Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: l14O9wjnR1zU5Em0/wYGWNed2MqpKD/DrRlamAytlyw=
Subject key identifier: AF:69:7A:CA:22:4B:30:AB:92:B8:1C:C8:51:72:F9:70:66:7A:D1:0C
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 01974779DEA658E57132317C11B6C75FB8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0CDB
Signing time: Fri 06 Jun 2025 23:00:58 +0000
Manifest this update: Fri 06 Jun 2025 23:00:58 +0000
Manifest next update: Sat 07 Jun 2025 23:00:58 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: qbSMPCBbCfaRE2ym5/ZJps7J80Wsmk7PHdrBFAmumY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:de:a6:58:e5:71:32:31:7c:11:b6:c7:5f:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Jun 6 23:00:58 2025 GMT
Not After : Jun 7 23:00:58 2025 GMT
Subject: CN=af697aca224b30ab92b81cc85172f970667ad10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:95:b6:c0:1c:ef:ba:3c:73:e1:f8:da:fa:
d5:7b:0d:ca:09:e3:61:9e:2d:85:8c:3b:3c:c3:ba:
58:7b:22:bd:8c:f7:e0:50:3c:d3:91:ad:26:d6:3d:
01:8f:3f:20:7b:f2:f2:72:a3:31:ee:47:a2:29:17:
1f:3d:b6:e0:9a:28:1e:84:23:d4:a6:0b:fd:69:60:
c0:fa:f6:b9:c0:7a:9b:db:9c:c8:a7:6d:04:0a:ec:
db:d2:0b:17:ae:e8:13:bc:f4:c2:1f:da:a4:cf:21:
2f:9c:f4:06:46:80:0d:78:a0:27:60:d8:7b:67:1d:
78:4f:d1:ef:f4:17:08:85:11:ea:76:f4:3e:52:91:
e8:aa:5b:de:3e:a8:b7:64:9a:51:e8:71:ce:c4:a0:
27:82:39:a5:5c:d9:68:e4:87:55:04:e8:1e:15:54:
48:2d:fb:08:df:99:17:6e:8f:a7:a1:a3:9c:1a:bc:
29:00:a6:70:b4:3a:60:87:45:fc:e1:12:bd:45:bb:
fc:b3:0e:46:3a:a6:d4:2f:9c:50:96:b2:4c:1a:09:
0a:c1:39:35:8b:5c:e3:02:7a:be:3f:f4:4e:17:6c:
12:01:39:7f:ad:45:10:b9:50:fe:af:fb:3d:a6:fd:
0d:70:a3:f8:1b:48:76:3a:26:2f:72:0e:da:dc:76:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:7A:CA:22:4B:30:AB:92:B8:1C:C8:51:72:F9:70:66:7A:D1:0C
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f3:6a:5b:fe:f7:12:de:ef:6a:80:2e:ab:00:bd:62:9f:80:
bc:40:44:6e:72:cf:af:53:c1:27:91:9a:19:55:b0:62:34:7a:
4e:fc:47:b1:16:f2:f2:52:41:d0:fd:3f:fb:0b:96:87:79:59:
dc:fd:02:e3:4f:75:d8:63:11:01:d7:77:20:7c:ba:31:df:a0:
46:3b:c5:a1:45:04:f0:98:18:fd:37:40:4e:e5:9c:22:fb:c8:
dc:bf:35:64:99:2a:57:9c:e1:46:a8:af:a2:43:e4:a3:07:fc:
fd:33:46:06:1d:fd:76:df:3a:f9:e4:8f:21:a2:7d:1c:93:6e:
69:cf:6f:d5:d5:21:0a:f7:c5:7c:0c:61:18:09:02:ed:6a:60:
95:d0:86:bf:d8:5e:36:2f:1a:9d:a2:86:d2:e1:0c:71:8f:14:
3a:65:25:fb:fc:67:b2:47:02:c0:73:c3:c5:3e:51:b4:dd:f1:
58:4d:ba:ad:ff:2a:d7:9b:98:a8:99:8d:de:e3:0b:66:77:5a:
23:56:0b:5f:fc:06:55:19:7a:cc:c4:0c:d0:8e:a8:a0:eb:44:
02:94:3d:8a:b9:1b:a6:b3:6b:e6:89:39:d2:b4:9c:f0:32:61:
d7:ab:01:ca:85:dd:f8:3b:52:26:5b:8a:79:08:72:49:d5:0b:
69:1d:93:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHed6mWOVxMjF8EbbHX7jdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2NiN2Q5ODJjN2Y5ZWRiYzkzZDRjYjQyYjk0ZmEwMjlj
MzgyZGYwHhcNMjUwNjA2MjMwMDU4WhcNMjUwNjA3MjMwMDU4WjAzMTEwLwYDVQQD
EyhhZjY5N2FjYTIyNGIzMGFiOTJiODFjYzg1MTcyZjk3MDY2N2FkMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H6VtsAc77o8c+H42vrVew3KCeNh
ni2FjDs8w7pYeyK9jPfgUDzTka0m1j0Bjz8ge/LycqMx7keiKRcfPbbgmigehCPU
pgv9aWDA+va5wHqb25zIp20ECuzb0gsXrugTvPTCH9qkzyEvnPQGRoANeKAnYNh7
Zx14T9Hv9BcIhRHqdvQ+UpHoqlvePqi3ZJpR6HHOxKAngjmlXNlo5IdVBOgeFVRI
LfsI35kXbo+noaOcGrwpAKZwtDpgh0X84RK9Rbv8sw5GOqbUL5xQlrJMGgkKwTk1
i1zjAnq+P/ROF2wSATl/rUUQuVD+r/s9pv0NcKP4G0h2OiYvcg7a3HbaxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9pesoiSzCrkrgcyFFy+XBmetEMMB8GA1UdIwQY
MBaAFF48t9mCx/ntvJPUy0K5T6Apw4LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYt
OWYyY2M2NGUwNzQ1LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYtOWYyY2M2NGUwNzQ1
LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfNqW/73
Et7vaoAuqwC9Yp+AvEBEbnLPr1PBJ5GaGVWwYjR6TvxHsRby8lJB0P0/+wuWh3lZ
3P0C40912GMRAdd3IHy6Md+gRjvFoUUE8JgY/TdATuWcIvvI3L81ZJkqV5zhRqiv
okPkowf8/TNGBh39dt86+eSPIaJ9HJNuac9v1dUhCvfFfAxhGAkC7WpgldCGv9he
Ni8anaKG0uEMcY8UOmUl+/xnskcCwHPDxT5RtN3xWE26rf8q15uYqJmN3uMLZnda
I1YLX/wGVRl6zMQM0I6ooOtEApQ9irkbprNr5ok50rSc8DJh16sByoXd+DtSJluK
eQhySdULaR2T4A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:20 2025 by rpki-client