Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: 9zytEvunkO02Ji3lDXpNSMqGEKSgpTNlygIZ/mfoWdo=
Subject key identifier: 61:48:5B:49:A4:21:88:72:57:80:E8:2F:04:4E:D3:AD:6D:8F:07:67
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 01974CD78C0033EF84F06BFACEE343917916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 0EB4
Signing time: Sun 08 Jun 2025 00:01:23 +0000
Manifest this update: Sun 08 Jun 2025 00:01:23 +0000
Manifest next update: Mon 09 Jun 2025 00:01:23 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: Sa50s/uiRijHDRilWW3Adp378F76CHaGeno/QUOgKSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:8c:00:33:ef:84:f0:6b:fa:ce:e3:43:91:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Jun 8 00:01:23 2025 GMT
Not After : Jun 9 00:01:23 2025 GMT
Subject: CN=61485b49a42188725780e82f044ed3ad6d8f0767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:45:c9:32:f3:2c:34:5a:d2:4f:b5:2f:c8:
f7:25:5f:af:3b:9a:a2:f1:53:c5:e4:33:ca:d2:36:
b0:4f:2b:3b:c7:f3:4d:97:6d:92:bf:71:ca:75:76:
f8:36:1d:0e:64:06:a7:b0:fc:ad:18:b4:68:f7:28:
d7:00:6a:25:23:39:c6:bc:3e:5d:39:0e:c1:92:44:
45:1c:dd:1f:b9:34:af:f0:ca:75:27:f8:fc:40:e4:
22:fd:e3:e2:54:48:31:d7:d0:37:10:7e:bb:e7:66:
d5:2e:da:fd:39:b3:02:c0:e6:ec:28:ef:ff:96:8d:
ba:4a:ef:13:53:5e:ba:9b:09:31:1d:ae:0f:54:7e:
2b:5b:02:81:44:a1:8f:28:65:01:6c:c4:48:dd:56:
a7:47:56:0b:30:69:df:f5:15:d9:6c:b2:6c:2c:bb:
ee:59:e4:fb:c6:61:37:97:1d:30:80:93:cc:73:28:
8f:15:25:00:71:ff:76:81:19:fe:92:51:63:62:9d:
5d:eb:36:eb:a0:92:95:bd:09:7e:4e:76:3c:96:83:
68:9b:ea:01:dd:5e:28:b2:c9:3c:64:4b:52:5c:23:
56:fe:ac:c8:9f:3a:b5:3f:43:4e:ce:43:cf:3f:e4:
a8:71:04:69:5a:c7:74:67:16:2c:6d:37:19:0c:e3:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:48:5B:49:A4:21:88:72:57:80:E8:2F:04:4E:D3:AD:6D:8F:07:67
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:b3:60:f8:c4:46:7e:da:0f:20:a8:c9:bf:e4:ba:48:34:
b7:7e:c0:7a:70:48:f4:c4:4f:c7:b6:88:cf:12:26:32:5a:b3:
15:e3:21:b8:61:ac:71:56:7b:fe:20:f0:cb:b1:a9:4b:81:f4:
db:f1:1e:a1:29:dd:f1:12:92:27:52:98:69:bc:56:06:09:7a:
ea:00:4e:90:83:c6:fa:a0:4d:98:8c:5a:41:ab:93:ee:6d:5b:
d3:d2:b1:85:2d:1c:7b:42:00:42:82:10:4e:57:d9:ed:de:8d:
7d:b0:2f:1e:2d:36:a5:4c:1c:e7:c2:0f:c7:22:4c:e7:a6:60:
0b:c3:a0:58:0a:e3:85:10:fc:fe:37:4f:09:42:71:5e:37:eb:
a3:34:bb:6f:20:9a:19:45:6f:2f:96:a0:e0:d9:20:0b:f9:62:
a2:27:a9:e8:f4:d2:8e:9d:3a:35:a2:76:d6:1f:e9:34:e1:f2:
c5:1e:0f:76:a3:2d:c4:88:42:52:a9:b3:82:20:d3:cb:ce:68:
c5:f4:e0:fa:89:b3:7c:a4:3f:e7:37:c9:51:bb:ba:fa:9a:f1:
56:a0:a8:f9:f1:03:18:7e:03:da:83:d2:93:95:24:ec:4c:7e:
2c:3d:3a:77:b2:09:60:d8:71:3c:0f:dd:7e:ea:cb:03:f6:a1:
90:d0:53:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM14wAM++E8Gv6zuNDkXkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NmY3NzJiZjNjNDY0MWE3MWJmN2Y0YmM0ZGUxMWM5M2Fk
ZGZlYTYwHhcNMjUwNjA4MDAwMTIzWhcNMjUwNjA5MDAwMTIzWjAzMTEwLwYDVQQD
Eyg2MTQ4NWI0OWE0MjE4ODcyNTc4MGU4MmYwNDRlZDNhZDZkOGYwNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcBFyTLzLDRa0k+1L8j3JV+vO5qi
8VPF5DPK0jawTys7x/NNl22Sv3HKdXb4Nh0OZAansPytGLRo9yjXAGolIznGvD5d
OQ7BkkRFHN0fuTSv8Mp1J/j8QOQi/ePiVEgx19A3EH6752bVLtr9ObMCwObsKO//
lo26Su8TU166mwkxHa4PVH4rWwKBRKGPKGUBbMRI3VanR1YLMGnf9RXZbLJsLLvu
WeT7xmE3lx0wgJPMcyiPFSUAcf92gRn+klFjYp1d6zbroJKVvQl+TnY8loNom+oB
3V4ossk8ZEtSXCNW/qzInzq1P0NOzkPPP+SocQRpWsd0ZxYsbTcZDOO4NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFIW0mkIYhyV4DoLwRO061tjwdnMB8GA1UdIwQY
MBaAFMVvdyvzxGQacb9/S8TeEck63f6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTct
N2VjYTIwNWZhZmNiLzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTctN2VjYTIwNWZhZmNi
LzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea6zYPjE
Rn7aDyCoyb/kukg0t37AenBI9MRPx7aIzxImMlqzFeMhuGGscVZ7/iDwy7GpS4H0
2/EeoSnd8RKSJ1KYabxWBgl66gBOkIPG+qBNmIxaQauT7m1b09KxhS0ce0IAQoIQ
TlfZ7d6NfbAvHi02pUwc58IPxyJM56ZgC8OgWArjhRD8/jdPCUJxXjfrozS7byCa
GUVvL5ag4NkgC/lioiep6PTSjp06NaJ21h/pNOHyxR4PdqMtxIhCUqmzgiDTy85o
xfTg+omzfKQ/5zfJUbu6+prxVqCo+fEDGH4D2oPSk5Uk7Ex+LD06d7IJYNhxPA/d
furLA/ahkNBThw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:12 2025 by rpki-client