Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: tJ/EIDX7dc+FE3r8KyrKvHaw4z+afkT6aOEOBoYORi0=
Subject key identifier: 61:83:07:41:66:D7:89:9B:E4:C8:B2:16:34:28:50:A8:7D:88:3C:FB
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01974C31D19B823DF9CF6228B827A39E1A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 21:00:22 +0000
Manifest this update: Sat 07 Jun 2025 21:00:22 +0000
Manifest next update: Sun 08 Jun 2025 21:00:22 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: Uu5Ee11oja1PHUZx5m5AUwpuhMY7YqSATgXIlHCKcYo=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:d1:9b:82:3d:f9:cf:62:28:b8:27:a3:9e:1a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jun 7 21:00:22 2025 GMT
Not After : Jun 8 21:00:22 2025 GMT
Subject: CN=6183074166d7899be4c8b216342850a87d883cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:ed:eb:07:64:e8:e4:f4:16:d0:d3:23:1d:
d6:f3:81:82:10:5d:ca:ba:96:8c:72:49:16:09:79:
78:34:8e:51:be:1d:10:13:ac:cf:f2:04:89:e2:83:
4d:5f:3d:60:ab:73:6c:b4:b9:17:16:1e:53:b7:9f:
52:2e:f4:37:56:b8:2a:a7:75:12:a5:f3:d8:3c:03:
57:17:27:7b:2c:37:a3:f5:40:c5:82:75:9b:93:a3:
a8:11:bb:ad:70:8e:3e:fc:85:e7:4e:8e:8a:c0:d6:
2a:d7:77:a9:4c:b1:05:ee:86:45:a1:e1:77:d9:19:
b3:7f:53:f3:1a:c8:31:18:5e:bf:20:25:05:d8:1d:
4f:74:8c:12:5e:ae:13:86:66:9b:cb:09:8c:74:41:
d8:64:25:d4:6a:b9:f7:07:56:1f:44:db:46:e2:01:
45:5c:22:91:20:b7:dc:47:f1:6e:4a:5c:35:30:ea:
38:b2:cd:bb:6c:2b:ae:f8:26:98:03:a7:bc:e3:17:
e6:ec:1f:88:69:75:9c:c5:60:79:7f:f2:16:a1:e9:
46:a8:a0:50:c2:33:4f:19:18:f0:22:43:18:b3:63:
68:5f:d6:39:3c:be:be:80:1b:d8:65:62:ca:ec:6f:
ad:3b:5a:b9:73:f2:a7:01:46:e2:66:0f:e7:31:c8:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:83:07:41:66:D7:89:9B:E4:C8:B2:16:34:28:50:A8:7D:88:3C:FB
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:68:3b:a9:7a:9a:c4:a5:a8:a0:19:42:a1:0f:18:92:92:57:
84:74:eb:d4:e5:ae:e0:d2:7a:60:bf:27:9a:2d:b6:97:7e:b1:
f5:76:66:ab:f3:d9:17:df:51:6b:ec:1f:a4:a2:84:e4:d1:00:
a1:79:a7:69:a2:8b:13:68:74:53:8c:d6:7c:24:48:eb:af:d9:
33:48:18:77:1e:a7:c1:e5:1f:c9:f9:d0:1b:96:43:00:4e:b6:
e2:3e:c5:fc:f6:72:a7:c1:35:03:3e:7d:67:b3:a9:b5:62:46:
0b:f4:37:be:f4:fe:73:dd:6c:68:60:dc:5e:46:d0:89:c0:b7:
09:3e:f7:b7:0e:47:13:01:51:bd:27:83:b0:7c:56:c8:27:7d:
18:cb:b0:53:69:51:c1:43:5d:80:b5:51:df:f2:cf:e5:99:de:
41:13:e5:fd:c9:94:34:d4:04:2a:27:f1:f4:1f:c3:86:59:dd:
df:05:3b:47:0c:21:ab:74:69:f6:15:50:67:a4:1b:39:22:d9:
ba:5b:98:ea:82:70:65:08:91:dc:79:0f:fb:db:a1:70:0b:41:
c0:1a:99:9c:56:e2:6b:a7:a6:30:3f:83:5b:a1:26:fa:11:cc:
60:41:3e:6c:d0:85:18:94:2b:4f:22:2f:fa:6f:86:c2:e1:b7:
af:50:a1:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMdGbgj35z2IouCejnhoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi
OWNiOTMwHhcNMjUwNjA3MjEwMDIyWhcNMjUwNjA4MjEwMDIyWjAzMTEwLwYDVQQD
Eyg2MTgzMDc0MTY2ZDc4OTliZTRjOGIyMTYzNDI4NTBhODdkODgzY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Dt6wdk6OT0FtDTIx3W84GCEF3K
upaMckkWCXl4NI5Rvh0QE6zP8gSJ4oNNXz1gq3NstLkXFh5Tt59SLvQ3Vrgqp3US
pfPYPANXFyd7LDej9UDFgnWbk6OoEbutcI4+/IXnTo6KwNYq13epTLEF7oZFoeF3
2Rmzf1PzGsgxGF6/ICUF2B1PdIwSXq4ThmabywmMdEHYZCXUarn3B1YfRNtG4gFF
XCKRILfcR/FuSlw1MOo4ss27bCuu+CaYA6e84xfm7B+IaXWcxWB5f/IWoelGqKBQ
wjNPGRjwIkMYs2NoX9Y5PL6+gBvYZWLK7G+tO1q5c/KnAUbiZg/nMciozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGDB0Fm14mb5MiyFjQoUKh9iDz7MB8GA1UdIwQY
MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt
MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2
LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmg7qXqa
xKWooBlCoQ8YkpJXhHTr1OWu4NJ6YL8nmi22l36x9XZmq/PZF99Ra+wfpKKE5NEA
oXmnaaKLE2h0U4zWfCRI66/ZM0gYdx6nweUfyfnQG5ZDAE624j7F/PZyp8E1Az59
Z7OptWJGC/Q3vvT+c91saGDcXkbQicC3CT73tw5HEwFRvSeDsHxWyCd9GMuwU2lR
wUNdgLVR3/LP5ZneQRPl/cmUNNQEKifx9B/Dhlnd3wU7Rwwhq3Rp9hVQZ6QbOSLZ
uluY6oJwZQiR3HkP+9uhcAtBwBqZnFbia6emMD+DW6Em+hHMYEE+bNCFGJQrTyIv
+m+GwuG3r1ChhA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:45:12 2025 by rpki-client