Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: EB+iZFY+UQH/vOO+HjQnNouLqVE79MznZIJq/FRq730=
Subject key identifier: 16:27:CB:F9:52:7E:EC:95:48:FF:BB:4B:87:AC:97:C1:D1:62:DD:97
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 01974D44FC5EF1EEBE3E90E648CADD40BBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0EAB
Signing time: Sun 08 Jun 2025 02:00:56 +0000
Manifest this update: Sun 08 Jun 2025 02:00:56 +0000
Manifest next update: Mon 09 Jun 2025 02:00:56 +0000
Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: viJZH6MzzrUi/1b9Chq0ytOSLHpID6CaG9kv4rt2BqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:fc:5e:f1:ee:be:3e:90:e6:48:ca:dd:40:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Jun 8 02:00:56 2025 GMT
Not After : Jun 9 02:00:56 2025 GMT
Subject: CN=1627cbf9527eec9548ffbb4b87ac97c1d162dd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:47:27:4b:f6:87:bc:79:64:48:96:00:3b:
92:ae:41:8e:ec:73:06:4d:53:7c:c1:5c:bb:94:42:
2f:34:36:91:74:da:dd:6b:fd:1d:a7:c3:f3:9d:2a:
16:ab:aa:bd:c2:7f:a9:94:a1:88:59:0a:9a:a1:8b:
2e:76:48:c5:97:45:a2:87:9e:5a:00:eb:ec:56:ba:
cc:a7:92:1e:06:c7:99:d1:bb:2a:ec:90:4a:97:0a:
ee:e2:5a:b2:bc:6f:0b:08:98:c9:e9:06:6a:c4:e5:
83:74:1c:fd:53:84:c7:ee:64:00:f9:c0:c1:6d:8e:
38:8b:c3:df:52:35:5f:98:22:f5:b2:6f:94:b5:a3:
e8:80:6f:74:98:b6:a7:b4:07:4f:2b:80:2c:0a:d3:
51:25:ea:f2:43:77:c4:5c:36:bd:a5:33:3a:52:2d:
ac:d6:d1:1c:9d:7e:05:5b:23:7a:d9:4b:65:ca:df:
01:1e:c4:9a:8e:f4:aa:d5:ee:80:2a:e4:98:53:d1:
4b:41:14:f9:d3:c7:6a:d4:ce:c3:bf:24:16:aa:cf:
40:30:2a:85:7c:f4:82:66:1c:3e:c4:42:c9:4f:55:
65:30:a8:2e:d5:76:21:4f:63:3a:4a:17:36:5b:3e:
c9:cf:29:29:5a:7b:92:4a:9e:70:2b:d6:18:63:a3:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:CB:F9:52:7E:EC:95:48:FF:BB:4B:87:AC:97:C1:D1:62:DD:97
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:2c:99:19:31:a2:20:ac:42:03:6d:3f:64:8d:43:fe:84:
df:5f:24:01:b5:99:cf:69:d8:72:f0:eb:7c:71:af:20:9c:af:
4c:75:a2:fa:27:8d:3e:f5:2d:c7:da:34:d1:31:e2:14:c8:1a:
a5:04:52:a8:56:87:31:81:9c:bb:66:2f:40:53:c0:6d:f6:83:
5b:f6:41:b9:2f:04:f8:98:93:a2:bf:b8:e2:06:e6:a6:b6:05:
d4:27:58:06:77:60:e1:80:6b:eb:3c:ca:4e:23:0c:06:5e:16:
7b:29:66:0a:e8:13:e0:7e:62:97:0b:01:65:82:be:3a:2c:f8:
4f:09:c3:d9:fb:ee:be:6e:08:20:ef:2a:6d:78:6c:6d:01:5f:
d1:ba:d5:18:17:2e:f5:0b:5c:72:f2:fa:66:d9:38:5c:bd:6d:
3a:5b:63:19:9e:8b:87:e9:42:96:c3:3b:73:76:77:5f:74:f4:
6b:0f:e3:85:43:54:d5:ca:42:84:f7:14:eb:ad:ba:a4:65:e5:
db:b3:2c:b6:8b:57:2a:30:f0:86:52:5f:89:30:2c:ad:84:0a:
c5:43:6f:f4:5f:54:cf:4d:b8:9f:3d:d3:42:ba:aa:ae:a4:68:
2a:e7:47:76:ff:66:e8:a3:1a:98:3b:d9:1a:ae:72:7c:c1:01:
e2:bc:8b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRPxe8e6+PpDmSMrdQLv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODdiOWNkYTc1NjAzZWIwZDllMzc3MTY3YmY3ZTBjOGU0
NDA0MDMwHhcNMjUwNjA4MDIwMDU2WhcNMjUwNjA5MDIwMDU2WjAzMTEwLwYDVQQD
EygxNjI3Y2JmOTUyN2VlYzk1NDhmZmJiNGI4N2FjOTdjMWQxNjJkZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oZHJ0v2h7x5ZEiWADuSrkGO7HMG
TVN8wVy7lEIvNDaRdNrda/0dp8PznSoWq6q9wn+plKGIWQqaoYsudkjFl0Wih55a
AOvsVrrMp5IeBseZ0bsq7JBKlwru4lqyvG8LCJjJ6QZqxOWDdBz9U4TH7mQA+cDB
bY44i8PfUjVfmCL1sm+UtaPogG90mLantAdPK4AsCtNRJeryQ3fEXDa9pTM6Ui2s
1tEcnX4FWyN62Utlyt8BHsSajvSq1e6AKuSYU9FLQRT508dq1M7DvyQWqs9AMCqF
fPSCZhw+xELJT1VlMKgu1XYhT2M6Shc2Wz7JzykpWnuSSp5wK9YYY6MgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYny/lSfuyVSP+7S4esl8HRYt2XMB8GA1UdIwQY
MBaAFMWHuc2nVgPrDZ43cWe/fgyORAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUt
ZTc1M2NmNzY4YzE0LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUtZTc1M2NmNzY4YzE0
LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0ssmRkx
oiCsQgNtP2SNQ/6E318kAbWZz2nYcvDrfHGvIJyvTHWi+ieNPvUtx9o00THiFMga
pQRSqFaHMYGcu2YvQFPAbfaDW/ZBuS8E+JiTor+44gbmprYF1CdYBndg4YBr6zzK
TiMMBl4WeylmCugT4H5ilwsBZYK+Oiz4TwnD2fvuvm4IIO8qbXhsbQFf0brVGBcu
9QtccvL6Ztk4XL1tOltjGZ6Lh+lClsM7c3Z3X3T0aw/jhUNU1cpChPcU6626pGXl
27MstotXKjDwhlJfiTAsrYQKxUNv9F9Uz024nz3TQrqqrqRoKudHdv9m6KMamDvZ
Gq5yfMEB4ryLgg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:38 2025 by rpki-client