Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: jO5CbMpMQQw7kMQ8p8+h/f4rho4fuCx6xN5PH7QdhAU=
Subject key identifier: EE:31:15:94:1E:84:9B:5C:7D:60:63:01:C1:5A:57:77:4B:B8:4E:06
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01974AE8AA9AE9BB6FF176CC5D7CF4A7AB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 12EA
Signing time: Sat 07 Jun 2025 15:00:51 +0000
Manifest this update: Sat 07 Jun 2025 15:00:51 +0000
Manifest next update: Sun 08 Jun 2025 15:00:51 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: +1ojujKjV2jBYhFmW5JZpoymNYxUdX1Vk/2Crsah604=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:aa:9a:e9:bb:6f:f1:76:cc:5d:7c:f4:a7:ab:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jun 7 15:00:51 2025 GMT
Not After : Jun 8 15:00:51 2025 GMT
Subject: CN=ee3115941e849b5c7d606301c15a57774bb84e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:e7:db:90:4e:78:bb:85:fd:e7:71:10:ad:
c8:34:21:58:bb:69:97:c0:fc:d7:bc:98:f7:5b:c9:
6e:00:1e:45:49:8b:1e:92:9c:eb:88:06:34:2f:37:
b4:c0:b7:e3:5a:20:ba:4b:a9:93:31:d3:08:7e:89:
a1:ce:e2:24:3e:1a:ac:e5:ad:e6:62:7a:e7:59:97:
6e:81:b4:c6:2f:6e:fb:18:ee:67:8d:6f:f2:26:bc:
0d:ae:34:fe:75:5b:32:d5:45:d3:64:cd:d4:3c:4a:
a7:cc:69:7b:9c:8d:99:8e:3d:b1:13:0d:32:c9:03:
28:c0:35:94:fd:2c:54:73:1f:f0:ab:20:bc:22:cc:
e1:57:33:c6:5c:1e:a9:65:1f:ae:25:f0:9a:5a:0e:
19:8e:d2:9b:5d:e0:08:32:67:68:a8:0c:44:49:f2:
31:a7:39:8c:97:2a:fa:e1:54:5e:b3:db:01:0e:ca:
73:ee:a1:60:ac:a0:df:0e:65:76:75:cf:ae:a5:48:
8d:2b:2c:82:32:09:f7:85:64:cf:fb:8d:c8:6e:9a:
2b:6b:59:40:ba:b2:20:a5:81:93:49:c6:95:24:a9:
ce:1c:3a:c9:ac:d0:30:56:06:97:db:cb:4e:20:25:
3e:2f:74:37:56:ea:cc:a6:de:8f:a1:d4:3c:34:77:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:31:15:94:1E:84:9B:5C:7D:60:63:01:C1:5A:57:77:4B:B8:4E:06
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:93:72:49:8c:3a:40:59:d8:fd:ff:2c:a1:02:d4:0d:bc:
4a:49:cc:1f:3c:87:98:dd:a8:9b:2a:de:a6:0a:fc:20:c3:50:
d0:07:b0:6c:89:9d:f1:e3:8a:17:86:d7:f8:93:a0:61:72:49:
40:ef:e1:9e:b2:68:18:59:5c:95:4b:28:a2:86:10:0e:21:6d:
db:ab:0b:d3:bf:a3:f4:b4:7e:2b:6b:63:c8:74:24:40:fe:d0:
61:cd:31:dd:95:65:7a:00:5d:64:90:97:41:4c:f0:fd:52:b9:
75:ae:f9:76:30:be:31:ce:4a:60:8e:20:f6:51:18:19:2b:3b:
42:19:71:46:53:6b:f7:4e:01:6c:bc:3d:4a:ed:d8:81:8c:a4:
1c:a4:d5:19:70:9e:4c:4a:c1:66:3b:93:9b:92:d7:9d:e3:e7:
e5:9d:27:8f:f8:2a:38:66:3d:78:31:92:eb:86:d3:d7:f5:19:
2b:bb:07:90:bc:3b:11:02:24:5e:36:34:cb:92:b0:e3:5f:f7:
e3:71:fa:e5:93:48:44:f3:37:60:53:3f:b1:b7:1d:fa:f0:28:
55:9d:4e:12:cb:f5:58:d5:06:aa:61:24:d6:f2:72:82:bc:86:
7d:bc:75:f9:35:12:bb:a9:0b:e8:de:7d:63:cc:93:fa:b4:16:
ac:b2:a9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Kqa6btv8XbMXXz0p6tXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjUwNjA3MTUwMDUxWhcNMjUwNjA4MTUwMDUxWjAzMTEwLwYDVQQD
EyhlZTMxMTU5NDFlODQ5YjVjN2Q2MDYzMDFjMTVhNTc3NzRiYjg0ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpnn25BOeLuF/edxEK3INCFYu2mX
wPzXvJj3W8luAB5FSYsekpzriAY0Lze0wLfjWiC6S6mTMdMIfomhzuIkPhqs5a3m
YnrnWZdugbTGL277GO5njW/yJrwNrjT+dVsy1UXTZM3UPEqnzGl7nI2Zjj2xEw0y
yQMowDWU/SxUcx/wqyC8IszhVzPGXB6pZR+uJfCaWg4ZjtKbXeAIMmdoqAxESfIx
pzmMlyr64VRes9sBDspz7qFgrKDfDmV2dc+upUiNKyyCMgn3hWTP+43Ibpora1lA
urIgpYGTScaVJKnOHDrJrNAwVgaX28tOICU+L3Q3VurMpt6PodQ8NHdupwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4xFZQehJtcfWBjAcFaV3dLuE4GMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA+TckmM
OkBZ2P3/LKEC1A28SknMHzyHmN2omyrepgr8IMNQ0AewbImd8eOKF4bX+JOgYXJJ
QO/hnrJoGFlclUsoooYQDiFt26sL07+j9LR+K2tjyHQkQP7QYc0x3ZVlegBdZJCX
QUzw/VK5da75djC+Mc5KYI4g9lEYGSs7QhlxRlNr904BbLw9Su3YgYykHKTVGXCe
TErBZjuTm5LXnePn5Z0nj/gqOGY9eDGS64bT1/UZK7sHkLw7EQIkXjY0y5Kw41/3
43H65ZNIRPM3YFM/sbcd+vAoVZ1OEsv1WNUGqmEk1vJygryGfbx1+TUSu6kL6N59
Y8yT+rQWrLKpZw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:56 2025 by rpki-client