Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: 1SYjNi8VUkb5Q7kVUel441VDpZQqsKe7M8qDpQOSRHQ=
Subject key identifier: 7C:87:AF:C8:F9:78:A4:38:88:5A:B2:70:74:9E:A8:BD:D0:86:57:23
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 019749310F20F2BD0FE3B5C135FCA5B14791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0DAD
Signing time: Sat 07 Jun 2025 07:00:41 +0000
Manifest this update: Sat 07 Jun 2025 07:00:41 +0000
Manifest next update: Sun 08 Jun 2025 07:00:41 +0000
Files and hashes: 1: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: jIL2B6qoYUor+NyjfrBB9XQP9TZIgdac0+dZnRTpIBo=)
2: rCcV6Zewu1Z9eZJuSlVmU21XPSI.roa (hash: faeDhvfDA6I7kGgODqOk5x1S+G4V8KqFh6Vs8sDfnGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:0f:20:f2:bd:0f:e3:b5:c1:35:fc:a5:b1:47:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Jun 7 07:00:41 2025 GMT
Not After : Jun 8 07:00:41 2025 GMT
Subject: CN=7c87afc8f978a438885ab270749ea8bdd0865723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:2f:d6:94:f3:a2:a9:e2:32:62:36:7c:70:
45:f5:06:bc:b5:3f:cf:17:e3:97:eb:b1:a5:a7:7c:
96:9e:e7:bb:a9:7b:b4:e5:93:c8:fd:a8:db:c7:e1:
f6:d1:af:36:a6:84:06:32:1b:16:3e:7b:2b:5c:8d:
87:34:24:11:9f:65:9b:d9:34:80:cc:b8:ae:31:28:
29:6b:4e:8a:ad:6e:4b:be:aa:52:96:fa:f4:66:59:
f8:26:d3:90:6b:68:01:0d:06:63:aa:fc:06:56:f5:
16:6c:13:6a:59:5e:17:33:f5:ea:ef:85:e4:e6:4a:
1e:2e:bc:6b:17:85:ed:b3:ae:ed:c4:d2:9f:44:07:
45:e2:0f:91:b2:41:bc:c2:2a:22:3c:bb:8f:c4:23:
b4:d5:35:d0:fc:3a:30:41:57:00:97:e7:aa:50:2b:
92:99:6b:5a:f1:a6:c3:d4:91:3e:83:61:f2:02:37:
48:7a:6d:b3:7d:57:fa:9a:3d:8f:1b:10:2d:09:62:
98:80:19:38:ed:0b:ce:93:a8:b7:43:d9:66:9f:16:
70:6d:49:16:68:a4:6f:d6:96:63:70:fa:3f:71:2e:
39:34:f9:64:81:84:1d:25:68:87:97:a3:52:d2:6a:
c1:51:17:6c:99:95:d7:61:74:fa:a2:83:60:20:c7:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:AF:C8:F9:78:A4:38:88:5A:B2:70:74:9E:A8:BD:D0:86:57:23
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:30:68:ac:3e:2a:b8:51:53:7f:fd:c6:ca:1e:52:02:81:6d:
30:c2:40:6a:4d:d6:3c:f8:51:18:db:47:b9:8c:47:e8:15:0e:
b5:03:d9:ba:54:4c:9b:25:6b:7f:67:90:6a:63:6e:eb:8a:d2:
1e:36:60:6c:4b:41:f8:e5:80:bd:b5:e5:75:c9:a9:11:db:f9:
51:03:28:8d:df:6a:c4:1d:28:51:d6:98:22:46:44:99:ae:00:
2a:36:ef:97:48:06:cc:ef:f6:67:78:8d:a3:51:71:a2:96:9c:
f1:83:e9:8b:cc:92:a4:95:0e:51:22:46:66:fa:ba:38:fd:b5:
48:a8:bc:86:71:bf:9a:79:f1:2f:6f:08:52:33:aa:a1:ea:f8:
68:1f:6d:6e:91:cc:a8:c0:e8:f0:69:d1:97:f6:6a:b5:5a:ca:
97:80:1a:6a:89:4c:84:76:43:be:29:cd:3d:d7:dc:79:c6:86:
71:49:a6:0d:59:08:e3:30:c6:27:ea:6d:9b:a2:04:37:22:80:
ed:0d:56:16:67:03:5b:36:b3:c3:f0:f4:1a:79:08:7f:af:6a:
f8:0b:b1:6e:52:76:23:ae:68:f6:2e:0e:ec:88:04:75:5b:af:
03:38:9e:b5:12:31:08:92:ff:83:df:5d:9b:ae:1b:fd:53:60:
b8:fa:02:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQ8g8r0P47XBNfylsUeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzlhY2Q0ZWU0MGZkYTQzMDIyYTJjOTY0MmIwNzFkYTY0
OTUyNmMwHhcNMjUwNjA3MDcwMDQxWhcNMjUwNjA4MDcwMDQxWjAzMTEwLwYDVQQD
Eyg3Yzg3YWZjOGY5NzhhNDM4ODg1YWIyNzA3NDllYThiZGQwODY1NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsv1pTzoqniMmI2fHBF9Qa8tT/P
F+OX67Glp3yWnue7qXu05ZPI/ajbx+H20a82poQGMhsWPnsrXI2HNCQRn2Wb2TSA
zLiuMSgpa06KrW5LvqpSlvr0Zln4JtOQa2gBDQZjqvwGVvUWbBNqWV4XM/Xq74Xk
5koeLrxrF4Xts67txNKfRAdF4g+RskG8wioiPLuPxCO01TXQ/DowQVcAl+eqUCuS
mWta8abD1JE+g2HyAjdIem2zfVf6mj2PGxAtCWKYgBk47QvOk6i3Q9lmnxZwbUkW
aKRv1pZjcPo/cS45NPlkgYQdJWiHl6NS0mrBURdsmZXXYXT6ooNgIMfZkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyHr8j5eKQ4iFqycHSeqL3QhlcjMB8GA1UdIwQY
MBaAFF55rNTuQP2kMCKiyWQrBx2mSVJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYt
ZWI4ZGE1OTU0ZjNiLzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYtZWI4ZGE1OTU0ZjNi
LzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDBorD4q
uFFTf/3Gyh5SAoFtMMJAak3WPPhRGNtHuYxH6BUOtQPZulRMmyVrf2eQamNu64rS
HjZgbEtB+OWAvbXldcmpEdv5UQMojd9qxB0oUdaYIkZEma4AKjbvl0gGzO/2Z3iN
o1Fxopac8YPpi8ySpJUOUSJGZvq6OP21SKi8hnG/mnnxL28IUjOqoer4aB9tbpHM
qMDo8GnRl/ZqtVrKl4AaaolMhHZDvinNPdfcecaGcUmmDVkI4zDGJ+ptm6IENyKA
7Q1WFmcDWzazw/D0GnkIf69q+AuxblJ2I65o9i4O7IgEdVuvAzietRIxCJL/g99d
m64b/VNguPoCXg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:24 2025 by rpki-client