Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: D7D86srO1prR0av3hfnMyy9x7920Hz9AE3h4sKsYc8M=
Subject key identifier: B3:A6:70:2A:79:93:B8:09:08:E4:D2:47:FA:A2:C1:D5:26:93:F3:DB
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 0197499F1763CEBE08C3F9389CB771B5972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:52 +0000
Manifest this update: Sat 07 Jun 2025 09:00:52 +0000
Manifest next update: Sun 08 Jun 2025 09:00:52 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: xbz+qCOpz9YJ6WeT8LejdONkBHxT6RqbuDz1OFPB2g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:17:63:ce:be:08:c3:f9:38:9c:b7:71:b5:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jun 7 09:00:52 2025 GMT
Not After : Jun 8 09:00:52 2025 GMT
Subject: CN=b3a6702a7993b80908e4d247faa2c1d52693f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:c2:ff:4f:8a:54:dc:31:f3:fd:66:82:21:
7a:73:80:a8:20:3e:5e:d8:16:b4:d7:1a:0e:98:5f:
a9:14:65:f9:5e:6f:b8:ce:6d:92:4f:44:65:9e:45:
d8:df:a2:0a:e7:95:50:eb:88:e1:07:e4:c3:fd:dd:
74:00:15:be:33:53:3a:2e:b9:cb:9f:44:99:1e:05:
6a:f0:e4:8f:81:96:16:c1:58:1e:8c:d2:c9:0f:f7:
02:84:6a:15:86:0c:bd:03:49:a3:80:85:90:03:0b:
fb:82:9e:46:14:e3:85:84:d3:11:42:62:19:c3:f6:
12:16:e4:de:c7:cb:d6:52:a3:fa:c6:0f:c6:f8:3e:
88:af:c4:1e:c0:a1:f8:15:1f:6e:d4:57:bd:b8:fe:
58:10:99:eb:a4:4d:32:25:e9:5b:42:a9:d1:00:40:
31:ec:e1:03:56:60:c0:e5:40:9e:3a:26:d6:9e:35:
64:96:f2:f5:c3:ec:55:c5:f3:97:18:04:23:9f:9b:
60:78:88:c3:69:6d:9e:02:18:c4:94:f6:ce:28:ae:
b3:b2:d3:1b:da:37:d9:d0:df:1a:ac:4c:79:4f:0d:
b9:05:7b:c7:96:2d:5e:17:fa:01:49:2c:3e:10:10:
6c:6e:ea:ad:36:83:90:42:a6:28:48:74:d7:c0:36:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:70:2A:79:93:B8:09:08:E4:D2:47:FA:A2:C1:D5:26:93:F3:DB
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d0:48:cf:4e:b6:75:d0:e6:2e:4d:41:8b:ac:6d:ec:2c:95:
ba:68:87:1c:b1:92:02:c9:8f:6c:d0:0d:d1:81:7a:18:61:bf:
ce:91:05:15:3b:7e:ea:97:09:ec:48:08:68:96:c5:49:a6:55:
b4:86:cc:15:8b:9a:78:cb:91:ee:d0:b7:12:0b:a5:cc:cd:3a:
76:59:7c:3f:a9:f6:16:1c:e3:bd:8f:0c:52:b8:06:d5:af:fd:
63:ca:af:39:38:93:99:d1:b1:6f:c9:99:df:1e:42:58:c8:64:
e2:64:bb:d6:0e:91:b0:ae:f5:4a:2f:2f:1a:5d:2d:5d:b1:74:
13:25:11:09:b9:5d:17:e3:15:7e:cc:30:33:91:40:ba:47:19:
ba:97:dd:36:cc:0b:9a:9b:49:a0:cd:0a:61:61:1b:54:03:c9:
60:26:85:65:49:f1:ef:33:f8:55:1d:bf:2b:99:16:ab:db:5f:
e1:3e:80:56:2e:51:af:4c:34:cd:d5:c2:19:94:ea:5e:ea:86:
39:cf:5e:fb:a7:2a:da:69:bc:8c:84:a8:2c:12:78:5f:2f:c7:
2c:fb:06:ab:13:34:c1:f9:53:03:8a:d9:71:fa:a8:9f:06:25:
ba:af:57:e7:11:21:c6:75:43:2c:8c:ac:e4:ce:da:54:4a:89:
8c:ba:c2:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnxdjzr4Iw/k4nLdxtZcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWQ4Njk3NGE3YjYyNDE5MmVjOGQ4MzRjZjI5MDZlMTMw
MmU0MzEwHhcNMjUwNjA3MDkwMDUyWhcNMjUwNjA4MDkwMDUyWjAzMTEwLwYDVQQD
EyhiM2E2NzAyYTc5OTNiODA5MDhlNGQyNDdmYWEyYzFkNTI2OTNmM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGTC/0+KVNwx8/1mgiF6c4CoID5e
2Ba01xoOmF+pFGX5Xm+4zm2ST0RlnkXY36IK55VQ64jhB+TD/d10ABW+M1M6LrnL
n0SZHgVq8OSPgZYWwVgejNLJD/cChGoVhgy9A0mjgIWQAwv7gp5GFOOFhNMRQmIZ
w/YSFuTex8vWUqP6xg/G+D6Ir8QewKH4FR9u1Fe9uP5YEJnrpE0yJelbQqnRAEAx
7OEDVmDA5UCeOibWnjVklvL1w+xVxfOXGAQjn5tgeIjDaW2eAhjElPbOKK6zstMb
2jfZ0N8arEx5Tw25BXvHli1eF/oBSSw+EBBsbuqtNoOQQqYoSHTXwDZk0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOmcCp5k7gJCOTSR/qiwdUmk/PbMB8GA1UdIwQY
MBaAFFxdhpdKe2JBkuyNg0zykG4TAuQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEt
YmQ4MDJmYzRhYTk0LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEtYmQ4MDJmYzRhYTk0
LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtBIz062
ddDmLk1Bi6xt7CyVumiHHLGSAsmPbNAN0YF6GGG/zpEFFTt+6pcJ7EgIaJbFSaZV
tIbMFYuaeMuR7tC3EgulzM06dll8P6n2FhzjvY8MUrgG1a/9Y8qvOTiTmdGxb8mZ
3x5CWMhk4mS71g6RsK71Si8vGl0tXbF0EyURCbldF+MVfswwM5FAukcZupfdNswL
mptJoM0KYWEbVAPJYCaFZUnx7zP4VR2/K5kWq9tf4T6AVi5Rr0w0zdXCGZTqXuqG
Oc9e+6cq2mm8jISoLBJ4Xy/HLPsGqxM0wflTA4rZcfqonwYluq9X5xEhxnVDLIys
5M7aVEqJjLrC4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:21 2025 by rpki-client