Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: v/eNN2PNgqnnqlU+vPoA6boAKMmgVIdeJ8adLTBbvXc=
Subject key identifier: 1E:73:CE:D5:59:F9:D3:D3:78:5A:EB:CB:B3:59:75:13:83:B2:09:4A
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019748FA0BFEFC0F390AC234653F9E3130FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0C9B
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: CdxrAiz477yFQ/MSBm/ACRCRCHplhy4rGaYpZG+MqGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0b:fe:fc:0f:39:0a:c2:34:65:3f:9e:31:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=1e73ced559f9d3d3785aebcbb359751383b2094a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:2a:d0:8c:69:02:a3:20:38:0e:d2:4d:46:
61:2d:cb:3c:01:10:66:bc:e7:05:34:94:19:e6:29:
ad:4a:0c:9e:8e:0e:a8:d8:12:64:f3:a6:17:6e:7f:
48:2d:75:6d:64:6a:e0:67:5a:da:32:5a:de:9f:30:
13:8c:6d:2c:5d:5d:9d:b3:24:04:3b:03:2c:f7:53:
cb:e5:f3:02:bd:6d:ed:f0:a3:d7:8a:b7:06:cf:3e:
ad:d1:62:4e:d1:ad:86:37:53:0d:ef:bf:f7:3d:d3:
fd:c6:a5:c7:7d:fc:d0:21:f0:6c:bd:8f:f2:37:5e:
4f:24:6e:47:9b:3a:73:b2:0d:18:a0:70:ff:1c:30:
86:89:8a:d4:d9:8d:78:61:a8:ba:be:ae:22:92:a1:
a5:68:7d:b7:34:e3:f6:5b:90:b3:25:d3:55:7a:e8:
31:11:21:98:40:f6:51:69:84:67:ac:7b:38:1b:ce:
6d:7f:44:fb:fe:48:48:15:98:7b:48:22:de:f4:78:
42:c3:83:4c:1d:2e:c6:6d:39:de:24:7c:48:14:06:
a9:a4:0b:b9:d0:a5:87:e0:f0:92:d1:1f:98:21:02:
9f:3e:88:9a:1e:13:14:1f:b2:aa:8e:9c:cd:a2:94:
70:21:99:80:2f:f9:8e:7b:45:b5:0c:b4:b6:16:38:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:CE:D5:59:F9:D3:D3:78:5A:EB:CB:B3:59:75:13:83:B2:09:4A
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:4d:41:fd:de:55:9a:1f:93:05:ab:9a:64:a6:ae:85:45:01:
af:8c:2f:b0:45:f5:0b:d8:e2:fd:b2:30:30:f6:48:f9:e0:e1:
25:c0:c9:6c:aa:2d:0b:cb:59:5e:c7:36:96:b9:25:c1:47:bd:
a3:2b:d0:0e:f2:c2:39:af:a3:d6:35:31:2c:93:9f:ed:61:3c:
e8:42:a9:f3:3b:f0:49:a8:69:f9:69:90:b9:bc:ec:da:7b:da:
58:54:5c:20:c2:a3:d0:7f:24:af:70:0e:56:7d:e3:f3:b9:5a:
b2:44:48:27:bf:37:2d:73:41:11:68:8d:91:21:38:9d:7f:03:
92:e9:7d:2d:68:57:52:dd:00:2f:07:87:1e:6d:63:8a:f9:96:
2e:0b:14:08:c1:eb:d4:7f:b5:60:04:1d:b1:48:60:f1:3c:a5:
9f:53:a2:ba:33:ed:ef:12:a5:92:ee:b6:47:6f:5b:ce:18:97:
36:a8:fa:ab:5a:b3:b6:35:cc:08:82:ec:c8:68:ef:03:6e:0c:
2a:ba:c4:2e:5e:87:4b:00:0d:61:c1:b5:a7:4e:83:f2:fe:37:
2b:e1:35:e8:91:be:8e:2b:c0:81:c9:fc:d3:fc:9c:a6:29:6d:
e2:66:7b:60:99:de:61:a6:35:65:04:ad:a3:c3:b4:85:45:92:
c7:b6:59:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+gv+/A85CsI0ZT+eMTD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4
ZGIxYzcwHhcNMjUwNjA3MDYwMDM2WhcNMjUwNjA4MDYwMDM2WjAzMTEwLwYDVQQD
EygxZTczY2VkNTU5ZjlkM2QzNzg1YWViY2JiMzU5NzUxMzgzYjIwOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA0q0IxpAqMgOA7STUZhLcs8ARBm
vOcFNJQZ5imtSgyejg6o2BJk86YXbn9ILXVtZGrgZ1raMlrenzATjG0sXV2dsyQE
OwMs91PL5fMCvW3t8KPXircGzz6t0WJO0a2GN1MN77/3PdP9xqXHffzQIfBsvY/y
N15PJG5Hmzpzsg0YoHD/HDCGiYrU2Y14Yai6vq4ikqGlaH23NOP2W5CzJdNVeugx
ESGYQPZRaYRnrHs4G85tf0T7/khIFZh7SCLe9HhCw4NMHS7GbTneJHxIFAappAu5
0KWH4PCS0R+YIQKfPoiaHhMUH7KqjpzNopRwIZmAL/mOe0W1DLS2FjipRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5zztVZ+dPTeFrry7NZdRODsglKMB8GA1UdIwQY
MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt
ZDZiNTZhYmEzZWI3LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3
LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2E1B/d5V
mh+TBauaZKauhUUBr4wvsEX1C9ji/bIwMPZI+eDhJcDJbKotC8tZXsc2lrklwUe9
oyvQDvLCOa+j1jUxLJOf7WE86EKp8zvwSahp+WmQubzs2nvaWFRcIMKj0H8kr3AO
Vn3j87laskRIJ783LXNBEWiNkSE4nX8Dkul9LWhXUt0ALweHHm1jivmWLgsUCMHr
1H+1YAQdsUhg8Tyln1OiujPt7xKlku62R29bzhiXNqj6q1qztjXMCILsyGjvA24M
KrrELl6HSwANYcG1p06D8v43K+E16JG+jivAgcn80/ycpilt4mZ7YJneYaY1ZQSt
o8O0hUWSx7ZZQA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:49:03 2025 by rpki-client