Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: U4o6Zfelx42NyiA6gzIJwQG8QLE9nVKayF1NO6eOKEM=
Subject key identifier: A5:52:FF:79:0B:79:45:71:67:F3:B9:A9:2F:FC:00:4E:E1:B0:9F:15
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019749310C76E162B18A13BF29A2FA71BCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 07:00:40 +0000
Manifest this update: Sat 07 Jun 2025 07:00:40 +0000
Manifest next update: Sun 08 Jun 2025 07:00:40 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: T3Bvo5tmI2tEi2FAjK/USjDurvnqnXF7/EIiMliKikk=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:0c:76:e1:62:b1:8a:13:bf:29:a2:fa:71:bc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Jun 7 07:00:40 2025 GMT
Not After : Jun 8 07:00:40 2025 GMT
Subject: CN=a552ff790b79457167f3b9a92ffc004ee1b09f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:f1:86:1b:a4:99:be:27:f9:8e:ee:3b:f4:
63:56:e5:c7:b9:a6:b2:52:01:6c:67:e7:36:64:25:
5b:09:f9:d4:36:11:ec:84:4b:6b:c3:90:a8:a2:b6:
f4:fd:0a:2f:94:eb:02:b3:08:78:ba:67:58:11:c0:
b7:45:d0:39:6d:e9:77:d4:07:30:e9:7b:10:1d:74:
3c:06:f0:65:5a:cc:f1:6c:2a:e7:da:ff:8b:83:5e:
e1:ee:4f:3b:fa:35:d8:3e:d1:d0:25:c3:31:c8:7f:
6d:56:6a:14:8f:a2:02:d2:63:dc:98:15:0d:3a:11:
a8:33:58:2e:f0:c6:02:43:ab:9b:b6:5b:86:02:4f:
03:3e:4c:f7:0c:85:67:41:c8:9d:8e:80:98:e5:ce:
f0:f5:cf:ca:69:08:5f:78:5f:5a:7b:11:09:1b:94:
aa:2c:81:eb:d8:76:35:05:b6:da:fe:e4:c8:da:df:
ce:53:51:15:59:48:94:36:62:1b:01:4c:07:63:95:
8f:54:aa:cd:d3:b4:5a:99:50:89:02:c9:d0:9e:18:
40:20:07:91:1c:de:ca:7f:7f:27:f1:f4:78:ba:bd:
52:79:19:a3:f4:33:53:4b:f8:52:72:e5:aa:b6:f1:
f5:d6:fa:23:9a:36:3a:f6:ee:60:b1:c6:a6:53:f0:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:52:FF:79:0B:79:45:71:67:F3:B9:A9:2F:FC:00:4E:E1:B0:9F:15
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:13:52:c6:87:1f:fe:93:9d:59:be:e7:80:4e:12:59:43:00:
1c:be:9c:b3:05:ce:f8:4b:4f:6c:07:ef:84:c8:86:57:77:21:
ef:4f:c9:68:b8:95:fa:43:8f:3b:de:95:d1:11:6f:39:33:51:
7c:fe:89:fd:1f:26:f6:3a:98:9b:4f:36:0e:d8:2c:0b:b2:bb:
52:a1:72:4a:1f:ef:c2:ac:85:ec:ca:2f:17:3d:8d:a7:e6:71:
ac:44:8d:59:82:67:ba:6a:d6:6b:12:41:8e:62:52:aa:4d:92:
b6:ea:40:36:92:52:92:c9:f8:f5:3f:eb:d3:38:31:07:1d:19:
7c:1b:b5:cc:a8:2f:76:dd:2c:52:58:e1:65:f7:a1:25:a7:b7:
6b:f2:ff:01:36:29:29:ba:7a:bc:9a:75:55:60:9b:c2:92:8b:
79:68:c0:3c:09:7d:5b:2a:e7:b8:30:58:e0:17:85:35:f0:00:
b2:01:26:7d:f3:7e:70:2b:b3:04:76:03:fa:7c:75:04:91:ab:
83:3e:8b:b3:02:b6:37:02:e8:18:58:f7:fd:9b:9f:71:f4:ec:
41:34:98:34:75:3c:cf:19:27:33:82:de:39:04:bb:78:f0:90:
93:9c:75:39:93:bb:2f:ca:6d:17:08:90:98:91:e8:33:dd:45:
c1:28:06:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQx24WKxihO/KaL6cbzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi
MGQ3NmMwHhcNMjUwNjA3MDcwMDQwWhcNMjUwNjA4MDcwMDQwWjAzMTEwLwYDVQQD
EyhhNTUyZmY3OTBiNzk0NTcxNjdmM2I5YTkyZmZjMDA0ZWUxYjA5ZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVLxhhukmb4n+Y7uO/RjVuXHuaay
UgFsZ+c2ZCVbCfnUNhHshEtrw5Coorb0/QovlOsCswh4umdYEcC3RdA5bel31Acw
6XsQHXQ8BvBlWszxbCrn2v+Lg17h7k87+jXYPtHQJcMxyH9tVmoUj6IC0mPcmBUN
OhGoM1gu8MYCQ6ubtluGAk8DPkz3DIVnQcidjoCY5c7w9c/KaQhfeF9aexEJG5Sq
LIHr2HY1Bbba/uTI2t/OU1EVWUiUNmIbAUwHY5WPVKrN07RamVCJAsnQnhhAIAeR
HN7Kf38n8fR4ur1SeRmj9DNTS/hScuWqtvH11vojmjY69u5gscamU/DKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVS/3kLeUVxZ/O5qS/8AE7hsJ8VMB8GA1UdIwQY
MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt
MWUxZGU5MWE5ODdjLzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj
LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxNSxocf
/pOdWb7ngE4SWUMAHL6cswXO+EtPbAfvhMiGV3ch70/JaLiV+kOPO96V0RFvOTNR
fP6J/R8m9jqYm082DtgsC7K7UqFySh/vwqyF7MovFz2Np+ZxrESNWYJnumrWaxJB
jmJSqk2StupANpJSksn49T/r0zgxBx0ZfBu1zKgvdt0sUljhZfehJae3a/L/ATYp
Kbp6vJp1VWCbwpKLeWjAPAl9WyrnuDBY4BeFNfAAsgEmffN+cCuzBHYD+nx1BJGr
gz6LswK2NwLoGFj3/ZufcfTsQTSYNHU8zxknM4LeOQS7ePCQk5x1OZO7L8ptFwiQ
mJHoM91FwSgG7A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:26 2025 by rpki-client