Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: zerAvD2pA4bVkuMFxnCmWoDqnxVjTXFfzLBArxILWdU=
Subject key identifier: CC:75:E3:0C:F4:40:79:57:8F:E8:06:14:21:79:61:7E:9E:A9:82:3D
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 0197493104DC27E087CC19B1B2E3A85FF3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 0354
Signing time: Sat 07 Jun 2025 07:00:38 +0000
Manifest this update: Sat 07 Jun 2025 07:00:38 +0000
Manifest next update: Sun 08 Jun 2025 07:00:38 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: dUk8fkc0ISgw08UwanBjfnZw2SWbPYCkFNjQyxqW61U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:04:dc:27:e0:87:cc:19:b1:b2:e3:a8:5f:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Jun 7 07:00:38 2025 GMT
Not After : Jun 8 07:00:38 2025 GMT
Subject: CN=cc75e30cf44079578fe806142179617e9ea9823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:c6:f6:78:9d:48:05:16:26:a1:bd:9b:5a:
e1:b9:09:4f:39:47:83:c6:1a:af:c1:e9:4e:49:bc:
43:bf:ab:6f:4d:1f:8c:c5:a7:1d:d3:f1:b0:f0:53:
98:92:eb:71:95:99:f0:c4:04:be:7b:e1:02:ca:64:
3c:0e:04:1a:73:40:41:aa:67:76:03:ff:59:c3:a3:
d0:42:e2:b9:ac:40:df:74:e6:43:f6:4b:f7:32:eb:
d6:48:dc:17:eb:49:bb:94:d3:b1:97:dc:3d:48:cc:
6d:37:e9:c9:a5:c2:62:bb:e1:bf:7d:15:5a:23:dd:
5c:a7:c1:82:3b:a6:b0:25:4e:f6:b3:5f:85:c0:7b:
31:06:42:1a:62:bb:88:38:d1:27:41:51:e6:28:ec:
69:97:97:63:ae:c5:e2:6b:33:0f:15:58:c6:a2:26:
5f:b0:03:fb:7b:6c:9b:f1:b0:5e:06:5b:4f:65:ce:
fa:ad:0a:90:83:4d:de:b9:21:0b:15:c4:e3:6f:7b:
b0:40:a1:42:25:69:ba:58:9b:87:e1:09:95:a5:5c:
df:68:8c:63:80:48:7e:9b:9d:da:ae:38:de:ab:f5:
7c:0b:a7:e0:49:4a:61:da:9e:44:22:66:7c:16:32:
ea:87:17:28:ff:58:8d:d6:fd:39:f5:1c:fe:3c:bb:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:E3:0C:F4:40:79:57:8F:E8:06:14:21:79:61:7E:9E:A9:82:3D
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:cc:16:a1:f1:f5:e0:ff:c7:34:a5:7b:1a:23:1c:db:00:
61:d7:11:1f:d6:7d:3d:83:f7:f5:95:23:65:27:45:f0:ec:cd:
3c:a9:fe:fa:4a:44:7d:b7:fa:07:1a:f3:2d:b1:4a:fe:69:3d:
63:95:db:b1:d1:bd:86:99:d8:92:36:aa:58:35:03:d7:aa:ec:
2b:94:c6:41:d9:7f:69:df:b0:f6:f7:8b:97:15:4d:78:b6:1f:
84:07:6d:b3:c4:8b:0a:39:8e:c2:cb:b7:7c:de:df:0f:d3:8b:
81:2d:72:4f:07:27:66:20:c0:c2:d7:11:d7:01:33:ee:02:82:
88:3b:4f:b4:d3:ea:3a:88:70:ca:70:95:45:70:71:cb:ed:0d:
83:9f:60:6a:1e:27:ac:2e:2e:87:57:d8:12:11:0c:a6:9c:b9:
3c:19:20:06:5d:ad:1c:30:5e:9d:e3:ca:43:a6:8c:f2:0a:34:
60:f0:2d:3b:9b:35:93:68:6c:96:45:2c:44:18:d9:1f:f4:6b:
64:66:60:75:ef:bd:83:3c:3b:c3:78:ef:4d:c1:e7:92:1e:15:
f3:89:ca:a7:16:15:53:7d:1a:bf:6b:39:5a:eb:ec:d0:89:46:
69:b9:60:74:60:fe:02:8f:b1:df:5e:cd:33:0a:06:cb:4b:d2:
c3:81:dd:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQTcJ+CHzBmxsuOoX/PLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTMxNmJhOGZiMzA1NjdjZWNiYzcyNzA1MWQzNjQwMGUy
NTFmYzcwHhcNMjUwNjA3MDcwMDM4WhcNMjUwNjA4MDcwMDM4WjAzMTEwLwYDVQQD
EyhjYzc1ZTMwY2Y0NDA3OTU3OGZlODA2MTQyMTc5NjE3ZTllYTk4MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlzG9nidSAUWJqG9m1rhuQlPOUeD
xhqvwelOSbxDv6tvTR+Mxacd0/Gw8FOYkutxlZnwxAS+e+ECymQ8DgQac0BBqmd2
A/9Zw6PQQuK5rEDfdOZD9kv3MuvWSNwX60m7lNOxl9w9SMxtN+nJpcJiu+G/fRVa
I91cp8GCO6awJU72s1+FwHsxBkIaYruIONEnQVHmKOxpl5djrsXiazMPFVjGoiZf
sAP7e2yb8bBeBltPZc76rQqQg03euSELFcTjb3uwQKFCJWm6WJuH4QmVpVzfaIxj
gEh+m53arjjeq/V8C6fgSUph2p5EImZ8FjLqhxco/1iN1v059Rz+PLvX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx14wz0QHlXj+gGFCF5YX6eqYI9MB8GA1UdIwQY
MBaAFFzjFrqPswVnzsvHJwUdNkAOJR/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYt
MjY3MjlkODk0ZWY3LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYtMjY3MjlkODk0ZWY3
LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhHMFqHx
9eD/xzSlexojHNsAYdcRH9Z9PYP39ZUjZSdF8OzNPKn++kpEfbf6BxrzLbFK/mk9
Y5XbsdG9hpnYkjaqWDUD16rsK5TGQdl/ad+w9veLlxVNeLYfhAdts8SLCjmOwsu3
fN7fD9OLgS1yTwcnZiDAwtcR1wEz7gKCiDtPtNPqOohwynCVRXBxy+0Ng59gah4n
rC4uh1fYEhEMppy5PBkgBl2tHDBenePKQ6aM8go0YPAtO5s1k2hslkUsRBjZH/Rr
ZGZgde+9gzw7w3jvTcHnkh4V84nKpxYVU30av2s5Wuvs0IlGablgdGD+Ao+x317N
MwoGy0vSw4Hd6A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:10:12 2025 by rpki-client