Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: swfLBoOt7gMMxAvUT74pMq2h4aOrxTQ24BkDlagSLJ8=
Subject key identifier: F3:03:05:F5:CC:ED:BE:08:6A:89:73:B0:A5:CB:7F:AD:BB:8E:70:38
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01974A43B025F03DB49631C04417431D8374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 12B7
Signing time: Sat 07 Jun 2025 12:00:39 +0000
Manifest this update: Sat 07 Jun 2025 12:00:39 +0000
Manifest next update: Sun 08 Jun 2025 12:00:39 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: sZdj4tOKjS2KBcpNsDO3tdvc0kX88GU8bsFeggn6Yvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b0:25:f0:3d:b4:96:31:c0:44:17:43:1d:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jun 7 12:00:39 2025 GMT
Not After : Jun 8 12:00:39 2025 GMT
Subject: CN=f30305f5ccedbe086a8973b0a5cb7fadbb8e7038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:d1:fb:da:75:8a:11:6b:d4:db:32:4d:e4:
8e:89:00:b3:0e:fe:a0:07:36:45:8c:29:9d:20:89:
7e:ad:5c:9a:a4:2d:ce:9c:5d:5b:f4:26:fa:4e:3b:
d1:4b:80:84:21:6e:d0:b2:a7:85:25:95:11:ee:13:
5f:fb:66:55:59:6c:f2:71:1a:a2:90:f1:36:88:75:
4a:2b:c8:de:a3:73:9f:ce:84:cc:6f:8f:84:1f:63:
b8:44:1a:c7:84:68:c5:8a:b0:6b:58:52:af:b6:d8:
8c:90:3b:db:d0:70:29:e6:da:92:7f:13:98:29:fd:
9a:08:be:97:c2:60:e5:c1:64:a5:6b:64:08:66:98:
a9:34:98:5e:42:9c:3f:d3:3c:c4:58:a0:19:a6:1b:
8a:ff:fb:25:e0:60:84:1d:70:20:50:5c:4f:3b:11:
50:75:eb:65:39:52:8c:54:b1:1d:32:3e:19:55:f9:
3e:8c:5e:61:a4:3f:38:52:21:7b:83:78:d8:df:d1:
ab:e3:94:a5:ba:b9:12:af:20:27:07:6b:79:6b:6f:
7c:d3:21:7f:20:07:2d:df:64:c4:ef:04:33:1f:bd:
e3:dd:75:d0:c7:ec:8f:bd:97:3b:ba:a4:01:08:9d:
34:c2:42:18:85:14:63:11:5c:ca:d3:f2:07:ac:9b:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:03:05:F5:CC:ED:BE:08:6A:89:73:B0:A5:CB:7F:AD:BB:8E:70:38
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9b:71:ef:85:3f:ca:9c:a3:3c:20:ed:ca:78:cd:34:56:90:
23:2b:58:d0:c7:59:7b:ab:3d:19:91:63:2d:39:fd:ce:28:ce:
96:22:b5:ad:8c:d5:9f:1a:47:ad:0f:72:b2:dd:e6:19:75:cf:
aa:64:47:72:f3:b2:12:1a:aa:e2:9c:2d:45:d5:75:a4:94:15:
4f:9b:c4:5c:79:cb:09:76:f8:38:1f:16:9b:46:13:13:88:0a:
9a:96:87:60:1d:3b:cc:48:61:67:2b:b2:f5:d2:0f:a1:f8:15:
b8:53:37:08:ee:be:4a:bd:46:09:a2:df:df:0b:b8:57:ea:6f:
b7:85:2d:7c:b7:28:60:3e:a0:d9:cc:36:d9:04:b2:99:cf:57:
a7:e7:69:b0:24:52:37:26:c5:10:07:a7:81:0b:1f:31:ae:e3:
d1:33:29:75:0f:0f:65:35:ad:8f:2a:96:c5:01:93:19:e9:7a:
51:9d:58:71:d9:92:f7:36:8f:18:6f:51:ff:a3:0c:4e:49:4a:
fa:85:6b:f4:90:c9:d5:23:ce:5c:f7:98:33:43:46:19:ef:6e:
9e:5c:86:39:5e:3e:91:61:e0:53:46:22:b6:65:1f:97:09:07:
90:a6:af:dc:40:33:cb:1d:07:d3:b7:07:b2:f4:4d:24:a4:a5:
69:1b:5c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ7Al8D20ljHARBdDHYN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm
ZGU4MzEwHhcNMjUwNjA3MTIwMDM5WhcNMjUwNjA4MTIwMDM5WjAzMTEwLwYDVQQD
EyhmMzAzMDVmNWNjZWRiZTA4NmE4OTczYjBhNWNiN2ZhZGJiOGU3MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ynR+9p1ihFr1NsyTeSOiQCzDv6g
BzZFjCmdIIl+rVyapC3OnF1b9Cb6TjvRS4CEIW7QsqeFJZUR7hNf+2ZVWWzycRqi
kPE2iHVKK8jeo3OfzoTMb4+EH2O4RBrHhGjFirBrWFKvttiMkDvb0HAp5tqSfxOY
Kf2aCL6XwmDlwWSla2QIZpipNJheQpw/0zzEWKAZphuK//sl4GCEHXAgUFxPOxFQ
detlOVKMVLEdMj4ZVfk+jF5hpD84UiF7g3jY39Gr45SlurkSryAnB2t5a2980yF/
IAct32TE7wQzH73j3XXQx+yPvZc7uqQBCJ00wkIYhRRjEVzK0/IHrJtFiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMDBfXM7b4IaolzsKXLf627jnA4MB8GA1UdIwQY
MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt
MDY2ODY2ZjJkZWQwLzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw
LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5tx74U/
ypyjPCDtynjNNFaQIytY0MdZe6s9GZFjLTn9zijOliK1rYzVnxpHrQ9yst3mGXXP
qmRHcvOyEhqq4pwtRdV1pJQVT5vEXHnLCXb4OB8Wm0YTE4gKmpaHYB07zEhhZyuy
9dIPofgVuFM3CO6+Sr1GCaLf3wu4V+pvt4UtfLcoYD6g2cw22QSymc9Xp+dpsCRS
NybFEAengQsfMa7j0TMpdQ8PZTWtjyqWxQGTGel6UZ1YcdmS9zaPGG9R/6MMTklK
+oVr9JDJ1SPOXPeYM0NGGe9unlyGOV4+kWHgU0YitmUflwkHkKav3EAzyx0H07cH
svRNJKSlaRtcjg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:22:52 2025 by rpki-client