Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: MYHV7HqkmpDloAkBzpBJNTGyKiCb6e6ijiVK8s7wfNc=
Subject key identifier: B6:15:3D:B3:EC:EB:67:1C:B2:C0:C6:DC:CF:90:FF:BB:E5:F7:8F:30
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 01975423595BB5D2F5AEF9DA2B4DF5E6E5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 1511
Signing time: Mon 09 Jun 2025 10:01:31 +0000
Manifest this update: Mon 09 Jun 2025 10:01:31 +0000
Manifest next update: Tue 10 Jun 2025 10:01:31 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: PgKIajUawqp8rNHFzc7dBhW+/nhQx/62qIOAygOn0D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:59:5b:b5:d2:f5:ae:f9:da:2b:4d:f5:e6:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Jun 9 10:01:31 2025 GMT
Not After : Jun 10 10:01:31 2025 GMT
Subject: CN=b6153db3eceb671cb2c0c6dccf90ffbbe5f78f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:88:cc:c4:0a:eb:36:44:7e:d0:dd:dc:71:
c4:9f:19:f1:f9:93:da:2b:41:1e:ee:17:55:ff:1b:
ee:b8:28:90:d5:3e:90:0e:bf:e0:55:9d:fa:cf:49:
4e:7c:60:5c:a0:ef:93:67:f5:a5:31:50:6d:e2:5a:
fd:25:b9:d8:60:00:3b:69:90:ec:bc:a0:f8:39:c2:
0b:79:83:2e:03:e3:c4:93:06:0f:03:20:34:8e:57:
34:f5:1e:a4:66:a7:73:c0:4f:84:ae:3b:e2:4b:94:
0b:e4:f3:5d:13:fe:c7:cc:0a:02:b2:5a:a2:af:cf:
08:6c:b0:18:5f:03:20:13:36:7f:c9:a6:21:ba:eb:
15:31:19:b4:5d:0c:5d:e5:b7:bc:28:88:ac:0e:17:
e5:81:12:a0:cc:3b:55:36:c4:59:f4:7f:fe:7f:48:
66:81:84:6c:2f:fe:33:b7:d6:38:56:f6:35:a2:35:
e7:9d:4e:32:b3:e9:06:44:e2:2c:6b:13:78:24:80:
58:2f:9f:50:e1:f4:0f:ab:0d:f0:7e:fe:c7:bb:a6:
5b:46:4e:01:c1:bd:fb:67:52:df:e0:5b:08:e5:b8:
9f:1c:1d:27:f8:f9:07:08:c5:64:ec:c1:63:fc:fd:
a0:e7:19:f5:98:ef:21:a9:2d:cc:74:44:e8:4d:40:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:3D:B3:EC:EB:67:1C:B2:C0:C6:DC:CF:90:FF:BB:E5:F7:8F:30
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4d:08:db:99:2b:1f:a5:92:c9:45:a6:27:b2:0a:5f:45:e4:
ca:b0:2e:d7:64:a1:4f:48:7c:34:4f:fd:97:97:ad:6e:cd:a5:
a9:b6:34:14:85:c4:6b:98:c4:20:87:59:ea:4b:e9:bf:0b:d4:
45:26:17:57:ea:62:ea:cc:3a:2f:16:25:70:26:b2:1d:0b:2d:
d5:57:70:a3:5e:33:45:d2:19:5c:b6:7b:e8:e6:d6:28:f0:86:
22:25:66:42:67:35:0d:c6:dd:1d:8b:ae:fa:d1:aa:39:fe:50:
7b:d3:e7:4f:73:cb:a0:f3:dd:cb:c1:a5:f5:15:2f:50:55:a1:
7b:9b:59:bd:26:4b:01:77:94:48:a0:ea:40:c7:76:b9:9c:97:
1e:da:66:a7:70:b6:c3:3b:4d:d5:68:18:c9:f5:51:1a:e8:39:
5b:fe:78:fd:6a:51:81:54:8f:e6:d8:2a:1f:42:45:90:e8:5a:
f1:0b:da:0f:f4:ac:1d:df:90:db:aa:32:29:67:a9:a4:2e:46:
26:53:fd:b8:26:24:21:39:76:84:5f:3b:78:39:1e:d7:c4:ec:
cc:57:e1:8f:41:3d:64:ea:52:9d:4c:40:58:0e:6d:8a:aa:52:
c3:ee:2c:75:78:46:0c:fe:62:3b:a5:16:eb:ea:db:7f:5d:ac:
68:32:6e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUI1lbtdL1rvnaK0315uX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDI0NmJmZmUwNGUyZDZmMWUxOTM5ZmU2Mzg2YTI0ZGZj
ZGY3YWUwHhcNMjUwNjA5MTAwMTMxWhcNMjUwNjEwMTAwMTMxWjAzMTEwLwYDVQQD
EyhiNjE1M2RiM2VjZWI2NzFjYjJjMGM2ZGNjZjkwZmZiYmU1Zjc4ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPWIzMQK6zZEftDd3HHEnxnx+ZPa
K0Ee7hdV/xvuuCiQ1T6QDr/gVZ36z0lOfGBcoO+TZ/WlMVBt4lr9JbnYYAA7aZDs
vKD4OcILeYMuA+PEkwYPAyA0jlc09R6kZqdzwE+ErjviS5QL5PNdE/7HzAoCslqi
r88IbLAYXwMgEzZ/yaYhuusVMRm0XQxd5be8KIisDhflgRKgzDtVNsRZ9H/+f0hm
gYRsL/4zt9Y4VvY1ojXnnU4ys+kGROIsaxN4JIBYL59Q4fQPqw3wfv7Hu6ZbRk4B
wb37Z1Lf4FsI5bifHB0n+PkHCMVk7MFj/P2g5xn1mO8hqS3MdEToTUBmgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYVPbPs62ccssDG3M+Q/7vl948wMB8GA1UdIwQY
MBaAFF4CRr/+BOLW8eGTn+Y4aiTfzfeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQt
NGM5MWNiOWVjOThiLzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQtNGM5MWNiOWVjOThi
LzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU0I25kr
H6WSyUWmJ7IKX0XkyrAu12ShT0h8NE/9l5etbs2lqbY0FIXEa5jEIIdZ6kvpvwvU
RSYXV+pi6sw6LxYlcCayHQst1Vdwo14zRdIZXLZ76ObWKPCGIiVmQmc1DcbdHYuu
+tGqOf5Qe9PnT3PLoPPdy8Gl9RUvUFWhe5tZvSZLAXeUSKDqQMd2uZyXHtpmp3C2
wztN1WgYyfVRGug5W/54/WpRgVSP5tgqH0JFkOha8QvaD/SsHd+Q26oyKWeppC5G
JlP9uCYkITl2hF87eDke18TszFfhj0E9ZOpSnUxAWA5tiqpSw+4sdXhGDP5iO6UW
6+rbf12saDJuEg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:47 2025 by rpki-client