Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: su9aBQhBLxeRPz0ohXe2hGtvOqx3agWY6u2Hj1nDkPA=
Subject key identifier: E8:8C:10:F8:F0:BC:C1:3B:30:F0:26:03:EE:8D:46:C5:18:C9:AF:A8
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019741AE46B9B65A1D3375D94FD0A0658133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 0FDC
Signing time: Thu 05 Jun 2025 20:00:29 +0000
Manifest this update: Thu 05 Jun 2025 20:00:29 +0000
Manifest next update: Fri 06 Jun 2025 20:00:29 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 3fat33txHJZfFDevrJda2LOhygYTv5uqC0ORf4LcxBI=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:ae:46:b9:b6:5a:1d:33:75:d9:4f:d0:a0:65:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jun 5 20:00:29 2025 GMT
Not After : Jun 6 20:00:29 2025 GMT
Subject: CN=e88c10f8f0bcc13b30f02603ee8d46c518c9afa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:36:95:10:4d:f6:d2:c1:29:79:ed:d2:08:
e0:1f:28:39:ba:b1:3f:f3:51:76:45:37:d4:d4:c8:
41:75:77:9a:c8:ec:0c:ff:70:f6:eb:62:a3:b3:cc:
88:cb:df:25:0e:70:42:db:23:25:46:5f:1b:dc:ee:
61:4d:7e:26:a0:ce:71:67:58:1a:5c:49:63:40:2e:
d6:b7:78:06:15:2e:78:f1:90:f1:27:b2:e9:66:a5:
10:66:31:d6:d1:9a:b5:b7:99:0f:a4:c1:6a:32:4b:
2a:92:d4:46:e8:41:e5:d4:fa:40:06:92:5a:01:54:
37:1e:cd:1e:1e:b1:91:92:91:43:d0:95:45:4d:a9:
9f:44:84:1b:80:94:5d:85:fa:94:b4:84:09:aa:25:
de:5f:b7:1a:37:f3:3a:ea:15:c5:ad:a7:24:df:d8:
14:5a:d5:d8:33:6d:de:2d:ab:9e:ee:62:90:f3:8f:
4f:22:38:fc:d3:bd:75:53:a5:be:d0:6c:63:39:ea:
33:03:b6:0e:b1:cd:94:e2:46:11:a7:79:3b:10:23:
00:d8:ac:e0:71:6a:db:3b:99:6c:88:c9:4a:7e:8a:
da:e9:69:3f:81:2c:70:63:c3:35:9b:d2:e9:ad:21:
4e:2d:7a:79:57:d9:09:29:b4:3d:d1:a7:de:a8:6c:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8C:10:F8:F0:BC:C1:3B:30:F0:26:03:EE:8D:46:C5:18:C9:AF:A8
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a8:06:36:36:5f:e8:d3:cd:81:ed:45:6b:a3:df:7f:35:f3:
97:6e:19:b2:50:b1:3d:6b:46:42:a9:6e:55:95:95:f7:9d:a0:
7f:f5:26:d2:de:40:9f:ef:eb:84:a1:41:d4:4c:4b:9e:d0:3f:
9a:99:15:3d:6b:7d:29:0f:68:90:1e:b9:0f:c5:5a:a4:c0:fb:
a8:77:89:49:15:1c:7b:06:6b:91:00:c7:58:e1:c3:d7:51:55:
ee:e5:7d:6c:23:8f:ac:b1:05:f1:ba:9d:d9:c5:ee:5d:52:58:
1f:c7:eb:f5:a5:a2:27:1c:53:20:4b:a1:02:fa:d6:ec:f7:14:
72:d4:ac:f0:8f:3a:e4:80:9a:88:e9:01:27:29:72:08:d9:a7:
53:6c:70:7f:7a:54:f7:52:25:79:7c:68:ae:7a:52:ea:8c:19:
48:af:24:40:7d:2a:24:98:a6:73:96:19:2a:03:f5:2e:8d:a5:
d5:d8:1e:54:64:01:e8:42:29:39:3c:77:1d:7b:7c:44:f0:f9:
49:d5:0b:ac:dc:94:45:73:ac:2e:cc:5c:d2:3d:ab:14:1a:e7:
82:cd:88:08:b4:14:9d:f1:da:03:ea:e8:f9:15:32:10:f0:65:
53:fb:10:02:a1:7d:77:5a:ba:b3:32:ec:2b:2c:dd:08:b9:dc:
db:14:7e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdBrka5tlodM3XZT9CgZYEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1
YTU4MWEwHhcNMjUwNjA1MjAwMDI5WhcNMjUwNjA2MjAwMDI5WjAzMTEwLwYDVQQD
EyhlODhjMTBmOGYwYmNjMTNiMzBmMDI2MDNlZThkNDZjNTE4YzlhZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNk2lRBN9tLBKXnt0gjgHyg5urE/
81F2RTfU1MhBdXeayOwM/3D262Kjs8yIy98lDnBC2yMlRl8b3O5hTX4moM5xZ1ga
XEljQC7Wt3gGFS548ZDxJ7LpZqUQZjHW0Zq1t5kPpMFqMksqktRG6EHl1PpABpJa
AVQ3Hs0eHrGRkpFD0JVFTamfRIQbgJRdhfqUtIQJqiXeX7caN/M66hXFrack39gU
WtXYM23eLaue7mKQ849PIjj80711U6W+0GxjOeozA7YOsc2U4kYRp3k7ECMA2Kzg
cWrbO5lsiMlKfora6Wk/gSxwY8M1m9LprSFOLXp5V9kJKbQ90afeqGx95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiMEPjwvME7MPAmA+6NRsUYya+oMB8GA1UdIwQY
MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt
NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz
LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqgGNjZf
6NPNge1Fa6PffzXzl24ZslCxPWtGQqluVZWV952gf/Um0t5An+/rhKFB1ExLntA/
mpkVPWt9KQ9okB65D8VapMD7qHeJSRUcewZrkQDHWOHD11FV7uV9bCOPrLEF8bqd
2cXuXVJYH8fr9aWiJxxTIEuhAvrW7PcUctSs8I865ICaiOkBJylyCNmnU2xwf3pU
91IleXxornpS6owZSK8kQH0qJJimc5YZKgP1Lo2l1dgeVGQB6EIpOTx3HXt8RPD5
SdULrNyURXOsLsxc0j2rFBrngs2ICLQUnfHaA+ro+RUyEPBlU/sQAqF9d1q6szLs
KyzdCLnc2xR+4w==
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:56:49 2025 by rpki-client