Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: 4gyJZYAqY/lL31daqdpQ+q/7O9FGqg3vqkiLsMnQMP4=
Subject key identifier: 92:B3:94:1C:31:26:D4:BB:7F:B9:86:F9:8D:7E:E8:12:EA:2E:B3:83
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019738AB1FDD07373F99FACA569A07C10E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1577
Signing time: Wed 04 Jun 2025 02:00:28 +0000
Manifest this update: Wed 04 Jun 2025 02:00:28 +0000
Manifest next update: Thu 05 Jun 2025 02:00:28 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: MEnX9niUWDg5DtYgdCxGjCFl1Q80OTSA5Za7kWR/gR8=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:ab:1f:dd:07:37:3f:99:fa:ca:56:9a:07:c1:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jun 4 02:00:28 2025 GMT
Not After : Jun 5 02:00:28 2025 GMT
Subject: CN=92b3941c3126d4bb7fb986f98d7ee812ea2eb383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:e5:75:be:e6:c4:ae:da:6f:55:4e:64:41:
c4:5a:e7:39:87:4f:4a:c1:ee:19:70:29:59:aa:cb:
07:2c:df:f4:99:6d:cb:84:d8:cb:d3:d1:3c:df:43:
d7:8b:eb:aa:10:3b:c6:e2:53:d2:eb:c3:4e:8e:bc:
65:e5:7d:67:f8:7d:9b:4f:05:ab:ff:45:13:45:e6:
c0:50:7d:98:fa:86:2c:ec:37:b7:bc:33:fb:49:75:
77:3c:3e:da:99:de:31:2c:27:4f:bc:cb:2a:3e:58:
36:42:50:fa:fe:67:91:64:70:52:29:a2:37:dc:9b:
35:a0:a1:f6:92:4a:b1:49:55:53:ab:cd:d8:14:07:
20:8d:00:10:6b:4b:a6:02:c2:0a:48:62:db:0e:8a:
b0:76:5c:e7:93:27:a6:a3:a3:9b:50:2d:ab:ed:12:
cb:bb:5b:34:29:65:ad:3b:5f:67:76:20:21:8d:53:
b8:d4:40:90:94:b2:7d:30:54:a5:f9:f7:70:2b:e1:
21:13:de:c4:91:1b:be:75:5d:12:01:1c:60:3c:f0:
58:34:22:c6:8e:d4:a9:65:8a:9c:17:bc:fb:cc:79:
3e:73:92:73:c8:24:7f:09:65:f4:3a:8f:4f:5f:92:
79:55:d4:b3:49:e1:48:8e:87:40:cc:49:09:fc:ae:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:94:1C:31:26:D4:BB:7F:B9:86:F9:8D:7E:E8:12:EA:2E:B3:83
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:76:56:a4:dd:09:4d:81:e5:0a:72:12:6a:09:25:5f:d9:c0:
b7:40:d4:58:56:d9:f4:d4:ac:59:af:54:d5:d9:c8:86:ca:a7:
b0:8a:c8:70:6c:de:9a:33:b1:2c:92:d3:9e:85:84:93:6a:57:
d4:40:7a:96:78:29:6d:55:47:72:2d:7f:4c:0f:d3:5f:2c:8d:
eb:8c:da:ca:ca:7e:65:d7:ed:e6:ea:5e:2c:32:7f:68:57:fe:
da:80:a1:49:02:55:19:30:92:69:9d:dd:b1:83:7f:91:76:0c:
a1:87:f8:b0:43:86:52:25:d0:62:0e:b3:02:38:91:12:63:66:
da:81:8e:a4:e9:4b:d0:d1:6f:c0:b2:a0:1f:c8:4f:ee:9c:d2:
4b:d9:41:7b:9e:bf:32:42:c5:b1:81:f1:aa:56:c1:ab:7c:6d:
f5:c7:e0:d1:fd:18:38:90:cc:fa:13:bb:28:a3:3b:af:ed:48:
6f:54:c9:33:85:65:2b:3c:d3:c2:2c:96:30:91:85:ac:7c:8c:
00:fe:8e:d0:36:fb:81:89:1f:92:81:86:20:66:d9:06:a4:32:
3a:55:21:f8:20:9d:bf:df:6b:61:7e:d1:8f:a7:55:d7:2f:1a:
f2:92:f2:e7:38:a1:d3:cd:df:79:de:06:32:99:4d:97:af:e9:
59:f6:a6:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc4qx/dBzc/mfrKVpoHwQ50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjUwNjA0MDIwMDI4WhcNMjUwNjA1MDIwMDI4WjAzMTEwLwYDVQQD
Eyg5MmIzOTQxYzMxMjZkNGJiN2ZiOTg2Zjk4ZDdlZTgxMmVhMmViMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBnldb7mxK7ab1VOZEHEWuc5h09K
we4ZcClZqssHLN/0mW3LhNjL09E830PXi+uqEDvG4lPS68NOjrxl5X1n+H2bTwWr
/0UTRebAUH2Y+oYs7De3vDP7SXV3PD7amd4xLCdPvMsqPlg2QlD6/meRZHBSKaI3
3Js1oKH2kkqxSVVTq83YFAcgjQAQa0umAsIKSGLbDoqwdlznkyemo6ObUC2r7RLL
u1s0KWWtO19ndiAhjVO41ECQlLJ9MFSl+fdwK+EhE97EkRu+dV0SARxgPPBYNCLG
jtSpZYqcF7z7zHk+c5JzyCR/CWX0Oo9PX5J5VdSzSeFIjodAzEkJ/K5gfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKzlBwxJtS7f7mG+Y1+6BLqLrODMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3ZWpN0J
TYHlCnISagklX9nAt0DUWFbZ9NSsWa9U1dnIhsqnsIrIcGzemjOxLJLTnoWEk2pX
1EB6lngpbVVHci1/TA/TXyyN64zaysp+Zdft5upeLDJ/aFf+2oChSQJVGTCSaZ3d
sYN/kXYMoYf4sEOGUiXQYg6zAjiREmNm2oGOpOlL0NFvwLKgH8hP7pzSS9lBe56/
MkLFsYHxqlbBq3xt9cfg0f0YOJDM+hO7KKM7r+1Ib1TJM4VlKzzTwiyWMJGFrHyM
AP6O0Db7gYkfkoGGIGbZBqQyOlUh+CCdv99rYX7Rj6dV1y8a8pLy5zih083fed4G
MplNl6/pWfamSQ==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:00 2025 by rpki-client