Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: OuHTOZxoNaNt0aIPsuH+8AYY1Bovbd4+Jmjhzu563xw=
Subject key identifier: 5F:B1:36:63:E9:76:F2:BB:E8:30:65:A2:2B:EA:59:61:45:83:53:04
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 01977AC205A0B50C3A28635A1EA57CE58E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 0554
Signing time: Mon 16 Jun 2025 22:00:24 +0000
Manifest this update: Mon 16 Jun 2025 22:00:24 +0000
Manifest next update: Tue 17 Jun 2025 22:00:24 +0000
Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: jchyWrygwEo7Gsz0M8nC6f0t/XmX5JDjJ0qDY7+9c5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:05:a0:b5:0c:3a:28:63:5a:1e:a5:7c:e5:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Jun 16 22:00:24 2025 GMT
Not After : Jun 17 22:00:24 2025 GMT
Subject: CN=5fb13663e976f2bbe83065a22bea596145835304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:b5:93:35:b6:d2:96:a3:94:98:98:45:7d:
13:52:bd:be:64:08:2b:49:84:f8:2b:6e:35:3c:85:
f8:56:d4:0e:4c:c2:a5:7d:9b:47:c9:9f:db:ed:57:
59:f3:f5:47:05:37:87:02:45:b4:ae:7a:be:02:0e:
31:0c:43:b0:76:9b:fc:4a:f8:97:0e:63:e8:d0:93:
f4:02:26:32:2a:db:dd:4e:f5:49:c5:c7:8f:15:5b:
82:d7:5e:e1:ab:a8:63:4f:8d:64:5e:58:fe:52:cf:
03:fa:b3:d6:5c:f4:a3:93:6b:53:64:c2:09:7a:5b:
0f:a3:4d:e7:72:02:f8:a0:9b:27:bb:16:c3:d4:d5:
3c:91:03:f4:79:12:88:21:ba:b4:8a:c9:96:1a:22:
3c:a4:34:5a:8a:12:81:b3:be:48:6f:a2:5c:48:dc:
82:08:32:f9:99:51:c1:25:c0:43:ef:6f:db:46:95:
a9:60:ae:c6:67:67:7a:d5:89:3d:9b:17:5d:5f:91:
24:d9:b8:04:ce:4d:b5:5e:74:09:e0:ec:c1:0a:7f:
f5:bd:7e:78:71:0c:f4:ec:bc:7f:35:2f:70:41:63:
fb:de:4e:33:16:98:e0:8a:ce:c2:9e:9b:e4:cc:58:
fd:70:a2:e4:d1:b1:d8:2f:a9:c6:7b:61:61:66:31:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:36:63:E9:76:F2:BB:E8:30:65:A2:2B:EA:59:61:45:83:53:04
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e2:ea:48:df:7f:06:2e:98:95:04:e6:35:17:7c:cc:5a:f4:
69:14:9a:6d:28:24:28:ee:2f:8b:0c:2c:d9:40:5a:97:76:39:
ab:39:52:4c:ad:7f:8f:b1:f7:6a:17:e0:2b:25:7f:00:db:8d:
28:67:76:62:60:f7:d9:a4:92:6d:42:e9:cc:e7:83:04:7c:b4:
48:13:e2:36:6a:46:f0:6e:15:97:1b:10:8b:9b:70:d3:2d:bf:
c6:e0:d8:41:3c:ae:b1:3f:ef:c1:92:9b:72:97:b9:27:1c:07:
22:ce:18:4a:1a:5d:a0:80:d5:50:31:e3:c0:50:28:73:55:b4:
36:0a:d0:0a:d6:42:f0:8a:f8:3a:44:0c:7c:c7:42:8c:2a:fa:
79:67:28:be:6e:72:3f:3e:23:ca:59:56:a4:2a:f8:29:cb:ab:
67:c1:06:d6:53:36:25:5e:07:17:d5:9a:ed:12:d3:be:1d:52:
2b:30:55:f7:5a:46:4d:0e:43:1a:38:31:f3:11:07:a5:17:19:
2d:f0:7b:ee:fe:4d:17:e7:98:ec:35:a7:44:2c:bc:7e:bf:78:
ee:30:56:9e:d2:ad:ce:83:e1:0f:84:f9:70:c2:3f:c3:a5:2b:
ba:d0:76:60:c4:b1:31:8d:3e:1c:28:12:e2:ab:24:f5:de:aa:
b4:12:52:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wgWgtQw6KGNaHqV85Y5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNGYxYTMyYTM3ZTA4MzkwMGFiYTU2MTcwOGU1MmFiMjM0
ZTNhMzgwHhcNMjUwNjE2MjIwMDI0WhcNMjUwNjE3MjIwMDI0WjAzMTEwLwYDVQQD
Eyg1ZmIxMzY2M2U5NzZmMmJiZTgzMDY1YTIyYmVhNTk2MTQ1ODM1MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHS1kzW20pajlJiYRX0TUr2+ZAgr
SYT4K241PIX4VtQOTMKlfZtHyZ/b7VdZ8/VHBTeHAkW0rnq+Ag4xDEOwdpv8SviX
DmPo0JP0AiYyKtvdTvVJxcePFVuC117hq6hjT41kXlj+Us8D+rPWXPSjk2tTZMIJ
elsPo03ncgL4oJsnuxbD1NU8kQP0eRKIIbq0ismWGiI8pDRaihKBs75Ib6JcSNyC
CDL5mVHBJcBD72/bRpWpYK7GZ2d61Yk9mxddX5Ek2bgEzk21XnQJ4OzBCn/1vX54
cQz07Lx/NS9wQWP73k4zFpjgis7CnpvkzFj9cKLk0bHYL6nGe2FhZjFM8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+xNmPpdvK76DBloivqWWFFg1MEMB8GA1UdIwQY
MBaAFF5PGjKjfgg5AKulYXCOUqsjTjo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQt
NGMyYWNiNzgzMDllLzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQtNGMyYWNiNzgzMDll
LzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+LqSN9/
Bi6YlQTmNRd8zFr0aRSabSgkKO4viwws2UBal3Y5qzlSTK1/j7H3ahfgKyV/ANuN
KGd2YmD32aSSbULpzOeDBHy0SBPiNmpG8G4VlxsQi5tw0y2/xuDYQTyusT/vwZKb
cpe5JxwHIs4YShpdoIDVUDHjwFAoc1W0NgrQCtZC8Ir4OkQMfMdCjCr6eWcovm5y
Pz4jyllWpCr4KcurZ8EG1lM2JV4HF9Wa7RLTvh1SKzBV91pGTQ5DGjgx8xEHpRcZ
LfB77v5NF+eY7DWnRCy8fr947jBWntKtzoPhD4T5cMI/w6UrutB2YMSxMY0+HCgS
4qsk9d6qtBJS4Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:00 2025 by rpki-client