Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: 4krRKp9NJfTBsb+TJpmbzJI4t5GNQ43atHDEc2YTngA=
Subject key identifier: 85:38:D2:46:A4:0B:0A:40:39:07:85:8F:5D:9B:3C:E3:40:30:86:C9
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019754C7602D405B0E639E578461B3ABF95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0D43
Signing time: Mon 09 Jun 2025 13:00:41 +0000
Manifest this update: Mon 09 Jun 2025 13:00:41 +0000
Manifest next update: Tue 10 Jun 2025 13:00:41 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: xRdWNo9u3rLX/Dj0LANf+khk2K+jruNkNmvV0UPy4+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:60:2d:40:5b:0e:63:9e:57:84:61:b3:ab:f9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jun 9 13:00:41 2025 GMT
Not After : Jun 10 13:00:41 2025 GMT
Subject: CN=8538d246a40b0a403907858f5d9b3ce3403086c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:c2:72:c8:dc:3c:a0:00:59:09:c4:04:7f:
7e:d1:b4:3c:37:5b:2a:a3:81:92:bc:ee:33:e1:b0:
4f:4a:fb:99:29:bc:a3:99:1f:be:82:a0:78:de:4b:
67:34:ee:66:ba:ce:02:2f:ed:79:d7:3f:ef:2f:8b:
aa:86:65:d3:4b:82:e9:58:62:8a:a8:f9:d3:13:9f:
e5:06:62:bd:c1:fa:3c:f5:7b:50:41:49:11:8e:e9:
07:54:77:03:3f:91:8b:19:16:64:79:f6:bb:ec:dc:
8a:1f:da:9f:e0:cf:f6:a4:f1:3e:f6:4b:53:26:39:
3f:32:94:c7:b0:fb:ad:cc:49:f9:15:01:71:8c:84:
2a:30:cb:bc:61:d0:e0:bd:cb:8d:f0:32:e9:8e:af:
ad:e4:8f:b4:50:8f:01:0d:95:1c:1a:10:b8:b9:8f:
01:8c:e4:8e:b6:79:5f:1a:7d:75:5c:cd:5e:f9:a3:
28:76:ae:ca:c1:93:2f:a5:74:b2:1b:89:aa:e8:cf:
9c:80:5f:35:1f:68:eb:1d:32:11:ba:f0:2a:63:cd:
4a:3c:2f:7d:4b:f2:b0:81:2e:fd:62:6f:64:ff:09:
86:2c:23:bf:da:f6:ee:7f:1c:a5:57:16:99:ce:b6:
31:5b:40:d0:e7:80:51:cc:88:10:1a:1f:01:3d:d4:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:D2:46:A4:0B:0A:40:39:07:85:8F:5D:9B:3C:E3:40:30:86:C9
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:78:15:86:f4:17:95:bb:6e:32:6e:83:17:1b:f1:5e:37:
8a:52:cb:47:98:7c:19:5d:10:49:e3:73:89:68:71:68:38:9a:
49:ca:a4:6d:26:43:e7:c7:76:40:3f:86:e7:78:a1:7b:00:07:
53:c9:08:07:c2:21:8c:ee:6e:1a:c5:1e:c9:87:9c:8c:9a:6d:
1b:66:c7:eb:08:96:aa:87:b6:58:07:44:60:ed:a3:8f:09:c3:
81:e0:13:e4:b7:bc:c6:f1:8c:79:d7:01:24:7b:04:4d:63:f5:
06:5e:da:59:63:80:2a:e4:11:eb:be:c4:42:26:e0:76:51:21:
b4:98:b7:75:8e:a1:de:6f:da:28:03:4d:09:5c:c2:be:f0:e6:
19:1a:9a:68:e2:dc:d0:0e:85:c3:1e:00:4a:8e:31:0f:b6:36:
e6:f4:20:69:d3:97:0c:ed:aa:c1:1d:c1:4c:c0:23:df:30:1a:
6f:d0:20:77:71:df:6f:bf:46:39:9b:ab:1b:34:d6:b3:39:b3:
e9:6d:24:ef:6f:91:26:3d:12:14:92:43:1d:a7:e5:51:e4:01:
85:38:0b:d7:6d:d2:a3:ee:0f:d3:cb:1c:6d:41:de:e4:8b:c9:
76:e2:e1:19:c3:58:1f:fd:98:d8:b4:48:c4:24:d9:86:e3:bb:
7c:77:57:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUx2AtQFsOY55XhGGzq/lbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey
YTYwZGUwHhcNMjUwNjA5MTMwMDQxWhcNMjUwNjEwMTMwMDQxWjAzMTEwLwYDVQQD
Eyg4NTM4ZDI0NmE0MGIwYTQwMzkwNzg1OGY1ZDliM2NlMzQwMzA4NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWXCcsjcPKAAWQnEBH9+0bQ8N1sq
o4GSvO4z4bBPSvuZKbyjmR++gqB43ktnNO5mus4CL+151z/vL4uqhmXTS4LpWGKK
qPnTE5/lBmK9wfo89XtQQUkRjukHVHcDP5GLGRZkefa77NyKH9qf4M/2pPE+9ktT
Jjk/MpTHsPutzEn5FQFxjIQqMMu8YdDgvcuN8DLpjq+t5I+0UI8BDZUcGhC4uY8B
jOSOtnlfGn11XM1e+aModq7KwZMvpXSyG4mq6M+cgF81H2jrHTIRuvAqY81KPC99
S/KwgS79Ym9k/wmGLCO/2vbufxylVxaZzrYxW0DQ54BRzIgQGh8BPdSNlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU40kakCwpAOQeFj12bPONAMIbJMB8GA1UdIwQY
MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt
ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh
LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+14FYb0
F5W7bjJugxcb8V43ilLLR5h8GV0QSeNziWhxaDiaScqkbSZD58d2QD+G53ihewAH
U8kIB8IhjO5uGsUeyYecjJptG2bH6wiWqoe2WAdEYO2jjwnDgeAT5Le8xvGMedcB
JHsETWP1Bl7aWWOAKuQR677EQibgdlEhtJi3dY6h3m/aKANNCVzCvvDmGRqaaOLc
0A6Fwx4ASo4xD7Y25vQgadOXDO2qwR3BTMAj3zAab9Agd3Hfb79GOZurGzTWszmz
6W0k72+RJj0SFJJDHaflUeQBhTgL123So+4P08scbUHe5IvJduLhGcNYH/2Y2LRI
xCTZhuO7fHdX7w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:21 2025 by rpki-client