Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: oTjyptMSUkXzZB0k9usApgBXgQLmjg3qftez0uG/3fc=
Subject key identifier: 93:89:00:B6:27:7A:E3:F1:E5:B9:5A:8F:D4:4E:2B:04:13:23:F7:BB
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019748557BE5BB876B14BB045EF323477FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 03:00:51 +0000
Manifest this update: Sat 07 Jun 2025 03:00:51 +0000
Manifest next update: Sun 08 Jun 2025 03:00:51 +0000
Files and hashes: 1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: 4CQxrPwRS+aRsVSoiOSzNmTiTn4YznIswpQQOMh+zXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:7b:e5:bb:87:6b:14:bb:04:5e:f3:23:47:7f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jun 7 03:00:51 2025 GMT
Not After : Jun 8 03:00:51 2025 GMT
Subject: CN=938900b6277ae3f1e5b95a8fd44e2b041323f7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:8e:1b:4f:39:37:9d:a6:7e:6e:36:d5:1a:
ec:03:d2:4c:ff:b3:0b:aa:04:7f:61:c1:c2:39:d0:
e8:0c:80:49:73:c7:b7:e2:fb:a3:3a:a1:32:f3:78:
23:29:4a:83:52:09:4f:5d:b5:b2:3b:0f:a9:02:e9:
a2:7c:20:42:25:a1:c4:66:c8:da:92:4b:35:89:df:
75:2a:22:ca:3b:44:f7:c5:16:89:2c:22:07:a5:44:
a9:0f:89:92:79:77:b3:61:42:e9:ed:2c:f4:a2:c2:
a8:67:6b:e0:4c:de:53:da:52:91:64:e3:39:f7:0d:
6e:4f:5a:f5:43:c9:96:74:85:8e:63:57:73:72:ec:
b9:c9:23:3e:1b:00:4f:72:35:0d:ce:2d:74:1b:8d:
df:10:1f:b6:aa:a9:e8:23:05:2a:10:10:39:1d:6f:
b9:0c:ee:85:24:cd:dd:d4:a5:86:df:e4:5a:2a:36:
23:14:20:ae:f2:36:54:0e:00:8a:5d:57:14:f1:00:
c7:3e:a1:6a:bb:e1:3e:88:67:81:23:c8:33:ea:c1:
ba:2f:cf:5c:b7:d4:e2:a6:10:55:ef:08:7e:a3:f2:
23:d5:7a:7a:61:d5:cf:57:82:fd:3d:8a:60:37:21:
60:9c:a0:2a:75:f6:9b:e3:36:9f:2a:f3:ab:9a:14:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:00:B6:27:7A:E3:F1:E5:B9:5A:8F:D4:4E:2B:04:13:23:F7:BB
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:d1:64:89:a8:58:f7:bd:f3:45:c2:5d:a2:bd:0e:c6:82:
7c:27:d6:7f:ef:ab:26:46:b7:e5:7f:56:61:7b:82:4e:2c:41:
25:df:4d:22:cd:a0:ae:6e:8e:ef:96:e7:a4:6a:a9:d9:cc:1d:
4a:7b:dd:52:2a:ab:0e:5e:cf:15:91:18:0d:bf:af:1e:10:b7:
73:d3:a2:f8:00:53:df:2c:75:64:c2:e6:f3:4f:75:aa:b3:f0:
c5:3b:75:1b:d2:51:4d:a8:2d:00:cb:18:a3:81:7b:5f:bc:53:
5a:9f:33:85:85:ed:95:7b:00:c1:66:49:96:22:ec:65:3f:f8:
f3:6d:fa:23:a1:b8:6e:84:b1:47:5b:01:55:ef:d3:de:1c:09:
a0:d4:8d:de:45:cd:47:9f:b6:d0:9e:7d:7b:05:8e:b9:f1:b7:
a8:91:78:e9:c0:9d:74:7c:39:6e:d6:32:60:e7:fb:3f:bc:ce:
99:11:77:c0:df:49:96:a4:10:02:19:17:82:1d:5a:12:23:18:
1b:c6:f4:2b:ad:ec:27:43:95:82:fb:67:fb:0e:aa:82:08:99:
be:dd:e1:8b:f4:f2:d8:31:91:45:9c:09:05:2f:db:c5:65:41:
a1:af:d0:e8:e2:99:56:0e:67:73:19:ce:d1:85:33:f7:18:db:
5c:6f:06:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVXvlu4drFLsEXvMjR3/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUwNjA3MDMwMDUxWhcNMjUwNjA4MDMwMDUxWjAzMTEwLwYDVQQD
Eyg5Mzg5MDBiNjI3N2FlM2YxZTViOTVhOGZkNDRlMmIwNDEzMjNmN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYmOG085N52mfm421RrsA9JM/7ML
qgR/YcHCOdDoDIBJc8e34vujOqEy83gjKUqDUglPXbWyOw+pAumifCBCJaHEZsja
kks1id91KiLKO0T3xRaJLCIHpUSpD4mSeXezYULp7Sz0osKoZ2vgTN5T2lKRZOM5
9w1uT1r1Q8mWdIWOY1dzcuy5ySM+GwBPcjUNzi10G43fEB+2qqnoIwUqEBA5HW+5
DO6FJM3d1KWG3+RaKjYjFCCu8jZUDgCKXVcU8QDHPqFqu+E+iGeBI8gz6sG6L89c
t9TiphBV7wh+o/Ij1Xp6YdXPV4L9PYpgNyFgnKAqdfab4zafKvOrmhTiTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOJALYneuPx5blaj9ROKwQTI/e7MB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKXRZImo
WPe980XCXaK9DsaCfCfWf++rJka35X9WYXuCTixBJd9NIs2grm6O75bnpGqp2cwd
SnvdUiqrDl7PFZEYDb+vHhC3c9Oi+ABT3yx1ZMLm8091qrPwxTt1G9JRTagtAMsY
o4F7X7xTWp8zhYXtlXsAwWZJliLsZT/48236I6G4boSxR1sBVe/T3hwJoNSN3kXN
R5+20J59ewWOufG3qJF46cCddHw5btYyYOf7P7zOmRF3wN9JlqQQAhkXgh1aEiMY
G8b0K63sJ0OVgvtn+w6qggiZvt3hi/Ty2DGRRZwJBS/bxWVBoa/Q6OKZVg5ncxnO
0YUz9xjbXG8G1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:21 2025 by rpki-client