
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: L55x+wkxsNIQv83Lkpkc0AYSA4GLbUnM66bnOMns4a4=
Subject key identifier: DF:BC:EB:B5:CB:8B:3A:CD:0A:89:9B:20:5C:B3:21:29:F2:29:C2:05
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 01976CCF9CBF0FBD0AB64D22B9BAEEF25845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 0287
Signing time: Sat 14 Jun 2025 05:00:34 +0000
Manifest this update: Sat 14 Jun 2025 05:00:34 +0000
Manifest next update: Sun 15 Jun 2025 05:00:34 +0000
Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: Xq1VemdT29mvm788t/Azk15w5g7iBt6F5wRMFt5V0Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9c:bf:0f:bd:0a:b6:4d:22:b9:ba:ee:f2:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: Jun 14 05:00:34 2025 GMT
Not After : Jun 15 05:00:34 2025 GMT
Subject: CN=dfbcebb5cb8b3acd0a899b205cb32129f229c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:f6:3f:a3:e9:a8:7a:33:c4:20:eb:0c:d5:
c3:f3:e6:9e:0e:31:2c:3b:c7:ab:ca:4b:11:05:d1:
12:37:4b:5a:ba:a0:1e:42:04:29:57:88:59:a2:d2:
b4:16:ca:06:68:61:f1:27:e1:13:2e:14:b4:2d:0c:
79:bc:38:11:ee:7d:a3:1e:05:9d:6c:de:e2:3b:ea:
27:50:14:44:a8:6e:c3:8a:9a:10:d2:99:c8:46:70:
6d:53:83:8f:15:0b:c1:e7:74:5e:12:b8:2f:7d:a8:
cd:c9:52:e8:77:d7:e2:22:54:29:93:74:09:b1:d4:
83:00:90:50:fb:6b:fd:33:93:a6:0e:72:4d:0b:9f:
6d:c4:f5:fd:33:93:8d:48:55:ab:c9:79:24:5a:d1:
41:8f:62:b1:51:b8:cc:9c:be:96:d5:7d:4b:4f:de:
c6:15:30:c6:27:6e:0b:50:d9:23:d9:23:3a:c3:7e:
5c:91:e7:62:7d:2d:c8:cc:8d:81:2c:da:1d:53:83:
df:50:80:20:f8:82:3a:3d:af:4a:15:78:0e:0b:6b:
0d:3f:69:2e:92:6a:08:db:14:5e:12:81:f0:44:a1:
93:b4:8f:ee:cc:be:3c:9a:e1:e1:cb:84:f3:3b:bc:
cd:8c:0c:fa:af:0e:a2:61:7c:56:82:8a:96:6d:d7:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:EB:B5:CB:8B:3A:CD:0A:89:9B:20:5C:B3:21:29:F2:29:C2:05
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:60:33:eb:11:8e:3f:05:dd:34:db:ec:c8:a7:00:f0:cd:68:
09:8c:74:c9:71:f0:01:6d:fd:f7:60:3f:52:f1:a1:ff:d7:17:
32:97:55:ce:7a:33:72:7d:35:69:6c:0b:41:47:ce:f5:64:92:
2b:e2:0e:b4:35:2c:e1:a9:99:d0:2b:bd:b1:4d:05:f2:f7:70:
b9:98:59:ed:5f:96:09:3e:97:71:09:a3:00:33:70:e7:e2:ff:
35:3a:d4:f4:0e:a0:43:7e:55:42:78:57:8b:66:b6:b6:83:7a:
63:12:0b:ef:1f:16:59:ba:2b:11:48:50:0d:4c:81:0e:57:16:
b1:41:d4:6c:92:29:6e:1b:b1:01:a4:9f:76:cc:86:f2:80:99:
7b:e8:67:ad:c2:50:24:54:80:cb:b9:2c:7b:6e:49:90:9c:9e:
51:13:20:b1:09:2e:f2:be:c5:a1:df:0c:d6:a3:dd:97:72:f2:
18:5b:2f:24:c4:1e:ee:54:72:8c:d4:e5:7b:5f:06:11:c8:b9:
77:6d:56:dc:e0:ba:46:a3:36:7a:2d:dc:50:ae:22:43:00:d0:
ea:6a:73:6d:4f:f6:21:2c:94:0d:a4:a7:3c:32:38:96:41:c9:
79:e4:5f:e6:2d:01:33:5f:d7:4b:76:a2:9d:61:2d:02:c4:c8:
4c:37:95:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz5y/D70Ktk0iubru8lhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzIwZGVjNzE0YmI1NDYzYjE2NGUxNWE1ZjhhMTM5OGEy
NTUwNWQwHhcNMjUwNjE0MDUwMDM0WhcNMjUwNjE1MDUwMDM0WjAzMTEwLwYDVQQD
EyhkZmJjZWJiNWNiOGIzYWNkMGE4OTliMjA1Y2IzMjEyOWYyMjljMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOL2P6PpqHozxCDrDNXD8+aeDjEs
O8eryksRBdESN0tauqAeQgQpV4hZotK0FsoGaGHxJ+ETLhS0LQx5vDgR7n2jHgWd
bN7iO+onUBREqG7DipoQ0pnIRnBtU4OPFQvB53ReErgvfajNyVLod9fiIlQpk3QJ
sdSDAJBQ+2v9M5OmDnJNC59txPX9M5ONSFWryXkkWtFBj2KxUbjMnL6W1X1LT97G
FTDGJ24LUNkj2SM6w35ckedifS3IzI2BLNodU4PfUIAg+II6Pa9KFXgOC2sNP2ku
kmoI2xReEoHwRKGTtI/uzL48muHhy4TzO7zNjAz6rw6iYXxWgoqWbdeQmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+867XLizrNCombIFyzISnyKcIFMB8GA1UdIwQY
MBaAFF/CDexxS7VGOxZOFaX4oTmKJVBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82Nzk3YTUtNTQxMC00YzBkLWI5Yjct
ZDk5YjlmNDhkMGRjLzEvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82Nzk3YTUtNTQxMC00YzBkLWI5YjctZDk5YjlmNDhkMGRj
LzEvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWAz6xGO
PwXdNNvsyKcA8M1oCYx0yXHwAW3992A/UvGh/9cXMpdVznozcn01aWwLQUfO9WSS
K+IOtDUs4amZ0Cu9sU0F8vdwuZhZ7V+WCT6XcQmjADNw5+L/NTrU9A6gQ35VQnhX
i2a2toN6YxIL7x8WWborEUhQDUyBDlcWsUHUbJIpbhuxAaSfdsyG8oCZe+hnrcJQ
JFSAy7kse25JkJyeURMgsQku8r7Fod8M1qPdl3LyGFsvJMQe7lRyjNTle18GEci5
d21W3OC6RqM2ei3cUK4iQwDQ6mpzbU/2ISyUDaSnPDI4lkHJeeRf5i0BM1/XS3ai
nWEtAsTITDeVEA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:26 2025 by rpki-client