Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: VXZov5I57+61UGylayz1/GgBY2IsoHXXfkwXsD/6Y8E=
Subject key identifier: 86:42:7F:8F:2A:F7:6C:BA:ED:B6:83:C6:AB:1B:5F:C0:E7:A9:4A:6E
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 01974CA0376E2A95793E654C84C4A0E7738C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 014B
Signing time: Sat 07 Jun 2025 23:00:57 +0000
Manifest this update: Sat 07 Jun 2025 23:00:57 +0000
Manifest next update: Sun 08 Jun 2025 23:00:57 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: L92yEnrmCVWuBeECU7gXPv4uhMh0Ce2jsEttskSPJTc=)
2: cPxWboLauOt1xiX1g5_qcFfMwuQ.roa (hash: F49rFgzhVx+26sTntZUKS3aBxcYFzjzC7SoWYW83au0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:37:6e:2a:95:79:3e:65:4c:84:c4:a0:e7:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Jun 7 23:00:57 2025 GMT
Not After : Jun 8 23:00:57 2025 GMT
Subject: CN=86427f8f2af76cbaedb683c6ab1b5fc0e7a94a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:a7:d2:26:92:18:8a:06:64:42:f8:5e:b7:
e9:8f:ad:fb:cb:33:fc:a2:99:ca:92:1d:61:a9:9c:
61:b4:a6:fe:20:4a:6f:90:61:ad:4c:51:15:18:bf:
f8:ef:20:79:b0:3b:85:8b:01:ef:42:cb:23:0b:92:
5f:fa:be:60:13:cc:36:cf:80:d9:57:1d:23:c8:74:
86:b1:07:c6:d8:5f:14:d6:78:ca:d2:80:0e:22:5c:
3b:39:e7:89:38:79:e2:fd:5d:57:4a:28:eb:a4:96:
08:7f:84:73:67:43:8e:aa:ef:9a:20:8e:be:68:3e:
a0:74:d6:f2:d3:3b:45:83:df:e6:f2:5d:26:37:36:
06:b6:21:40:b7:e0:6b:4a:fa:d5:ed:67:b8:e1:d6:
e9:66:a1:14:61:20:f3:04:96:e7:9e:f7:d4:31:d6:
b1:a6:1b:1c:8b:f7:e6:27:95:9d:f4:82:72:ef:97:
e9:c0:cb:1a:ba:71:43:aa:51:c6:48:f2:96:92:5f:
53:04:1d:de:eb:d4:2c:30:2e:93:bc:fa:c4:97:31:
aa:b2:87:2b:a9:c9:e1:74:a4:db:b7:25:b3:b8:1c:
bc:db:ad:90:0f:25:06:b3:ee:7a:f3:ba:71:03:08:
9b:ae:63:2b:4b:87:80:64:8c:f8:4a:00:ea:5e:90:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:7F:8F:2A:F7:6C:BA:ED:B6:83:C6:AB:1B:5F:C0:E7:A9:4A:6E
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:91:12:83:ec:c7:5b:75:a3:3e:25:f3:25:7c:e5:18:7d:
32:c5:e3:78:d4:c0:64:48:15:61:ab:b2:a6:02:84:c4:de:6c:
c5:17:11:b7:45:fc:4b:80:31:8f:9f:56:5e:6c:99:77:61:54:
be:b7:40:57:5e:de:ba:6c:a1:49:7e:d8:fa:39:5f:cc:4c:c1:
36:66:bb:f3:71:85:41:42:4f:c9:ef:75:cd:16:88:6a:1a:f5:
f4:d9:8f:a2:bc:0f:62:18:c6:82:22:00:47:c5:59:21:f3:0d:
14:ad:44:64:a8:04:e5:93:a9:32:cc:7a:84:82:f5:a3:01:0e:
22:ea:c6:71:70:e4:d1:2c:cb:b3:d1:ac:bb:1c:70:fe:cb:b1:
16:91:e7:17:66:1b:23:05:64:f6:a5:d6:76:3d:17:0b:95:63:
d3:af:41:2a:67:fe:63:c8:dd:4f:b2:7e:b4:30:55:75:55:df:
45:35:fa:21:1a:01:d1:fa:2e:10:a1:51:52:60:2b:25:c6:d7:
8c:3a:fb:a8:eb:fe:b3:bb:d6:51:e0:df:17:a3:b6:99:08:40:
55:59:18:ed:4e:97:29:87:97:ce:2f:31:3e:da:57:88:bc:d4:
b3:fd:70:0b:c2:31:6a:a7:8f:b1:40:30:2f:7e:1b:44:7e:94:
a2:a9:f5:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoDduKpV5PmVMhMSg53OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw
YmZjOTEwHhcNMjUwNjA3MjMwMDU3WhcNMjUwNjA4MjMwMDU3WjAzMTEwLwYDVQQD
Eyg4NjQyN2Y4ZjJhZjc2Y2JhZWRiNjgzYzZhYjFiNWZjMGU3YTk0YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5qn0iaSGIoGZEL4Xrfpj637yzP8
opnKkh1hqZxhtKb+IEpvkGGtTFEVGL/47yB5sDuFiwHvQssjC5Jf+r5gE8w2z4DZ
Vx0jyHSGsQfG2F8U1njK0oAOIlw7OeeJOHni/V1XSijrpJYIf4RzZ0OOqu+aII6+
aD6gdNby0ztFg9/m8l0mNzYGtiFAt+BrSvrV7We44dbpZqEUYSDzBJbnnvfUMdax
phsci/fmJ5Wd9IJy75fpwMsaunFDqlHGSPKWkl9TBB3e69QsMC6TvPrElzGqsocr
qcnhdKTbtyWzuBy8262QDyUGs+5687pxAwibrmMrS4eAZIz4SgDqXpBVJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZCf48q92y67baDxqsbX8DnqUpuMB8GA1UdIwQY
MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt
MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi
LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0+REoPs
x1t1oz4l8yV85Rh9MsXjeNTAZEgVYauypgKExN5sxRcRt0X8S4Axj59WXmyZd2FU
vrdAV17eumyhSX7Y+jlfzEzBNma783GFQUJPye91zRaIahr19NmPorwPYhjGgiIA
R8VZIfMNFK1EZKgE5ZOpMsx6hIL1owEOIurGcXDk0SzLs9Gsuxxw/suxFpHnF2Yb
IwVk9qXWdj0XC5Vj069BKmf+Y8jdT7J+tDBVdVXfRTX6IRoB0fouEKFRUmArJcbX
jDr7qOv+s7vWUeDfF6O2mQhAVVkY7U6XKYeXzi8xPtpXiLzUs/1wC8IxaqePsUAw
L34bRH6Uoqn1rg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:29:11 2025 by rpki-client