Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: gtpg1/zqj0dCfFGkoYB8ksWxCw7mqrsGCoxVMVOhSXM=
Subject key identifier: 86:43:1B:13:D6:23:3E:9E:CF:D0:E3:EA:90:C1:8A:C5:E4:BE:08:70
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01976D3E8E681310D4BD59A97A18720F9086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:01:45 +0000
Manifest this update: Sat 14 Jun 2025 07:01:45 +0000
Manifest next update: Sun 15 Jun 2025 07:01:45 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: ugp3Hu/uKHPnoILhFQyR/JXdliMQ3w8xbiA81Jb88g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:8e:68:13:10:d4:bd:59:a9:7a:18:72:0f:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jun 14 07:01:45 2025 GMT
Not After : Jun 15 07:01:45 2025 GMT
Subject: CN=86431b13d6233e9ecfd0e3ea90c18ac5e4be0870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:1f:c3:e4:f0:84:13:55:dd:92:02:1b:56:
dd:e7:fb:8b:25:1c:b8:ab:27:4e:d0:af:f4:b5:67:
89:e3:9f:19:00:6f:d6:fd:7b:a9:3d:1a:de:27:bc:
0b:20:a1:32:b0:7a:ab:e8:fb:c8:e2:b3:4c:8b:b2:
fc:43:a7:8a:77:17:b3:29:05:90:f4:07:2c:86:30:
21:e8:3e:fc:8c:8a:e6:73:13:7d:29:bf:f5:ce:f9:
34:c7:74:48:83:1e:ac:34:ce:5f:51:04:bb:b3:75:
e9:78:10:4a:ce:c2:ac:90:97:ba:76:f1:52:45:f7:
1c:5b:2b:5b:81:8b:6e:9a:f8:a2:63:d9:92:77:e7:
d9:6c:03:b0:e2:db:14:29:03:98:15:06:28:68:a4:
d9:95:84:6b:36:ea:19:32:dd:68:a6:68:08:d6:ad:
51:14:f6:01:a7:1d:1b:8b:47:7c:51:3e:c5:72:81:
ec:9d:95:01:e3:51:01:2e:0f:8e:ac:43:1a:f6:65:
ac:99:e4:41:45:cb:2b:ea:88:aa:a6:da:b0:ea:e9:
86:4f:1b:c3:75:e1:8f:df:22:85:ae:e9:36:42:52:
aa:83:4b:40:f0:10:5c:2c:a6:86:72:53:21:82:d5:
0d:49:f9:ac:ef:11:c6:14:99:13:54:4a:92:65:b9:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:1B:13:D6:23:3E:9E:CF:D0:E3:EA:90:C1:8A:C5:E4:BE:08:70
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:93:b1:e8:d2:53:a0:2b:04:8b:0b:d7:df:98:71:1c:6b:b7:
9d:b2:36:ce:ae:55:dd:da:d0:58:83:0d:2d:85:07:31:47:6f:
53:63:7b:f0:31:d1:d2:72:8d:46:00:1a:49:a1:0c:14:5b:11:
65:6e:17:c9:0e:98:c3:0b:de:64:df:d9:6b:ba:3d:56:c7:36:
7c:d5:a8:d7:ae:20:51:ee:5f:0b:b7:3d:4b:20:8b:67:91:7c:
2e:48:ca:64:2f:7f:a3:81:1c:5e:29:ac:ee:e8:33:a8:fb:76:
7f:6b:5a:30:3a:a3:04:7f:0c:04:32:26:71:13:a9:d1:8b:78:
b8:da:42:b4:ae:82:ae:6c:ae:56:b4:62:b4:c6:ab:6d:93:f9:
15:ab:70:0c:cc:81:60:7f:a2:29:90:74:b7:e1:fd:01:6b:fb:
ff:ce:f2:75:63:e6:4e:80:38:19:81:00:1b:cd:fc:a5:43:d3:
45:e1:36:6b:26:19:85:28:d4:3f:bc:b3:2e:2b:d9:55:d8:03:
d0:fd:a3:ea:ef:94:a8:50:7b:c0:5f:da:2f:47:16:db:27:db:
84:69:47:33:c9:63:1e:a9:ef:28:bb:61:ad:b1:cc:fc:13:fe:
4b:40:d2:d6:94:84:a7:57:13:a7:fe:9c:f7:89:84:7a:12:b0:
11:04:12:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPo5oExDUvVmpehhyD5CGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4
OWQ3ZmIwHhcNMjUwNjE0MDcwMTQ1WhcNMjUwNjE1MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg4NjQzMWIxM2Q2MjMzZTllY2ZkMGUzZWE5MGMxOGFjNWU0YmUwODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndIfw+TwhBNV3ZICG1bd5/uLJRy4
qydO0K/0tWeJ458ZAG/W/XupPRreJ7wLIKEysHqr6PvI4rNMi7L8Q6eKdxezKQWQ
9AcshjAh6D78jIrmcxN9Kb/1zvk0x3RIgx6sNM5fUQS7s3XpeBBKzsKskJe6dvFS
RfccWytbgYtumviiY9mSd+fZbAOw4tsUKQOYFQYoaKTZlYRrNuoZMt1opmgI1q1R
FPYBpx0bi0d8UT7FcoHsnZUB41EBLg+OrEMa9mWsmeRBRcsr6oiqptqw6umGTxvD
deGP3yKFruk2QlKqg0tA8BBcLKaGclMhgtUNSfms7xHGFJkTVEqSZbke+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZDGxPWIz6ez9Dj6pDBisXkvghwMB8GA1UdIwQY
MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt
OWQzZTU5ZGE1YWQxLzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx
LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpOx6NJT
oCsEiwvX35hxHGu3nbI2zq5V3drQWIMNLYUHMUdvU2N78DHR0nKNRgAaSaEMFFsR
ZW4XyQ6YwwveZN/Za7o9Vsc2fNWo164gUe5fC7c9SyCLZ5F8LkjKZC9/o4EcXims
7ugzqPt2f2taMDqjBH8MBDImcROp0Yt4uNpCtK6CrmyuVrRitMarbZP5FatwDMyB
YH+iKZB0t+H9AWv7/87ydWPmToA4GYEAG838pUPTReE2ayYZhSjUP7yzLivZVdgD
0P2j6u+UqFB7wF/aL0cW2yfbhGlHM8ljHqnvKLthrbHM/BP+S0DS1pSEp1cTp/6c
94mEehKwEQQSfw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:00 2025 by rpki-client