Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: GQLUIHXz/R9vq5KVEoBDpTT1AY+kuAoTnoxgkAHLzf4=
Subject key identifier: CC:D9:19:49:ED:2D:98:7E:69:69:D0:71:DC:B3:AE:2C:6F:27:6E:0D
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 01976FD10D629F887EC017E20887561D1856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0C75
Signing time: Sat 14 Jun 2025 19:01:00 +0000
Manifest this update: Sat 14 Jun 2025 19:01:00 +0000
Manifest next update: Sun 15 Jun 2025 19:01:00 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: IA4mh3jbXlBnH5zmwkrd2Xz8qdVrmFTeiWtWGY+/MLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:0d:62:9f:88:7e:c0:17:e2:08:87:56:1d:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Jun 14 19:01:00 2025 GMT
Not After : Jun 15 19:01:00 2025 GMT
Subject: CN=ccd91949ed2d987e6969d071dcb3ae2c6f276e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:d3:5f:a6:7d:5a:d0:f2:d8:66:05:1d:5d:
0c:8b:7c:16:2b:34:57:7b:e3:cc:44:59:9c:fb:91:
f4:54:c5:b1:7a:82:0c:94:e4:b4:13:31:f7:37:e7:
71:01:4b:cf:89:f2:b4:77:84:2d:01:af:b1:b7:a4:
8e:d5:47:0f:fb:b9:c9:cb:65:f5:26:a7:70:b7:f5:
94:2d:a4:0a:2a:e7:6e:04:5d:3f:05:88:60:54:95:
ef:ff:51:e3:84:4b:86:93:6a:a2:b8:f7:50:20:65:
ee:f7:d4:f2:bd:61:2e:9b:dc:f2:2f:4a:f1:04:17:
d3:30:d3:5b:76:b7:ca:1a:cc:3e:44:2e:a8:b8:1c:
5d:63:ed:5e:0e:3b:61:c8:6a:79:65:69:2d:91:30:
88:d2:0d:30:16:57:be:85:41:1a:78:48:94:85:42:
57:a8:ff:56:c9:8b:55:3a:c5:c8:6c:82:b8:2b:f9:
50:12:e3:23:ef:80:16:77:08:70:5b:7a:6e:2c:e9:
3f:58:14:f5:db:93:be:1a:c2:34:93:c0:67:8d:1a:
cb:fc:81:bb:33:bf:66:42:fb:a0:ae:a2:36:24:f6:
59:d4:c1:49:12:7b:2e:dc:08:58:5f:52:ad:b7:ef:
eb:41:20:1b:e9:04:c5:4c:5f:02:64:f6:63:cc:2e:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:19:49:ED:2D:98:7E:69:69:D0:71:DC:B3:AE:2C:6F:27:6E:0D
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5b:4e:b3:6a:4d:3b:9f:f3:ec:ed:b5:79:e7:da:e6:83:4b:
be:2f:8c:20:e7:5a:42:e8:72:15:09:f9:6c:cd:d0:06:cc:19:
6b:4a:9f:32:91:ab:4d:bf:d9:0d:6e:15:e9:26:8f:c9:09:37:
62:67:47:9b:32:bd:92:5d:0e:07:6a:34:80:24:9f:12:9b:d6:
05:ba:5c:93:5e:98:95:53:a5:b2:87:0b:ac:61:11:b7:ba:ec:
dd:68:a5:32:8b:90:c7:97:19:cd:0d:61:0d:af:7f:cd:62:24:
e0:cb:9d:b7:aa:45:d2:f9:cb:5e:47:7c:9c:88:61:05:04:a1:
4b:a8:7f:59:fb:ba:21:92:e2:6f:a4:2c:ca:77:1f:d5:ab:ff:
fe:fb:e8:fd:e9:b3:70:fb:41:e2:a5:be:fa:aa:c6:64:07:b2:
74:fa:c5:22:b0:4f:1c:4f:5e:c8:2a:ba:a3:cf:6b:2e:15:b4:
c1:2b:a6:7f:af:2f:be:38:f0:89:0d:8e:cc:03:cb:67:62:5d:
fc:6e:4f:c5:66:52:c0:d0:33:19:89:33:40:2b:c7:e0:ad:5d:
ac:49:f7:68:05:2e:3f:fe:89:5c:96:fe:4a:5f:c8:c9:e6:35:
1a:1c:56:8b:92:ca:11:76:d0:54:09:8b:fd:55:ed:9f:35:34:
7e:bc:d7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0Q1in4h+wBfiCIdWHRhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjc5MzllZDcwYzhhZWEzMWJlNDkzZTc4ZTg4ZjQ4NjFm
NTMxMjEwHhcNMjUwNjE0MTkwMTAwWhcNMjUwNjE1MTkwMTAwWjAzMTEwLwYDVQQD
EyhjY2Q5MTk0OWVkMmQ5ODdlNjk2OWQwNzFkY2IzYWUyYzZmMjc2ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTHTX6Z9WtDy2GYFHV0Mi3wWKzRX
e+PMRFmc+5H0VMWxeoIMlOS0EzH3N+dxAUvPifK0d4QtAa+xt6SO1UcP+7nJy2X1
Jqdwt/WULaQKKuduBF0/BYhgVJXv/1HjhEuGk2qiuPdQIGXu99TyvWEum9zyL0rx
BBfTMNNbdrfKGsw+RC6ouBxdY+1eDjthyGp5ZWktkTCI0g0wFle+hUEaeEiUhUJX
qP9WyYtVOsXIbIK4K/lQEuMj74AWdwhwW3puLOk/WBT125O+GsI0k8BnjRrL/IG7
M79mQvugrqI2JPZZ1MFJEnsu3AhYX1Ktt+/rQSAb6QTFTF8CZPZjzC4nuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzZGUntLZh+aWnQcdyzrixvJ24NMB8GA1UdIwQY
MBaAFFy3k57XDIrqMb5JPnjoj0hh9TEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYt
MmVkYWZjNjBmMmRmLzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYtMmVkYWZjNjBmMmRm
LzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1tOs2pN
O5/z7O21eefa5oNLvi+MIOdaQuhyFQn5bM3QBswZa0qfMpGrTb/ZDW4V6SaPyQk3
YmdHmzK9kl0OB2o0gCSfEpvWBbpck16YlVOlsocLrGERt7rs3WilMouQx5cZzQ1h
Da9/zWIk4Mudt6pF0vnLXkd8nIhhBQShS6h/Wfu6IZLib6Qsyncf1av//vvo/emz
cPtB4qW++qrGZAeydPrFIrBPHE9eyCq6o89rLhW0wSumf68vvjjwiQ2OzAPLZ2Jd
/G5PxWZSwNAzGYkzQCvH4K1drEn3aAUuP/6JXJb+Sl/IyeY1GhxWi5LKEXbQVAmL
/VXtnzU0frzXPA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:51 2025 by rpki-client