Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: SozikoQH6Sq8rHbS8rBvMgIBG8e8iFZVGsOusHhRgmU=
Subject key identifier: 17:AD:AB:0B:B7:9D:3A:8D:FA:37:0F:CC:07:B8:A5:0B:86:32:1C:3F
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 0197741BAA12B43F04822943DD9C9E8A2F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0AA2
Signing time: Sun 15 Jun 2025 15:00:59 +0000
Manifest this update: Sun 15 Jun 2025 15:00:59 +0000
Manifest next update: Mon 16 Jun 2025 15:00:59 +0000
Files and hashes: 1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: My7GVZ7URTmguq4noJ2L7tLCkrm7TBgF1+JpVrT65vg=)
2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:aa:12:b4:3f:04:82:29:43:dd:9c:9e:8a:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Jun 15 15:00:59 2025 GMT
Not After : Jun 16 15:00:59 2025 GMT
Subject: CN=17adab0bb79d3a8dfa370fcc07b8a50b86321c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:ec:aa:a1:10:7b:aa:af:a3:7e:83:35:1d:
ff:d8:c7:99:45:7c:71:43:f5:07:f3:81:81:c5:a5:
cb:86:e7:65:51:2a:2a:1e:22:f3:7a:0c:40:42:62:
cc:98:d4:b0:b0:99:55:16:66:2c:27:86:25:6d:a3:
60:56:1a:b2:69:fc:e9:fb:62:da:88:46:38:c0:cd:
3f:e6:b9:0d:e6:43:51:ac:0a:52:5d:6c:69:a3:49:
df:19:85:04:48:e7:82:61:ac:85:13:42:3c:55:d0:
73:7a:e9:a6:dd:63:3a:ee:e9:67:c7:30:e5:24:33:
e2:82:07:22:42:bc:84:09:b9:2c:0f:de:49:ab:07:
a9:62:71:ec:3b:aa:89:76:57:81:7f:63:d3:22:de:
4c:d7:85:1f:8e:52:88:f9:79:e6:2a:55:30:d4:da:
ad:9c:0f:2e:ba:65:21:d7:83:0d:55:b9:5e:4c:7f:
98:5f:c0:f5:2f:17:b7:51:9e:2e:f6:a5:a0:ec:6e:
36:5b:c0:2f:21:34:ea:ff:75:3d:02:80:51:83:32:
74:4c:d6:65:39:79:ef:71:01:da:d1:d8:df:12:61:
77:36:04:da:d9:1f:a3:6a:80:31:75:fc:10:e3:37:
0a:2f:14:30:c7:e1:51:de:a3:50:74:7c:51:8c:d1:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AD:AB:0B:B7:9D:3A:8D:FA:37:0F:CC:07:B8:A5:0B:86:32:1C:3F
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d2:8b:f9:6e:8b:ae:28:d8:c0:ae:c9:e5:9c:e9:60:4c:16:
24:26:6b:2b:e5:5d:db:48:19:92:2f:aa:b6:38:e1:3f:ba:85:
35:97:52:87:10:09:2d:6d:b2:99:33:40:50:b5:a1:dc:48:9c:
0f:95:a1:a8:65:87:93:0b:70:80:26:1a:9b:2f:d5:a0:ce:fd:
4e:d6:f6:63:fb:7a:f1:12:14:b0:c4:91:51:93:4c:c0:a4:43:
95:71:d4:25:b1:4d:76:5f:10:6a:ec:a2:5f:66:7f:95:2c:a5:
16:7f:dc:fe:8a:8e:9c:43:99:37:eb:d4:e9:94:a3:df:c3:d0:
c9:aa:ef:55:e2:66:f9:65:30:4f:ea:50:3a:b2:09:a2:21:e0:
47:b3:c1:12:c0:55:88:5a:ec:41:80:7f:b2:d1:a5:47:d2:fb:
10:df:e3:2d:60:dc:31:ba:b7:31:80:4d:30:f6:f5:6c:fd:76:
eb:fd:e5:c7:84:78:24:1d:eb:1e:83:82:51:2a:2c:b6:34:6e:
e6:aa:e3:74:a5:ab:f9:0e:d0:49:eb:93:47:b8:4c:b8:b4:02:
ec:b0:2c:b8:80:3a:c3:7c:c3:ab:24:32:0b:b0:b5:b8:68:01:
a8:1c:4f:bb:59:88:78:28:9c:f3:db:4c:2e:e4:97:e7:2e:8a:
13:74:39:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0G6oStD8EgilD3Zyeii+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz
YmVjZWYwHhcNMjUwNjE1MTUwMDU5WhcNMjUwNjE2MTUwMDU5WjAzMTEwLwYDVQQD
EygxN2FkYWIwYmI3OWQzYThkZmEzNzBmY2MwN2I4YTUwYjg2MzIxYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m3sqqEQe6qvo36DNR3/2MeZRXxx
Q/UH84GBxaXLhudlUSoqHiLzegxAQmLMmNSwsJlVFmYsJ4YlbaNgVhqyafzp+2La
iEY4wM0/5rkN5kNRrApSXWxpo0nfGYUESOeCYayFE0I8VdBzeumm3WM67ulnxzDl
JDPiggciQryECbksD95JqwepYnHsO6qJdleBf2PTIt5M14UfjlKI+XnmKlUw1Nqt
nA8uumUh14MNVbleTH+YX8D1Lxe3UZ4u9qWg7G42W8AvITTq/3U9AoBRgzJ0TNZl
OXnvcQHa0djfEmF3NgTa2R+jaoAxdfwQ4zcKLxQwx+FR3qNQdHxRjNFfUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBetqwu3nTqN+jcPzAe4pQuGMhw/MB8GA1UdIwQY
MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt
MzBkZjYyNDI5ZGYwLzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw
LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdKL+W6L
rijYwK7J5ZzpYEwWJCZrK+Vd20gZki+qtjjhP7qFNZdShxAJLW2ymTNAULWh3Eic
D5WhqGWHkwtwgCYamy/VoM79Ttb2Y/t68RIUsMSRUZNMwKRDlXHUJbFNdl8Qauyi
X2Z/lSylFn/c/oqOnEOZN+vU6ZSj38PQyarvVeJm+WUwT+pQOrIJoiHgR7PBEsBV
iFrsQYB/stGlR9L7EN/jLWDcMbq3MYBNMPb1bP126/3lx4R4JB3rHoOCUSostjRu
5qrjdKWr+Q7QSeuTR7hMuLQC7LAsuIA6w3zDqyQyC7C1uGgBqBxPu1mIeCic89tM
LuSX5y6KE3Q5jw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:04:18 2025 by rpki-client