Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: brMhMj2ywyV5MJxi7dzld0s5zaheCCiDXjV/FpfMhHo=
Subject key identifier: 3C:E0:AD:86:6F:93:03:95:75:08:3E:FA:DD:EF:85:3B:93:04:6A:62
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 01976BF4910411FC55F94FD8E0A6826C768D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 09B9
Signing time: Sat 14 Jun 2025 01:01:19 +0000
Manifest this update: Sat 14 Jun 2025 01:01:19 +0000
Manifest next update: Sun 15 Jun 2025 01:01:19 +0000
Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=)
2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: mFIPmreYTc/khNcdk7kmzuT2oKtmT/UC6KheZdPGnI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:91:04:11:fc:55:f9:4f:d8:e0:a6:82:6c:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Jun 14 01:01:19 2025 GMT
Not After : Jun 15 01:01:19 2025 GMT
Subject: CN=3ce0ad866f93039575083efaddef853b93046a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:11:b5:54:32:4c:41:2c:b8:d4:1a:95:35:
d7:89:c9:c7:c4:dc:a8:e4:4e:a5:0c:bc:f2:fb:06:
bc:9b:0a:1f:c8:23:ef:94:82:98:09:bb:57:d9:0d:
bf:6b:33:3d:99:72:c5:60:62:84:70:46:82:bb:91:
6c:93:16:58:04:f2:02:58:eb:0f:12:46:d2:68:d9:
dd:ff:4c:36:04:7e:b1:ce:82:73:01:9a:c7:af:6d:
3c:66:f1:3f:45:cf:b2:04:87:a5:41:dc:ff:0f:20:
19:dd:79:d6:29:a6:9a:55:13:a0:23:f4:ec:76:fb:
c6:1b:6c:e0:c5:a3:e4:db:8d:86:e8:22:26:3b:98:
82:7f:93:28:5b:9d:f5:14:c1:65:f6:95:af:e6:fc:
2b:07:34:1e:a6:bb:98:b2:4d:78:f9:ff:36:ad:63:
28:87:6c:9e:b0:67:fc:8f:b5:92:3c:fb:1d:1d:ff:
d4:44:8f:3b:e9:d5:12:06:7e:b4:e5:51:6e:7c:c7:
a1:3e:88:34:9f:47:b9:fe:aa:64:2c:61:58:a5:52:
e6:24:73:0c:a3:5c:db:b8:36:60:c6:e5:b7:df:b2:
12:57:59:34:87:98:02:4e:6e:37:ba:2a:06:a2:c3:
9b:8e:63:1d:d3:06:93:f8:6d:9a:ec:29:51:94:5a:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:AD:86:6F:93:03:95:75:08:3E:FA:DD:EF:85:3B:93:04:6A:62
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:16:42:af:56:05:eb:7e:9a:18:fe:d4:92:7b:6c:87:af:
00:82:70:be:ea:31:7b:9e:e9:0b:9d:8b:68:4f:c1:8e:0c:9e:
71:c3:41:83:9a:1c:d5:c3:c8:9d:2e:d2:03:12:e0:8a:b6:d5:
10:11:5f:6c:b5:a7:95:09:bb:18:ea:44:dd:2a:c1:b4:8b:ee:
ff:8b:46:06:c2:17:61:10:ae:19:2c:89:77:c6:8e:10:f0:14:
71:93:e8:0c:b8:b8:e3:ac:34:fe:f4:f2:96:c0:08:f0:86:a3:
4e:ea:0c:d3:35:99:c0:38:2b:78:cc:85:d4:f3:e4:e7:90:3e:
5c:0b:f9:4c:9f:60:fc:80:77:a3:b0:41:30:84:0e:19:73:92:
da:4b:75:05:9e:5b:06:7a:ce:6f:eb:97:be:86:54:6f:3c:6c:
20:93:14:07:ca:cc:c9:ab:61:af:0b:ee:59:1b:a6:a4:f9:17:
7e:51:4b:ac:45:80:0d:67:32:55:f0:b3:07:aa:d2:a2:0b:ba:
41:e7:80:d8:3f:65:34:4a:75:05:67:e6:ae:cf:ad:da:e8:2b:
d7:2d:6e:d8:7f:3a:bf:ee:9b:54:35:9f:82:9b:90:58:ae:85:
ce:5d:f6:26:2c:8f:99:b7:18:cc:7e:48:87:4d:6b:14:83:3b:
66:0d:be:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9JEEEfxV+U/Y4KaCbHaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGU1ODE1MzdlN2FhNjY3ODNjMzQwMzgyMmExMTgxYTMx
NjhkMDgwHhcNMjUwNjE0MDEwMTE5WhcNMjUwNjE1MDEwMTE5WjAzMTEwLwYDVQQD
EygzY2UwYWQ4NjZmOTMwMzk1NzUwODNlZmFkZGVmODUzYjkzMDQ2YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+IRtVQyTEEsuNQalTXXicnHxNyo
5E6lDLzy+wa8mwofyCPvlIKYCbtX2Q2/azM9mXLFYGKEcEaCu5FskxZYBPICWOsP
EkbSaNnd/0w2BH6xzoJzAZrHr208ZvE/Rc+yBIelQdz/DyAZ3XnWKaaaVROgI/Ts
dvvGG2zgxaPk242G6CImO5iCf5MoW531FMFl9pWv5vwrBzQepruYsk14+f82rWMo
h2yesGf8j7WSPPsdHf/URI876dUSBn605VFufMehPog0n0e5/qpkLGFYpVLmJHMM
o1zbuDZgxuW337ISV1k0h5gCTm43uioGosObjmMd0waT+G2a7ClRlFp9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzgrYZvkwOVdQg++t3vhTuTBGpiMB8GA1UdIwQY
MBaAFF6OWBU356pmeDw0A4IqEYGjFo0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDkt
NzQxOGFjMTEwYzgzLzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDktNzQxOGFjMTEwYzgz
LzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcYWQq9W
Bet+mhj+1JJ7bIevAIJwvuoxe57pC52LaE/BjgyeccNBg5oc1cPInS7SAxLgirbV
EBFfbLWnlQm7GOpE3SrBtIvu/4tGBsIXYRCuGSyJd8aOEPAUcZPoDLi446w0/vTy
lsAI8IajTuoM0zWZwDgreMyF1PPk55A+XAv5TJ9g/IB3o7BBMIQOGXOS2kt1BZ5b
BnrOb+uXvoZUbzxsIJMUB8rMyathrwvuWRumpPkXflFLrEWADWcyVfCzB6rSogu6
QeeA2D9lNEp1BWfmrs+t2ugr1y1u2H86v+6bVDWfgpuQWK6Fzl32JiyPmbcYzH5I
h01rFIM7Zg2+8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:09 2025 by rpki-client