Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: lrvlbeQMOGbOMuHgzLKSiSOsLg+4VwAsCJvd+sW2yLs=
Subject key identifier: 0E:F3:10:57:69:1A:30:00:82:86:53:C7:FE:B1:C0:43:DC:C8:FB:30
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019747426A89F5EE30A67A84091BFE5A7464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 22:00:24 +0000
Manifest this update: Fri 06 Jun 2025 22:00:24 +0000
Manifest next update: Sat 07 Jun 2025 22:00:24 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: rAjF1BuBFfZG6JKgwnI33xlbWAcFPb8lbmNgECNGA8M=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:6a:89:f5:ee:30:a6:7a:84:09:1b:fe:5a:74:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Jun 6 22:00:24 2025 GMT
Not After : Jun 7 22:00:24 2025 GMT
Subject: CN=0ef31057691a3000828653c7feb1c043dcc8fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:d0:ad:db:ff:5b:b2:0c:c4:1d:5d:38:9d:
0c:a1:13:9f:36:93:25:6f:b8:65:d9:1d:33:85:20:
22:3f:1f:4f:26:73:d4:f8:a6:91:d3:05:50:10:c2:
59:3f:0a:91:f9:07:a9:f6:65:5f:b7:d8:2c:d3:7d:
3a:40:e4:a2:6f:50:e9:c7:54:5e:0e:1a:16:43:70:
d5:50:8c:11:63:be:80:8c:08:f8:93:a6:c4:41:43:
6f:ac:ac:e6:82:69:bc:f0:93:20:77:87:c6:d6:99:
fc:2a:5c:4d:26:2e:5a:4e:42:97:d8:84:91:f0:66:
cd:f0:41:3b:a6:c9:22:30:fa:de:7a:16:33:2c:07:
00:58:c5:0c:d9:81:59:29:b0:7c:de:80:bf:e4:4d:
cf:f3:64:26:40:d7:fb:ad:74:6f:19:80:04:34:92:
14:29:1f:29:64:7e:6f:f6:b4:b1:6d:f3:ed:8e:e4:
5b:f6:d3:4f:fb:e4:3e:1b:88:38:71:b6:87:81:58:
37:0a:a0:b2:f2:18:98:15:ad:f0:3a:ac:02:5c:89:
e8:ea:98:12:9c:c3:bc:9a:a8:43:fa:36:6c:98:69:
7b:2f:c5:97:db:f2:64:a9:d5:91:b5:ff:3f:45:56:
a2:82:0e:8c:bb:75:d1:4f:d3:fe:93:3c:73:c2:6d:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:10:57:69:1A:30:00:82:86:53:C7:FE:B1:C0:43:DC:C8:FB:30
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6d:25:7a:68:ef:f8:f2:9e:97:17:99:33:b8:4f:4e:11:f8:
64:02:fd:79:cb:11:73:e9:76:ba:a6:cc:d9:da:f6:ec:0c:62:
f7:6a:78:61:d0:ea:fc:cd:69:08:58:15:38:ff:9a:b2:34:03:
e0:e9:45:44:e2:8e:4b:69:3a:ab:ac:98:e1:3a:43:7e:46:48:
46:8e:68:72:e0:e8:82:c1:26:63:67:1e:72:6b:f7:7e:41:a3:
2c:e8:ae:7b:0e:bb:94:9d:a0:e2:0d:78:16:41:c4:f5:fa:88:
91:1b:e4:0e:17:8d:a4:cb:5b:52:1a:e4:a9:fe:a8:59:8f:e9:
89:f8:cd:5f:b1:06:89:8d:2a:2f:37:58:53:31:f7:a3:c8:fe:
ba:94:a5:3f:d4:11:08:09:ac:fa:6f:ab:90:9d:b5:d4:c1:c7:
0c:ae:a0:52:41:90:67:1a:88:78:f1:3e:0f:a8:db:18:77:ad:
8c:19:bc:89:5d:4f:cd:b2:9c:b0:3c:84:7a:df:f4:38:98:f6:
d5:4d:95:10:13:3e:e2:f5:0e:f8:e1:f5:51:e0:e1:f3:57:42:
87:49:5b:b0:df:47:46:e3:95:c9:88:80:6b:28:b1:6d:bc:e2:
f4:9d:57:35:f3:bf:40:59:13:08:c7:f5:0a:fb:db:a1:cf:2e:
f0:7b:d6:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQmqJ9e4wpnqECRv+WnRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjUwNjA2MjIwMDI0WhcNMjUwNjA3MjIwMDI0WjAzMTEwLwYDVQQD
EygwZWYzMTA1NzY5MWEzMDAwODI4NjUzYzdmZWIxYzA0M2RjYzhmYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdzQrdv/W7IMxB1dOJ0MoROfNpMl
b7hl2R0zhSAiPx9PJnPU+KaR0wVQEMJZPwqR+Qep9mVft9gs0306QOSib1Dpx1Re
DhoWQ3DVUIwRY76AjAj4k6bEQUNvrKzmgmm88JMgd4fG1pn8KlxNJi5aTkKX2ISR
8GbN8EE7pskiMPreehYzLAcAWMUM2YFZKbB83oC/5E3P82QmQNf7rXRvGYAENJIU
KR8pZH5v9rSxbfPtjuRb9tNP++Q+G4g4cbaHgVg3CqCy8hiYFa3wOqwCXIno6pgS
nMO8mqhD+jZsmGl7L8WX2/JkqdWRtf8/RVaigg6Mu3XRT9P+kzxzwm3CQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7zEFdpGjAAgoZTx/6xwEPcyPswMB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm0lemjv
+PKelxeZM7hPThH4ZAL9ecsRc+l2uqbM2dr27Axi92p4YdDq/M1pCFgVOP+asjQD
4OlFROKOS2k6q6yY4TpDfkZIRo5ocuDogsEmY2cecmv3fkGjLOiuew67lJ2g4g14
FkHE9fqIkRvkDheNpMtbUhrkqf6oWY/pifjNX7EGiY0qLzdYUzH3o8j+upSlP9QR
CAms+m+rkJ211MHHDK6gUkGQZxqIePE+D6jbGHetjBm8iV1PzbKcsDyEet/0OJj2
1U2VEBM+4vUO+OH1UeDh81dCh0lbsN9HRuOVyYiAayixbbzi9J1XNfO/QFkTCMf1
Cvvboc8u8HvW0w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:43 2025 by rpki-client