Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: EmakjxOHmMJx8a3UaaogSgmCZ4oDUE+viELzIehXoHE=
Subject key identifier: AF:50:DA:A4:E7:62:87:D7:19:AD:16:E3:A1:1A:AD:E8:42:C7:5B:A6
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 01976DAB2629E5F8D3144F63AEADEBF2A110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 05AB
Signing time: Sat 14 Jun 2025 09:00:22 +0000
Manifest this update: Sat 14 Jun 2025 09:00:22 +0000
Manifest next update: Sun 15 Jun 2025 09:00:22 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: hVkY88RlsCzfLtKFh0+15K/Y0xURmVVMWVbsY7y5pow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:26:29:e5:f8:d3:14:4f:63:ae:ad:eb:f2:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jun 14 09:00:22 2025 GMT
Not After : Jun 15 09:00:22 2025 GMT
Subject: CN=af50daa4e76287d719ad16e3a11aade842c75ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:91:6c:0f:20:43:f4:74:25:a8:e1:31:c2:35:
1e:c0:93:e9:54:72:d5:72:d3:0a:e1:bb:88:d5:14:
bd:52:72:14:77:c0:c7:31:10:b4:80:19:d8:69:a0:
b8:ae:48:c7:fa:44:7e:57:60:ac:0a:4f:d0:ae:dc:
c1:70:a0:d3:35:a6:2c:54:9f:7c:82:10:c3:22:fd:
fa:27:95:0d:b0:d9:5e:ee:4b:7c:2f:68:a7:e8:c2:
4f:ba:28:4f:fa:9c:4f:95:e3:5f:1c:b8:88:5b:17:
26:e4:c6:f8:e1:00:a0:80:67:0d:d6:24:94:21:42:
5c:fc:ae:92:89:e6:76:03:30:0e:e8:69:30:e0:44:
2e:a4:88:14:3d:11:53:ef:55:8c:55:68:6a:85:c7:
39:08:a1:94:33:9c:8b:9a:f2:b3:3c:d1:38:f9:b0:
57:00:9e:d2:53:1b:6e:72:ff:a1:37:b9:3b:15:a2:
f2:40:2b:59:72:a4:ad:2a:85:14:06:49:b7:09:0b:
0f:1a:0e:8a:bc:85:7e:02:b7:c0:d2:13:43:c6:58:
82:f2:1c:78:3b:b0:28:08:1a:ea:57:b6:e3:78:b1:
c1:8f:b3:35:0f:f1:93:c4:7f:1b:7d:69:01:51:67:
c1:bd:7c:ff:d1:68:87:03:58:91:f0:db:5b:d7:1b:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:50:DA:A4:E7:62:87:D7:19:AD:16:E3:A1:1A:AD:E8:42:C7:5B:A6
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:58:54:2e:4f:ad:47:c4:33:fa:4c:a2:fc:c8:dd:b6:e8:
f9:01:78:20:bd:cb:93:bf:85:d0:fd:ba:3d:a7:c6:96:8c:76:
82:97:63:1b:05:0d:86:95:4f:ef:d1:94:d9:3a:e0:8b:2b:6d:
6d:10:4e:21:90:48:1a:09:b4:0c:df:bd:52:79:bf:58:dd:3b:
94:36:84:c8:07:e5:5f:0e:41:ba:24:78:a8:cc:30:0d:6b:c7:
b9:bf:48:ed:9f:be:43:88:32:26:ce:81:db:d3:c5:6f:e5:7d:
b8:7c:58:e9:54:45:b4:0a:1a:94:6f:7a:69:eb:4f:40:a0:28:
b2:63:85:ef:a4:2c:ec:0c:69:dc:6a:86:99:9e:02:8c:70:76:
88:9b:09:b3:62:74:84:dc:5c:c9:20:59:01:a5:0d:01:dc:db:
0c:6f:0a:1a:80:c7:5f:f0:51:39:84:7a:82:0f:3e:4a:a9:1d:
ce:d7:2e:f6:85:0c:d0:c6:b4:3b:1d:61:dc:37:0c:43:ab:a6:
19:41:49:92:5f:91:3b:41:26:84:df:1f:b6:6f:c0:fc:11:9d:
a9:33:af:5a:d4:81:e1:97:56:26:8e:e2:56:80:e7:0a:f2:99:
e2:69:0d:97:00:d1:99:47:ea:a9:f8:a9:ba:e2:05:b0:9f:54:
c8:c3:6a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqyYp5fjTFE9jrq3r8qEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1
MTRmNmIwHhcNMjUwNjE0MDkwMDIyWhcNMjUwNjE1MDkwMDIyWjAzMTEwLwYDVQQD
EyhhZjUwZGFhNGU3NjI4N2Q3MTlhZDE2ZTNhMTFhYWRlODQyYzc1YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95FsDyBD9HQlqOExwjUewJPpVHLV
ctMK4buI1RS9UnIUd8DHMRC0gBnYaaC4rkjH+kR+V2CsCk/QrtzBcKDTNaYsVJ98
ghDDIv36J5UNsNle7kt8L2in6MJPuihP+pxPleNfHLiIWxcm5Mb44QCggGcN1iSU
IUJc/K6SieZ2AzAO6Gkw4EQupIgUPRFT71WMVWhqhcc5CKGUM5yLmvKzPNE4+bBX
AJ7SUxtucv+hN7k7FaLyQCtZcqStKoUUBkm3CQsPGg6KvIV+ArfA0hNDxliC8hx4
O7AoCBrqV7bjeLHBj7M1D/GTxH8bfWkBUWfBvXz/0WiHA1iR8Ntb1xvHZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9Q2qTnYofXGa0W46EarehCx1umMB8GA1UdIwQY
MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt
MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw
LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGhYVC5P
rUfEM/pMovzI3bbo+QF4IL3Lk7+F0P26PafGlox2gpdjGwUNhpVP79GU2Trgiytt
bRBOIZBIGgm0DN+9Unm/WN07lDaEyAflXw5BuiR4qMwwDWvHub9I7Z++Q4gyJs6B
29PFb+V9uHxY6VRFtAoalG96aetPQKAosmOF76Qs7Axp3GqGmZ4CjHB2iJsJs2J0
hNxcySBZAaUNAdzbDG8KGoDHX/BROYR6gg8+Sqkdztcu9oUM0Ma0Ox1h3DcMQ6um
GUFJkl+RO0EmhN8ftm/A/BGdqTOvWtSB4ZdWJo7iVoDnCvKZ4mkNlwDRmUfqqfip
uuIFsJ9UyMNqQg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:24 2025 by rpki-client