Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: WKZfbLYLbI4DYP858p16kIShqXbZSf4qeIFwPzGkwjM=
Subject key identifier: 99:A4:33:36:28:E3:80:77:1E:A4:B6:A4:C1:07:0C:D1:71:7C:FB:E6
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 01977D8C7B74575B7C39DE58BEDC92FD4523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 035E
Signing time: Tue 17 Jun 2025 11:00:48 +0000
Manifest this update: Tue 17 Jun 2025 11:00:48 +0000
Manifest next update: Wed 18 Jun 2025 11:00:48 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: 6elGnC/ViI/lW3/9w9eU3zqxaHwDcBHrtsC4XCyeD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:7b:74:57:5b:7c:39:de:58:be:dc:92:fd:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Jun 17 11:00:48 2025 GMT
Not After : Jun 18 11:00:48 2025 GMT
Subject: CN=99a4333628e380771ea4b6a4c1070cd1717cfbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:0d:d9:33:d7:e0:1d:16:2d:5d:91:9e:9d:
28:07:9b:47:86:37:f4:9a:5c:3d:93:01:e0:ca:16:
57:b7:dc:b7:a3:ba:e7:53:e0:a5:d0:b0:49:20:09:
74:59:2c:e8:2d:67:b6:ee:32:55:cf:95:55:83:2a:
a5:bd:6d:51:09:12:1a:48:a5:4b:74:c2:d9:4a:ff:
06:83:f4:50:d9:77:25:bf:6f:f5:03:ca:96:13:d9:
1e:20:1f:0e:d6:bb:f0:8b:89:53:97:a8:07:9b:1e:
e8:d7:b4:85:f5:dd:d5:d3:cf:a2:68:54:f3:09:21:
3f:9f:9a:98:d7:5e:59:c4:78:8d:7a:c7:b8:d3:22:
06:79:c7:ff:4b:51:98:f6:fe:98:a1:a0:5b:84:c3:
aa:7b:13:df:88:1f:1a:ad:f3:ef:ee:06:09:cd:5f:
d8:4a:76:26:de:42:76:09:90:c2:70:72:60:30:13:
4f:37:b8:f9:e4:55:bd:2e:c1:42:32:56:c1:10:45:
68:11:c1:6d:b5:57:c0:e4:5d:fc:c9:37:d5:23:7c:
4a:4d:9b:ee:d1:75:e1:25:87:b0:b6:8b:3a:72:46:
3f:2f:a9:07:bb:cc:2f:e5:dd:6f:a1:40:c5:8e:a3:
fc:9d:8e:47:d0:ec:e8:9a:16:1a:68:36:fb:48:df:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:33:36:28:E3:80:77:1E:A4:B6:A4:C1:07:0C:D1:71:7C:FB:E6
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8d:3c:ef:c2:82:d2:3f:eb:56:e9:ef:4e:dd:61:ae:d1:38:
cf:b8:93:16:06:26:05:d3:e6:e6:8b:75:7b:aa:46:c3:fc:c5:
8a:56:65:a1:62:91:1a:dc:87:50:ce:24:95:15:7a:62:0e:6e:
03:47:f1:08:39:1c:10:47:0f:98:56:93:c7:b0:65:14:9f:90:
5c:9c:5e:c7:f9:08:5d:3a:8f:cc:c3:dc:d4:db:70:b7:ca:a8:
4c:ea:91:74:36:b0:a9:f5:93:71:c2:92:e7:2e:fe:bb:9d:1a:
30:5e:de:c8:cd:f6:2c:d3:9a:4b:c8:d8:94:76:01:ff:a8:8b:
0d:63:9a:77:fa:92:70:7e:f7:6b:cb:02:b3:da:7f:c7:8a:ba:
67:7f:9d:a7:f8:25:d2:39:93:cd:fd:9a:e7:66:80:fe:05:56:
cf:4f:27:5a:e1:b9:29:aa:d9:72:fc:56:b7:0d:fa:79:28:04:
0a:05:d8:7a:ba:73:f5:a9:93:13:d0:c2:53:ad:f5:c2:07:bf:
86:4e:b7:23:7e:87:5b:ba:26:80:0f:26:d9:b2:6a:0b:d4:f6:
37:68:8c:41:1f:7b:90:20:0c:58:c4:a9:d0:44:04:69:68:f4:
56:c2:6c:36:2d:c6:14:c7:51:74:9c:31:48:33:1b:88:52:21:
d1:a8:22:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9jHt0V1t8Od5YvtyS/UUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDFhNjQ4M2RjNmY2NmI3OGE3YTQxMTJkNTg3M2RjNTY2
NDdhMTkwHhcNMjUwNjE3MTEwMDQ4WhcNMjUwNjE4MTEwMDQ4WjAzMTEwLwYDVQQD
Eyg5OWE0MzMzNjI4ZTM4MDc3MWVhNGI2YTRjMTA3MGNkMTcxN2NmYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtkN2TPX4B0WLV2Rnp0oB5tHhjf0
mlw9kwHgyhZXt9y3o7rnU+Cl0LBJIAl0WSzoLWe27jJVz5VVgyqlvW1RCRIaSKVL
dMLZSv8Gg/RQ2Xclv2/1A8qWE9keIB8O1rvwi4lTl6gHmx7o17SF9d3V08+iaFTz
CSE/n5qY115ZxHiNese40yIGecf/S1GY9v6YoaBbhMOqexPfiB8arfPv7gYJzV/Y
SnYm3kJ2CZDCcHJgMBNPN7j55FW9LsFCMlbBEEVoEcFttVfA5F38yTfVI3xKTZvu
0XXhJYewtos6ckY/L6kHu8wv5d1voUDFjqP8nY5H0OzomhYaaDb7SN/1NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmkMzYo44B3HqS2pMEHDNFxfPvmMB8GA1UdIwQY
MBaAFMQBpkg9xvZreKekES1Yc9xWZHoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUt
MTlkMzNlMDU1ODU3LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUtMTlkMzNlMDU1ODU3
LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKo0878KC
0j/rVunvTt1hrtE4z7iTFgYmBdPm5ot1e6pGw/zFilZloWKRGtyHUM4klRV6Yg5u
A0fxCDkcEEcPmFaTx7BlFJ+QXJxex/kIXTqPzMPc1Ntwt8qoTOqRdDawqfWTccKS
5y7+u50aMF7eyM32LNOaS8jYlHYB/6iLDWOad/qScH73a8sCs9p/x4q6Z3+dp/gl
0jmTzf2a52aA/gVWz08nWuG5KarZcvxWtw36eSgECgXYerpz9amTE9DCU631wge/
hk63I36HW7omgA8m2bJqC9T2N2iMQR97kCAMWMSp0EQEaWj0VsJsNi3GFMdRdJwx
SDMbiFIh0agieA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:35:32 2025 by rpki-client