Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: Y57jIC8ypaeb+7B72tD1ifcBNwUg+PPrHCxz0VePOW8=
Subject key identifier: 83:37:39:D1:CC:AA:80:65:D6:02:AE:C2:83:9A:83:87:9B:46:5B:A8
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 01974CA02DADC46169B2CCE6E1673DC03B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 1123
Signing time: Sat 07 Jun 2025 23:00:55 +0000
Manifest this update: Sat 07 Jun 2025 23:00:55 +0000
Manifest next update: Sun 08 Jun 2025 23:00:55 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: Yg0gVMVTDDBSvfSaB1ZuQmbdAW0RTGZzHLDgYhY/7Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:2d:ad:c4:61:69:b2:cc:e6:e1:67:3d:c0:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jun 7 23:00:55 2025 GMT
Not After : Jun 8 23:00:55 2025 GMT
Subject: CN=833739d1ccaa8065d602aec2839a83879b465ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:24:35:e8:67:ff:96:fd:87:c5:ec:4a:c5:
41:5b:63:55:12:be:40:a2:ef:e2:d9:2a:b3:8f:c3:
ed:9e:42:b8:b1:00:e8:cd:00:54:73:6d:e9:ce:b3:
10:28:51:14:64:f7:04:da:fa:75:88:a4:4f:d5:14:
cd:34:e3:dc:bb:e1:54:85:db:2f:43:32:f8:35:e4:
1a:c4:6c:0e:a1:99:41:dd:ea:ce:90:0b:bc:d8:b9:
35:df:2b:e9:55:4c:31:b9:90:11:86:29:51:3f:c7:
6d:cc:78:00:6c:c6:f1:bf:63:3c:ca:6f:72:1e:99:
61:83:0d:6a:05:6f:53:52:ee:ed:62:3e:a3:9f:0f:
7c:70:7a:ff:ba:8d:fa:5c:fd:08:b7:63:e7:76:29:
61:4f:fa:11:97:fa:64:d3:54:1f:e8:0b:ef:24:71:
ba:ca:1d:8c:e8:26:30:fb:1c:19:83:97:62:4d:79:
78:3c:96:65:b7:51:ca:16:5f:a2:9b:2d:0e:fc:48:
7b:16:22:21:20:af:d6:e1:c0:26:b3:df:88:05:0f:
de:39:b1:0c:e0:79:3d:a2:40:23:2f:06:ef:82:66:
c3:e0:23:a8:ac:47:1d:cc:4b:9d:cf:0e:17:e1:37:
18:e3:61:19:e0:77:60:40:6a:37:83:0a:ea:52:2f:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:39:D1:CC:AA:80:65:D6:02:AE:C2:83:9A:83:87:9B:46:5B:A8
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5d:01:25:7c:64:a1:4c:71:b0:19:ea:d3:0f:1a:80:a1:2a:
6f:18:2c:84:19:f3:7a:12:14:81:d9:b3:a2:4e:12:cd:c6:57:
3a:03:dd:73:86:47:73:c4:6f:38:67:fe:82:32:45:5f:cd:36:
c0:da:77:82:a1:c0:8f:17:22:84:ba:77:6e:eb:d6:92:03:c4:
d6:2f:e0:62:a8:5f:5b:7e:8d:80:90:e2:d0:4f:69:ab:dd:9b:
95:6a:5f:4e:56:e1:97:36:f2:89:c5:40:e1:8d:5b:4b:6c:e4:
15:72:1b:95:a7:43:0b:ab:7a:8c:f3:ff:8a:40:03:58:78:e3:
69:de:fb:c6:de:cc:19:f9:e4:ab:e4:a9:cf:f4:6b:c2:42:d4:
e3:e2:a9:d4:91:07:bc:75:4f:8f:32:9b:95:c7:d1:74:55:92:
1b:9d:a4:73:c2:ec:60:79:78:ec:00:63:7f:d3:4f:ef:20:d4:
8d:06:b3:89:fe:a8:6f:93:9a:d8:08:85:b4:92:63:81:29:1b:
c8:f3:87:58:c1:51:30:60:c1:59:a9:6a:b0:0b:5d:17:eb:1e:
f0:81:7f:7c:d3:a9:71:2d:70:b2:5a:39:de:bb:0d:3e:bc:d2:
11:84:c6:57:5d:b3:ba:70:47:ca:87:e1:b2:cc:93:6d:8d:39:
5d:3f:25:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoC2txGFpsszm4Wc9wDsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjUwNjA3MjMwMDU1WhcNMjUwNjA4MjMwMDU1WjAzMTEwLwYDVQQD
Eyg4MzM3MzlkMWNjYWE4MDY1ZDYwMmFlYzI4MzlhODM4NzliNDY1YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopUkNehn/5b9h8XsSsVBW2NVEr5A
ou/i2Sqzj8PtnkK4sQDozQBUc23pzrMQKFEUZPcE2vp1iKRP1RTNNOPcu+FUhdsv
QzL4NeQaxGwOoZlB3erOkAu82Lk13yvpVUwxuZARhilRP8dtzHgAbMbxv2M8ym9y
Hplhgw1qBW9TUu7tYj6jnw98cHr/uo36XP0It2PndilhT/oRl/pk01Qf6AvvJHG6
yh2M6CYw+xwZg5diTXl4PJZlt1HKFl+imy0O/Eh7FiIhIK/W4cAms9+IBQ/eObEM
4Hk9okAjLwbvgmbD4COorEcdzEudzw4X4TcY42EZ4HdgQGo3gwrqUi/yqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM3OdHMqoBl1gKuwoOag4ebRluoMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvV0BJXxk
oUxxsBnq0w8agKEqbxgshBnzehIUgdmzok4SzcZXOgPdc4ZHc8RvOGf+gjJFX802
wNp3gqHAjxcihLp3buvWkgPE1i/gYqhfW36NgJDi0E9pq92blWpfTlbhlzbyicVA
4Y1bS2zkFXIbladDC6t6jPP/ikADWHjjad77xt7MGfnkq+Spz/RrwkLU4+Kp1JEH
vHVPjzKblcfRdFWSG52kc8LsYHl47ABjf9NP7yDUjQazif6ob5Oa2AiFtJJjgSkb
yPOHWMFRMGDBWalqsAtdF+se8IF/fNOpcS1wslo53rsNPrzSEYTGV12zunBHyofh
ssyTbY05XT8l7A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:14:04 2025 by rpki-client