Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: p8sq6nPbdfWNMQXn+m22mSIjczOP/2+/GnI78lMZkrE=
Subject key identifier: 07:B6:0F:DD:28:EC:15:02:6A:23:11:36:85:AB:46:9D:58:43:6A:58
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 01974EC52BDD784939DE4C23F2B253F668EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 04CE
Signing time: Sun 08 Jun 2025 09:00:34 +0000
Manifest this update: Sun 08 Jun 2025 09:00:34 +0000
Manifest next update: Mon 09 Jun 2025 09:00:34 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: +umxVcd92ZlVnY51aSNo260WZIeF59uFE9oZV9jSWDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:2b:dd:78:49:39:de:4c:23:f2:b2:53:f6:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Jun 8 09:00:34 2025 GMT
Not After : Jun 9 09:00:34 2025 GMT
Subject: CN=07b60fdd28ec15026a23113685ab469d58436a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:4f:a0:8c:ba:03:05:c6:ff:ca:2c:c0:bc:
a0:b4:31:6b:d0:c1:da:83:30:0a:9e:82:51:8b:55:
fb:3e:a5:70:2c:45:2e:97:1b:c5:fb:9f:11:31:d0:
2d:7a:66:e8:37:65:45:c1:87:06:2a:fc:68:01:ea:
25:0c:a4:ec:c3:f8:8f:7e:53:b6:04:d4:42:ba:44:
0f:33:6c:a9:0d:44:e3:e7:33:b5:ae:68:b4:6b:e5:
d4:44:5a:5a:48:0b:c8:c8:b5:5b:9d:a6:d4:49:74:
ee:5e:e3:ae:0a:75:2a:37:8a:4c:90:34:44:ef:9e:
74:91:d0:19:42:63:ef:70:d2:1c:76:f9:4c:71:e6:
b0:73:f5:4d:2d:68:22:dc:d7:f0:dc:cf:f9:a4:eb:
e4:39:56:7c:92:58:00:d7:84:e1:0c:39:44:e9:18:
1b:e4:6f:ca:1d:d7:af:fd:b9:9e:31:75:ed:cd:2b:
df:bf:2b:ce:f6:95:49:e9:7d:8a:db:58:d5:a9:c9:
c6:fa:2b:e8:2f:26:75:de:f2:6d:b9:c8:88:81:4f:
68:3e:e0:84:51:46:f7:d7:1d:68:b4:a4:e4:d8:ed:
03:72:f6:5c:47:00:b1:f2:dd:50:af:38:f5:4f:44:
01:2d:b5:1c:98:54:fd:e5:42:83:fe:a9:5e:09:4a:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B6:0F:DD:28:EC:15:02:6A:23:11:36:85:AB:46:9D:58:43:6A:58
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f2:ef:1b:57:b0:78:71:f9:e1:8f:ea:ca:05:1f:14:0a:3a:
25:7a:d8:99:84:c3:aa:68:de:9f:bc:e1:6d:4b:a3:2c:c7:64:
29:39:0a:7c:23:cd:eb:3a:a1:b2:3e:1e:20:d1:cd:21:5b:d1:
92:53:64:d2:7d:0e:54:e0:15:82:0c:83:38:7a:fe:86:b8:55:
8c:9b:d6:64:25:81:4b:22:16:34:0b:32:fe:41:04:93:6a:0b:
56:f8:0e:a9:6a:2b:ec:3a:98:b2:80:0e:71:28:64:e8:d5:e6:
22:4e:d7:7e:47:b8:55:e5:4d:3e:96:d8:45:17:ca:a2:54:09:
b1:88:39:8f:cf:88:c8:a9:c1:b9:a6:a2:da:a6:47:ab:49:40:
4f:b6:60:e5:e3:29:54:51:a9:f0:bf:83:40:f7:47:62:22:f1:
da:93:71:8f:0d:85:eb:60:56:31:6d:ca:af:99:1e:38:61:d0:
e7:95:c0:60:5f:75:d5:09:58:d7:ef:48:4a:bd:40:7a:24:73:
5c:7e:76:b1:e5:78:a3:cf:43:2c:1e:75:a6:a2:55:be:15:5e:
8e:f3:7f:b1:c5:89:9b:c4:f9:72:8b:c2:b5:3e:6b:04:ec:09:
bc:75:2e:f5:a7:fc:14:68:2b:8c:1f:d7:a0:4f:b6:e9:1c:ff:
d9:a1:2e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxSvdeEk53kwj8rJT9mjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTViZGE4Y2U5ODdkN2U0YWFiMWMzNTUxNzhkY2EzM2Uz
YjhlYTQwHhcNMjUwNjA4MDkwMDM0WhcNMjUwNjA5MDkwMDM0WjAzMTEwLwYDVQQD
EygwN2I2MGZkZDI4ZWMxNTAyNmEyMzExMzY4NWFiNDY5ZDU4NDM2YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ZPoIy6AwXG/8oswLygtDFr0MHa
gzAKnoJRi1X7PqVwLEUulxvF+58RMdAtemboN2VFwYcGKvxoAeolDKTsw/iPflO2
BNRCukQPM2ypDUTj5zO1rmi0a+XURFpaSAvIyLVbnabUSXTuXuOuCnUqN4pMkDRE
7550kdAZQmPvcNIcdvlMceawc/VNLWgi3Nfw3M/5pOvkOVZ8klgA14ThDDlE6Rgb
5G/KHdev/bmeMXXtzSvfvyvO9pVJ6X2K21jVqcnG+ivoLyZ13vJtuciIgU9oPuCE
UUb31x1otKTk2O0DcvZcRwCx8t1Qrzj1T0QBLbUcmFT95UKD/qleCUo8jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe2D90o7BUCaiMRNoWrRp1YQ2pYMB8GA1UdIwQY
MBaAFF0VvajOmH1+SqscNVF43KM+O46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2Yt
YmJhM2M4Y2IwZjdhLzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2YtYmJhM2M4Y2IwZjdh
LzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevLvG1ew
eHH54Y/qygUfFAo6JXrYmYTDqmjen7zhbUujLMdkKTkKfCPN6zqhsj4eINHNIVvR
klNk0n0OVOAVggyDOHr+hrhVjJvWZCWBSyIWNAsy/kEEk2oLVvgOqWor7DqYsoAO
cShk6NXmIk7Xfke4VeVNPpbYRRfKolQJsYg5j8+IyKnBuaai2qZHq0lAT7Zg5eMp
VFGp8L+DQPdHYiLx2pNxjw2F62BWMW3Kr5keOGHQ55XAYF911QlY1+9ISr1AeiRz
XH52seV4o89DLB51pqJVvhVejvN/scWJm8T5covCtT5rBOwJvHUu9af8FGgrjB/X
oE+26Rz/2aEuxA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:16:34 2025 by rpki-client