Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
File: XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json)
Hash identifier: BPUDrxxXgg16hWXH7MbJuBzgbZ9SbSpI7WqRViYUeUo=
Subject key identifier: AC:99:20:40:D1:6A:3C:D3:AC:45:0F:89:EB:9A:2C:57:5C:59:CF:BF
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial: 01974BFB71BBE24631C58F4FE0C1B98C562B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
Manifest number: 14EA
Signing time: Sat 07 Jun 2025 20:00:59 +0000
Manifest this update: Sat 07 Jun 2025 20:00:59 +0000
Manifest next update: Sun 08 Jun 2025 20:00:59 +0000
Files and hashes: 1: 2ywpCRCtpz6hrb_B5Z2UyYL2m-g.roa (hash: Z+2VK2G2lzN86LoPcE9VgbDrrppkQUiQOHGoi5RCAY8=)
2: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: vl76Uq5l4IK4t2US0yhj1GBWWRcOebtMUd8X6FRmRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:71:bb:e2:46:31:c5:8f:4f:e0:c1:b9:8c:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Validity
Not Before: Jun 7 20:00:59 2025 GMT
Not After : Jun 8 20:00:59 2025 GMT
Subject: CN=ac992040d16a3cd3ac450f89eb9a2c575c59cfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:4d:14:61:ee:00:56:c6:b5:2a:60:05:c8:
f8:cb:c3:4e:79:64:13:f8:28:8c:6b:2e:6b:a0:b8:
9b:01:f5:cf:3d:62:af:5b:35:ba:d8:c3:c8:a0:2f:
32:4e:94:b5:cd:40:54:f4:b4:15:9e:29:ff:4f:50:
46:95:da:a4:71:c3:fa:97:c5:30:d2:05:8b:de:d6:
bb:f3:e0:44:8b:69:79:11:f0:79:b3:66:ae:1f:34:
3c:d5:30:f2:fd:93:19:17:6b:a0:ee:ed:7b:a0:d5:
97:21:50:a8:79:3a:e6:1f:aa:28:3b:94:86:7b:36:
6b:55:65:e8:c0:6c:29:3d:11:6a:5b:70:f2:12:34:
4f:0f:f7:85:ff:8d:53:54:93:78:0a:39:0e:12:ce:
5b:42:e2:12:72:3c:84:99:89:ad:c3:da:db:1d:57:
29:9e:cc:f6:9b:7a:3b:45:0d:a4:68:34:ef:de:46:
1b:7b:b0:87:bb:0e:85:34:04:68:c8:69:81:a2:d6:
d0:22:5c:a1:bc:f7:f8:eb:9f:5c:86:75:e9:fb:bf:
bc:44:23:9e:66:ed:38:90:3c:63:45:ca:6c:09:b7:
71:82:da:d1:6b:7d:27:e3:e3:53:c9:6d:27:c5:55:
39:a4:b2:44:50:a0:2b:fb:0b:c6:ef:ae:c4:d8:bf:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:20:40:D1:6A:3C:D3:AC:45:0F:89:EB:9A:2C:57:5C:59:CF:BF
X509v3 Authority Key Identifier:
keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:e1:b8:84:3c:fc:08:ca:ce:a7:5c:ef:04:e3:a2:35:74:
52:4f:7a:73:a7:07:f9:cf:f4:ec:89:c5:16:bf:21:4f:21:9e:
09:6b:d8:84:dc:0e:42:b7:28:f1:82:f5:02:96:79:7b:8b:c0:
dd:d4:fc:ba:24:df:48:3f:9c:8b:59:a4:43:cc:32:74:da:ed:
f2:a4:e2:b7:11:17:ac:df:8a:7e:26:35:40:9a:c7:37:76:ff:
40:c2:56:3c:73:9a:75:0b:35:39:08:28:bd:2a:7e:75:0f:e3:
da:61:fe:6e:4b:4a:94:25:53:3b:2d:bd:59:7a:68:d5:e7:1f:
75:de:80:f8:bd:54:c8:ee:53:6d:8c:70:7a:6f:80:a3:03:af:
24:5f:44:93:3d:15:2e:35:84:8d:f8:ea:79:12:86:78:71:4d:
04:72:77:22:6d:f6:9c:8c:01:15:f7:af:88:d7:03:eb:bd:da:
1b:2a:18:ec:57:14:72:6a:8a:81:60:c1:fc:7f:b7:a9:19:8d:
6a:66:a4:6e:6e:a5:74:b6:68:86:76:67:3a:89:8d:da:ef:d4:
46:39:79:4a:08:df:fa:79:d9:63:be:65:af:6f:86:b3:a4:12:
a9:75:c0:57:c2:c7:50:77:a7:0a:de:3f:f7:5a:b3:7b:22:3b:
fc:00:5b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+3G74kYxxY9P4MG5jFYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzgyMjM4Mjg5YTg4MDJjZjUyYjY3ZDliZjRhZTg3YTUw
OTMzYzMwHhcNMjUwNjA3MjAwMDU5WhcNMjUwNjA4MjAwMDU5WjAzMTEwLwYDVQQD
EyhhYzk5MjA0MGQxNmEzY2QzYWM0NTBmODllYjlhMmM1NzVjNTljZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VZNFGHuAFbGtSpgBcj4y8NOeWQT
+CiMay5roLibAfXPPWKvWzW62MPIoC8yTpS1zUBU9LQVnin/T1BGldqkccP6l8Uw
0gWL3ta78+BEi2l5EfB5s2auHzQ81TDy/ZMZF2ug7u17oNWXIVCoeTrmH6ooO5SG
ezZrVWXowGwpPRFqW3DyEjRPD/eF/41TVJN4CjkOEs5bQuIScjyEmYmtw9rbHVcp
nsz2m3o7RQ2kaDTv3kYbe7CHuw6FNARoyGmBotbQIlyhvPf4659chnXp+7+8RCOe
Zu04kDxjRcpsCbdxgtrRa30n4+NTyW0nxVU5pLJEUKAr+wvG767E2L9L/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyZIEDRajzTrEUPieuaLFdcWc+/MB8GA1UdIwQY
MBaAFF04IjgomogCz1K2fZv0roelCTPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDIt
ODg1NzU3YzEyNDhmLzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDItODg1NzU3YzEyNDhm
LzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAnhuIQ8
/AjKzqdc7wTjojV0Uk96c6cH+c/07InFFr8hTyGeCWvYhNwOQrco8YL1ApZ5e4vA
3dT8uiTfSD+ci1mkQ8wydNrt8qTitxEXrN+KfiY1QJrHN3b/QMJWPHOadQs1OQgo
vSp+dQ/j2mH+bktKlCVTOy29WXpo1ecfdd6A+L1UyO5TbYxwem+AowOvJF9Ekz0V
LjWEjfjqeRKGeHFNBHJ3Im32nIwBFfeviNcD673aGyoY7FcUcmqKgWDB/H+3qRmN
amakbm6ldLZohnZnOomN2u/URjl5Sgjf+nnZY75lr2+Gs6QSqXXAV8LHUHenCt4/
91qzeyI7/ABbiA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:29 2025 by rpki-client