a:45:30:de:5d:cc:06:
9c:90:81:06:bb:bf:a4:a7:0b:09:84:8b:2e:a9:0e:
4a:1a:d2:3d:6f:2d:7c:f1:bf:a9:0f:04:c7:fc:19:
ce:5c:b6:d8:b8:4b:a7:e8:af:05:5c:74:5b:78:6f:
6d:6d:0e:18:bc:37:41:d2:c8:b9:b0:2e:fc:13:ff:
46:01:5a:87:c2:f8:6e:7e:2c:01:a9:4d:f4:0b:f3:
bc:da:71:99:13:b2:55:bc:c1:bb:9f:84:04:8c:5e:
d7:1a:76:95:86:21:b2:9e:35:85:47:de:50:d1:2f:
47:9f:35:de:03:38:77:d0:58:18:eb:0d:e6:e5:90:
be:7c:fe:28:84:b2:00:82:39:c6:af:83:73:8a:c1:
85:b0:1f:5b:7c:a6:06:13:a2:46:f1:9e:f6:79:a9:
0e:73:38:67:29:3f:01:dd:82:3e:31:05:e1:ac:73:
8b:c0:57:01:c6:30:d7:d5:88:62:9d:43:9e:46:48:
60:f3:99:da:46:bf:94:37:4c:9d:eb:cd:d7:80:f1:
02:65:93:45:52:1d:13:d0:77:f9:65:cf:3c:08:6d:
4e:de:97:c5:ff:60:c8:96:a8:80:02:2c:65:c7:bb:
3b:2c:e3:30:59:da:12:08:86:2b:3a:dd:ea:3f:34:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:84:BF:CF:F2:B1:6C:22:E5:4D:FA:33:56:2F:14:3C:4A:C9:67
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:46:75:3e:c7:4c:6c:c1:77:9d:e7:5f:f1:3b:b8:c5:d1:33:
e5:65:97:17:1f:50:5d:ac:f4:c2:20:13:29:31:b2:59:93:c6:
a9:ea:09:79:1d:8f:79:6e:38:63:53:4a:c4:f8:84:53:c8:c5:
d3:06:7b:43:d3:73:9e:88:11:c4:40:ec:85:3a:7e:09:55:f1:
6d:92:f1:53:38:e6:10:3a:b0:27:d7:c4:bc:a2:b3:8c:ca:a8:
90:5c:7b:8c:ac:d9:55:83:e6:89:22:ef:dc:bb:e3:fe:e1:36:
53:07:ee:52:6a:86:d4:d6:04:17:07:01:18:c7:23:87:ee:fa:
6b:b7:c3:96:3a:0e:84:93:cf:7d:ed:cc:04:66:d9:40:36:78:
18:31:e3:1c:34:c8:a2:63:99:59:3c:02:83:f8:d4:f5:ab:ef:
14:dd:89:93:74:67:32:92:3c:fe:b8:8e:24:3b:76:6f:b5:9c:
aa:4e:89:42:f3:4d:6a:03:4b:73:ad:a8:e5:a5:cb:06:c2:8a:
a1:53:48:ec:b9:97:4a:61:9c:6e:f2:e8:1e:57:ec:f7:da:d0:
f8:d3:cc:e6:51:4c:b6:a3:d5:a6:84:c8:1a:04:90:f6:8a:7e:
ee:02:a9:b5:8f:42:39:09:46:42:7c:b5:f0:31:57:ca:f3:2c:
2f:81:27:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeoB1lqyNZVVsem8w9V8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWMyMTg4MTFkOTI5NGFkNjMxMjUzYTQ0NWVkMWQzOTVh
OTYzOWYwHhcNMjUwNjA3MTMwMDMxWhcNMjUwNjA4MTMwMDMxWjAzMTEwLwYDVQQD
Eyg4NTlmODRiZmNmZjJiMTZjMjJlNTRkZmEzMzU2MmYxNDNjNGFjOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBsDvQ8nphpFMN5dzAackIEGu7+k
pwsJhIsuqQ5KGtI9by188b+pDwTH/BnOXLbYuEun6K8FXHRbeG9tbQ4YvDdB0si5
sC78E/9GAVqHwvhufiwBqU30C/O82nGZE7JVvMG7n4QEjF7XGnaVhiGynjWFR95Q
0S9HnzXeAzh30FgY6w3m5ZC+fP4ohLIAgjnGr4NzisGFsB9bfKYGE6JG8Z72eakO
czhnKT8B3YI+MQXhrHOLwFcBxjDX1YhinUOeRkhg85naRr+UN0yd683XgPECZZNF
Uh0T0Hf5Zc88CG1O3pfF/2DIlqiAAixlx7s7LOMwWdoSCIYrOt3qPzRLKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWfhL/P8rFsIuVN+jNWLxQ8SslnMB8GA1UdIwQY
MBaAFP8cIYgR2SlK1jElOkRe0dOVqWOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt
YTBhNjBiYjljZDliLzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli
LzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEZ1PsdM
bMF3nedf8Tu4xdEz5WWXFx9QXaz0wiATKTGyWZPGqeoJeR2PeW44Y1NKxPiEU8jF
0wZ7Q9NznogRxEDshTp+CVXxbZLxUzjmEDqwJ9fEvKKzjMqokFx7jKzZVYPmiSLv
3Lvj/uE2UwfuUmqG1NYEFwcBGMcjh+76a7fDljoOhJPPfe3MBGbZQDZ4GDHjHDTI
omOZWTwCg/jU9avvFN2Jk3RnMpI8/riOJDt2b7Wcqk6JQvNNagNLc62o5aXLBsKK
oVNI7LmXSmGcbvLoHlfs99rQ+NPM5lFMtqPVpoTIGgSQ9op+7gKptY9COQlGQny1
8DFXyvMsL4EnXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:40:50 2025 by rpki-client