Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: 5fubG7Wno/+0BxBbYycEv47EfHdZUpfmCBkaxREnS1g=
Subject key identifier: 72:44:7B:54:A0:3B:38:7C:1A:8E:03:78:3E:F3:26:10:61:07:1F:2A
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019748F9FA2EDCF97CCB51AF7E3C643730BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:31 +0000
Manifest this update: Sat 07 Jun 2025 06:00:31 +0000
Manifest next update: Sun 08 Jun 2025 06:00:31 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 3q1ZAH6xVhYm/ETGhgtRDc1gT8CpH+nG/OOAI06XuCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:fa:2e:dc:f9:7c:cb:51:af:7e:3c:64:37:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jun 7 06:00:31 2025 GMT
Not After : Jun 8 06:00:31 2025 GMT
Subject: CN=72447b54a03b387c1a8e03783ef3261061071f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:db:75:ce:92:03:20:9e:83:d9:f1:42:5c:
76:d9:e4:c7:d9:57:a4:a5:41:e4:a7:94:69:70:93:
8f:bc:b0:ad:21:2e:c7:fc:c6:40:82:1c:f5:90:6e:
ca:09:0d:2b:c8:d6:af:8a:d5:ec:07:fb:dc:f2:c0:
55:9c:90:02:28:2f:06:d7:e9:99:85:76:c5:c3:6d:
8b:f5:37:2f:dc:26:87:92:99:3b:af:98:d7:da:04:
98:da:d9:4b:c0:cd:24:a0:8c:0b:8e:1a:2d:d1:7b:
3d:30:5e:63:32:9f:b8:4c:a8:39:e7:3c:e1:41:df:
c1:b2:38:6d:12:60:c2:ad:94:9a:ab:bf:57:9d:27:
87:9b:13:61:5f:81:51:6b:5c:70:3a:9d:15:ce:63:
1e:62:9f:63:6a:fa:f8:9c:da:f6:86:e2:3d:41:82:
61:3b:d8:1f:e9:e1:1f:68:9f:3f:ab:bf:83:db:fb:
75:f6:d4:e5:ff:89:77:0d:9c:76:84:49:67:37:88:
b5:3a:cb:96:57:7f:80:af:39:a5:45:f4:9d:50:22:
b0:ed:9b:d0:f0:13:d5:18:f1:6e:f8:16:d9:14:47:
31:e9:c8:5a:a6:03:da:e4:13:9c:32:97:9c:c9:35:
18:04:cb:39:80:a7:a8:54:bd:9a:b8:74:4f:bf:3d:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:7B:54:A0:3B:38:7C:1A:8E:03:78:3E:F3:26:10:61:07:1F:2A
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d3:45:86:ab:e8:cd:a7:4a:89:4f:aa:3d:3d:25:50:e5:c1:
30:3e:cb:00:b5:8f:f8:3a:2c:01:c8:55:d0:5c:05:36:c1:bb:
f7:3f:8b:fd:ec:6c:d6:68:20:3e:51:6b:fe:3c:cf:51:ce:be:
e0:16:75:0b:5f:50:c0:37:d0:de:a5:15:0a:c8:6f:00:b0:93:
90:bb:28:77:ca:79:51:f1:bb:3b:bc:02:3d:5b:3b:c7:98:19:
68:59:80:c5:f2:27:bc:3c:f0:f9:81:04:a3:97:4c:02:49:fe:
b3:db:d8:1f:ac:54:c5:97:64:60:e0:c9:b9:f8:6f:61:ad:03:
c6:f7:ec:40:14:bc:be:b3:b8:db:ba:aa:63:9b:56:37:d8:08:
71:8f:bf:70:42:6c:a2:91:7f:8f:40:35:5f:03:ad:9b:4b:91:
22:03:1f:37:e9:16:91:c9:3f:3e:10:b0:4c:e7:43:74:3e:92:
e9:b6:00:ce:f4:fa:41:57:18:14:51:9c:8c:22:05:ee:2e:f1:
2f:7e:46:91:87:49:3e:fe:b6:a3:94:62:fc:9e:bc:94:41:7d:
65:c7:ab:06:7c:5b:8c:7b:0c:3f:a4:73:38:da:bf:10:f5:6f:
33:e7:d5:66:6d:c1:03:f0:21:1f:d7:5c:a2:53:3b:8b:30:19:
6a:15:43:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+fou3Pl8y1GvfjxkNzC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjUwNjA3MDYwMDMxWhcNMjUwNjA4MDYwMDMxWjAzMTEwLwYDVQQD
Eyg3MjQ0N2I1NGEwM2IzODdjMWE4ZTAzNzgzZWYzMjYxMDYxMDcxZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJPbdc6SAyCeg9nxQlx22eTH2Vek
pUHkp5RpcJOPvLCtIS7H/MZAghz1kG7KCQ0ryNavitXsB/vc8sBVnJACKC8G1+mZ
hXbFw22L9Tcv3CaHkpk7r5jX2gSY2tlLwM0koIwLjhot0Xs9MF5jMp+4TKg55zzh
Qd/BsjhtEmDCrZSaq79XnSeHmxNhX4FRa1xwOp0VzmMeYp9javr4nNr2huI9QYJh
O9gf6eEfaJ8/q7+D2/t19tTl/4l3DZx2hElnN4i1OsuWV3+ArzmlRfSdUCKw7ZvQ
8BPVGPFu+BbZFEcx6chapgPa5BOcMpecyTUYBMs5gKeoVL2auHRPvz2+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJEe1SgOzh8Go4DeD7zJhBhBx8qMB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9NFhqvo
zadKiU+qPT0lUOXBMD7LALWP+DosAchV0FwFNsG79z+L/exs1mggPlFr/jzPUc6+
4BZ1C19QwDfQ3qUVCshvALCTkLsod8p5UfG7O7wCPVs7x5gZaFmAxfInvDzw+YEE
o5dMAkn+s9vYH6xUxZdkYODJufhvYa0DxvfsQBS8vrO427qqY5tWN9gIcY+/cEJs
opF/j0A1XwOtm0uRIgMfN+kWkck/PhCwTOdDdD6S6bYAzvT6QVcYFFGcjCIF7i7x
L35GkYdJPv62o5Ri/J68lEF9ZcerBnxbjHsMP6RzONq/EPVvM+fVZm3BA/AhH9dc
olM7izAZahVDdA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:08 2025 by rpki-client