Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: k3XSyttCXHTghE7VmLyuuE/Qn4e+SRjNpqunPPYdkPw=
Subject key identifier: FE:78:05:43:06:68:2B:13:CD:D9:5A:80:A6:FD:15:7C:53:CF:37:2B
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 01974F338985C24AF1F5BB5C5C6B18958EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0C6C
Signing time: Sun 08 Jun 2025 11:01:06 +0000
Manifest this update: Sun 08 Jun 2025 11:01:06 +0000
Manifest next update: Mon 09 Jun 2025 11:01:06 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: aQUMKUSdaZyhUYcN3Sx29ZjOUelIyihrbLBhR5GFVGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:89:85:c2:4a:f1:f5:bb:5c:5c:6b:18:95:8e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jun 8 11:01:06 2025 GMT
Not After : Jun 9 11:01:06 2025 GMT
Subject: CN=fe78054306682b13cdd95a80a6fd157c53cf372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:f5:26:ba:bd:51:49:ec:f4:b6:20:8c:41:
06:32:b3:99:70:f8:eb:14:4b:b9:e4:54:1e:01:60:
6f:db:c1:53:e7:00:79:bf:b4:a5:5a:64:9d:ec:b5:
34:b1:73:3c:e9:5f:8d:86:dd:dd:d6:2a:c3:4c:d1:
25:8c:e9:4a:9d:cb:43:cc:df:64:51:93:0a:53:46:
db:53:3f:d9:65:21:7e:ef:dc:b2:2a:1a:f8:87:29:
6c:fe:45:ac:7a:c4:df:70:c8:9b:8a:bc:04:cb:c1:
83:21:41:69:a0:ae:ec:6b:45:27:c5:bd:6d:0b:aa:
8f:38:84:5f:bb:f9:3f:9b:24:8d:dd:63:35:57:77:
50:1e:71:cf:3c:db:1e:83:73:3f:9b:32:0f:48:e1:
2c:36:29:f5:d1:72:84:01:02:5a:61:69:8d:ce:f1:
2c:9b:97:4c:68:2a:b9:1b:1c:bf:42:fa:c5:d5:d5:
95:ca:73:13:3e:3c:15:44:68:a7:24:10:be:88:60:
87:c2:f5:f6:94:44:43:cf:04:7d:1f:14:ae:c3:cd:
4f:36:f4:27:83:f9:84:93:60:a3:4d:7c:0f:83:c7:
cd:61:0e:0e:59:8d:28:f9:8f:bb:60:44:f7:21:ed:
d2:54:13:eb:b7:c5:4a:bf:c3:cf:d8:1f:0f:be:f8:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:05:43:06:68:2B:13:CD:D9:5A:80:A6:FD:15:7C:53:CF:37:2B
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:39:4c:bf:b9:c9:9c:18:e0:0a:2b:58:5f:11:28:c2:61:2b:
0c:df:72:9d:7a:b4:78:16:4f:48:2e:32:04:4d:74:72:f6:6f:
08:10:c2:f6:43:30:90:5e:1b:f2:9d:5f:e9:8f:e8:8b:17:dd:
aa:6e:e1:63:be:c0:01:8a:97:c2:88:8a:4f:00:f0:57:e5:e4:
28:6e:94:28:01:57:67:e7:d8:8d:44:2d:0e:47:75:3a:9e:41:
6e:72:1a:2b:99:94:63:8c:7a:50:87:72:09:97:e3:52:15:b9:
b5:26:cd:29:59:b9:6c:39:a9:63:2a:f5:13:2e:1e:d2:64:6b:
40:1e:8f:6f:85:11:2e:df:ff:83:0e:56:c0:cd:c3:9e:9d:92:
5c:17:72:50:56:ec:61:8c:4b:9f:64:c5:a0:16:48:5f:a9:04:
b5:bd:c4:f4:26:08:12:c7:a7:d1:4e:97:bb:2e:80:26:cd:22:
8b:2a:67:ec:c8:df:77:b3:c3:d4:12:9a:44:46:af:1a:a3:7b:
c4:4a:72:ee:b3:2e:da:ae:c5:3e:e2:ad:ae:0e:66:4e:fc:a2:
f8:5f:92:33:d7:07:43:1e:c9:86:b0:42:88:64:43:e9:1f:3e:
6f:17:e7:ea:ff:03:58:66:46:68:54:a4:0f:22:81:a5:98:be:
88:3b:e8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPM4mFwkrx9btcXGsYlY6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjJhZDQzNDcxYjYwNmJjYzg1M2JiYTExYjhlZDY2M2Mx
NTE4ODIwHhcNMjUwNjA4MTEwMTA2WhcNMjUwNjA5MTEwMTA2WjAzMTEwLwYDVQQD
EyhmZTc4MDU0MzA2NjgyYjEzY2RkOTVhODBhNmZkMTU3YzUzY2YzNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHX1Jrq9UUns9LYgjEEGMrOZcPjr
FEu55FQeAWBv28FT5wB5v7SlWmSd7LU0sXM86V+Nht3d1irDTNEljOlKnctDzN9k
UZMKU0bbUz/ZZSF+79yyKhr4hyls/kWsesTfcMibirwEy8GDIUFpoK7sa0Unxb1t
C6qPOIRfu/k/mySN3WM1V3dQHnHPPNseg3M/mzIPSOEsNin10XKEAQJaYWmNzvEs
m5dMaCq5Gxy/QvrF1dWVynMTPjwVRGinJBC+iGCHwvX2lERDzwR9HxSuw81PNvQn
g/mEk2CjTXwPg8fNYQ4OWY0o+Y+7YET3Ie3SVBPrt8VKv8PP2B8PvviH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP54BUMGaCsTzdlagKb9FXxTzzcrMB8GA1UdIwQY
MBaAFMcirUNHG2BrzIU7uhG47WY8FRiCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQt
MDY2ZmZlZmQwY2FiLzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQtMDY2ZmZlZmQwY2Fi
LzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDlMv7nJ
nBjgCitYXxEowmErDN9ynXq0eBZPSC4yBE10cvZvCBDC9kMwkF4b8p1f6Y/oixfd
qm7hY77AAYqXwoiKTwDwV+XkKG6UKAFXZ+fYjUQtDkd1Op5BbnIaK5mUY4x6UIdy
CZfjUhW5tSbNKVm5bDmpYyr1Ey4e0mRrQB6Pb4URLt//gw5WwM3Dnp2SXBdyUFbs
YYxLn2TFoBZIX6kEtb3E9CYIEsen0U6Xuy6AJs0iiypn7Mjfd7PD1BKaREavGqN7
xEpy7rMu2q7FPuKtrg5mTvyi+F+SM9cHQx7JhrBCiGRD6R8+bxfn6v8DWGZGaFSk
DyKBpZi+iDvo9g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:50 2025 by rpki-client