Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: Fss0PbzET6IWPJjfugymQxwpgSdLIlycTu/A3KvSgJA=
Subject key identifier: 82:F6:78:A9:EB:8D:C4:C6:BD:53:A9:44:15:EC:96:88:18:84:8D:24
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 01974DE9E97DF49E0D4B12CC1824DF010D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 09E9
Signing time: Sun 08 Jun 2025 05:01:04 +0000
Manifest this update: Sun 08 Jun 2025 05:01:04 +0000
Manifest next update: Mon 09 Jun 2025 05:01:04 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: Ew7fgUcchlNME75c7g76V26AZrMqIY6ECJp+Us7caq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e9:7d:f4:9e:0d:4b:12:cc:18:24:df:01:0d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Jun 8 05:01:04 2025 GMT
Not After : Jun 9 05:01:04 2025 GMT
Subject: CN=82f678a9eb8dc4c6bd53a94415ec968818848d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:7a:9e:92:b7:df:71:37:a5:6c:19:a8:a3:
56:20:5f:f2:a0:63:b9:cf:85:47:95:a4:fa:ea:3b:
42:7f:70:fe:55:6f:56:ac:37:49:01:62:63:ba:35:
1c:d7:63:ef:c5:c1:d4:45:df:db:0f:2a:c4:bc:f9:
c4:52:df:55:e6:59:cb:47:3d:42:20:50:9d:76:de:
58:e9:58:e6:de:5d:41:55:26:0c:a7:d7:83:12:4a:
3e:79:94:5e:2e:eb:dd:63:cc:40:f0:28:f7:08:95:
ab:1b:07:3b:fc:e6:1a:de:a6:cd:89:0b:de:22:96:
e8:63:de:be:04:a1:0f:29:3b:08:30:40:ab:d9:12:
4e:43:37:f3:64:0f:db:73:5e:52:56:18:ab:72:a0:
6d:17:cb:4f:d1:00:dc:8c:39:0b:50:90:fe:3a:c0:
df:d3:04:84:85:1f:da:47:26:a7:10:84:16:17:25:
62:68:9b:31:17:1d:e7:cc:90:8f:57:dc:80:01:fe:
bb:91:c1:3f:b5:c9:7f:66:c2:89:30:f5:c5:f5:0f:
1d:cd:78:15:32:e0:a7:79:f8:7c:25:65:d8:7b:de:
d2:99:61:d4:ca:fd:93:b3:c8:8f:85:59:a8:35:04:
a5:36:90:0b:6d:48:19:d3:61:48:86:eb:d5:00:8c:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:78:A9:EB:8D:C4:C6:BD:53:A9:44:15:EC:96:88:18:84:8D:24
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:98:a1:1d:25:9a:bd:4f:8d:cc:51:17:91:3b:6a:7b:16:
97:98:59:b5:7b:e6:53:db:60:5a:c6:ea:aa:23:0e:9b:c5:e8:
8c:9b:d3:4b:dc:9c:af:24:44:45:5f:66:50:5e:30:d7:b6:90:
16:73:9c:d1:58:c6:86:f1:1a:49:99:00:92:08:f2:7b:64:d5:
26:46:0c:cc:7b:f8:ba:44:83:e7:ce:87:20:73:4b:19:3f:ca:
13:e4:a7:d7:30:5c:53:83:06:58:98:48:2f:5e:ae:40:4b:e2:
dd:1f:71:1c:e1:cb:a0:d6:0c:69:ca:68:c9:30:bd:94:93:71:
90:57:04:15:ec:47:c7:9f:2b:ea:0c:44:fd:db:b1:13:71:be:
5b:fc:53:26:e6:c4:41:b0:9f:ac:2e:50:9b:5e:5b:b9:c7:02:
b8:33:cc:64:08:fe:06:88:a0:73:9d:cd:24:32:d6:a8:d5:bf:
dd:73:75:db:35:27:39:67:44:11:3d:21:aa:1c:c1:33:6e:bf:
53:ac:47:fe:dc:45:9a:c5:9d:8c:90:7f:08:ae:bd:9d:2b:d6:
80:56:28:ea:2c:38:b9:53:ac:0b:08:31:4d:5f:8a:f0:fa:d7:
bc:e5:8c:8b:1c:f4:86:26:8e:fa:39:15:ab:98:28:14:70:eb:
ec:d0:3f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6el99J4NSxLMGCTfAQ1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyMjllNzNjZTZiYjE5NmQ2NWMwYmVmMTE5NTYwNjU3
YTM3MjAwHhcNMjUwNjA4MDUwMTA0WhcNMjUwNjA5MDUwMTA0WjAzMTEwLwYDVQQD
Eyg4MmY2NzhhOWViOGRjNGM2YmQ1M2E5NDQxNWVjOTY4ODE4ODQ4ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJB6npK333E3pWwZqKNWIF/yoGO5
z4VHlaT66jtCf3D+VW9WrDdJAWJjujUc12PvxcHURd/bDyrEvPnEUt9V5lnLRz1C
IFCddt5Y6Vjm3l1BVSYMp9eDEko+eZReLuvdY8xA8Cj3CJWrGwc7/OYa3qbNiQve
IpboY96+BKEPKTsIMECr2RJOQzfzZA/bc15SVhircqBtF8tP0QDcjDkLUJD+OsDf
0wSEhR/aRyanEIQWFyViaJsxFx3nzJCPV9yAAf67kcE/tcl/ZsKJMPXF9Q8dzXgV
MuCnefh8JWXYe97SmWHUyv2Ts8iPhVmoNQSlNpALbUgZ02FIhuvVAIwEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIL2eKnrjcTGvVOpRBXslogYhI0kMB8GA1UdIwQY
MBaAFMU7Ip5zzmuxltZcC+8RlWBlejcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEt
NjM3MjhiMGZhMTA4LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEtNjM3MjhiMGZhMTA4
LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnKYoR0l
mr1PjcxRF5E7ansWl5hZtXvmU9tgWsbqqiMOm8XojJvTS9ycryRERV9mUF4w17aQ
FnOc0VjGhvEaSZkAkgjye2TVJkYMzHv4ukSD586HIHNLGT/KE+Sn1zBcU4MGWJhI
L16uQEvi3R9xHOHLoNYMacpoyTC9lJNxkFcEFexHx58r6gxE/duxE3G+W/xTJubE
QbCfrC5Qm15buccCuDPMZAj+Boigc53NJDLWqNW/3XN12zUnOWdEET0hqhzBM26/
U6xH/txFmsWdjJB/CK69nSvWgFYo6iw4uVOsCwgxTV+K8PrXvOWMixz0hiaO+jkV
q5goFHDr7NA/uQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:59:42 2025 by rpki-client