Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: clHsCmummwBAJtp9A8vtBtsbAHa7zAYHPY9K2zG+hdg=
Subject key identifier: 99:83:9A:40:FB:66:78:B3:60:89:9A:67:C9:BC:9C:01:3C:64:BD:C8
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 0197722CB6D14821EBCDB032472C544F560F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 091B
Signing time: Sun 15 Jun 2025 06:00:22 +0000
Manifest this update: Sun 15 Jun 2025 06:00:22 +0000
Manifest next update: Mon 16 Jun 2025 06:00:22 +0000
Files and hashes: 1: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: sCrmQwmBLWUrwZ6mhIz8kOKeSQNKtc6o9K2XayDH/a4=)
2: b9Hu80_829heeLvFjfJdJz5nCTc.roa (hash: j+SJeADqUhFu2qLu6938DWITw4JSWTcM1pVfvfeWeP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:b6:d1:48:21:eb:cd:b0:32:47:2c:54:4f:56:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Jun 15 06:00:22 2025 GMT
Not After : Jun 16 06:00:22 2025 GMT
Subject: CN=99839a40fb6678b360899a67c9bc9c013c64bdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:bd:e8:45:18:3b:e9:08:89:e3:3f:39:d5:
4f:9e:d9:5d:29:e8:5b:fd:3e:8a:8c:2d:85:93:9f:
95:2c:f5:7e:ec:7f:24:f7:30:0d:49:35:a6:5b:47:
e6:01:b7:c4:58:2a:bf:48:6f:3d:d8:b5:12:00:59:
0a:83:34:3b:a0:5c:9c:e2:db:4e:d2:ee:94:0a:31:
f9:2b:62:ec:4e:b0:63:2e:db:ae:a3:89:e0:49:48:
d0:e6:61:76:71:7e:a2:51:1f:a1:dc:9e:09:46:e8:
a0:f0:6b:0f:30:f6:8a:c8:c6:7c:da:7c:66:40:a3:
60:4c:8f:0f:59:f5:9c:e0:75:d8:b6:91:9e:f2:fc:
bb:93:b0:8d:0f:a0:ef:4e:cd:98:0b:dd:e2:de:57:
85:b8:3f:f2:97:44:f7:30:70:8a:fb:69:f8:2e:20:
ff:c6:2b:db:26:96:c1:03:fc:c8:cd:2f:29:b7:5c:
2d:01:0c:d8:04:63:27:21:66:f4:f0:e0:5f:0a:99:
fc:ae:d7:bd:71:dd:4d:16:78:9f:61:1a:fa:ea:b2:
c7:0c:76:5a:02:28:c8:21:84:6d:2e:7a:eb:9e:83:
82:fd:bd:f5:6e:df:60:df:5a:e0:e1:f5:93:ba:bd:
96:0e:1f:53:67:4b:ac:c1:c9:95:fc:54:6f:eb:0a:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:9A:40:FB:66:78:B3:60:89:9A:67:C9:BC:9C:01:3C:64:BD:C8
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:94:fb:db:2f:5a:2f:e3:d2:10:05:9e:2c:f5:f9:01:77:f6:
a4:9c:52:be:02:ec:d2:68:86:7b:33:aa:7e:b0:54:6a:16:11:
04:b1:ee:51:e8:74:be:ad:75:64:12:94:40:d7:7a:e2:ad:ec:
80:53:3e:a1:6d:ad:01:5b:73:f8:d7:9e:37:b7:fd:ce:19:dd:
e8:f0:03:a2:c7:aa:76:f5:a0:cd:62:72:99:c8:ea:34:d0:5c:
0d:7d:8f:b5:11:54:09:5d:b5:4d:9d:d9:b8:e8:92:fc:6e:1c:
2f:01:c1:8a:4d:58:74:5b:d1:aa:fe:a4:60:7a:6d:08:bb:42:
bd:81:68:18:d2:1b:1b:29:bf:ab:09:0b:c5:0c:bf:54:34:d1:
0e:9f:5d:78:77:e1:0e:f5:10:e7:5e:b0:c8:a1:26:4b:06:4b:
7a:81:4d:cf:cc:43:4e:f3:76:c1:02:bf:9c:59:f0:35:66:06:
d3:f3:c2:a2:cf:2c:9c:d9:cd:3b:3b:b3:92:ce:af:e4:a1:de:
5a:ed:ec:98:b0:a4:46:4d:0c:1c:dc:82:b0:5a:5a:7a:62:40:
37:b0:e7:e5:b6:05:df:8b:16:fc:88:14:dc:da:f7:0d:79:53:
c9:16:4e:5c:3f:4b:97:57:82:bc:77:71:c6:c3:0a:db:d6:f6:
44:c1:58:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLLbRSCHrzbAyRyxUT1YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTlmNzVkY2EyY2QzYjM5MzUzZTAzMDBiMzBiYTViNjI5
NzZhMmIwHhcNMjUwNjE1MDYwMDIyWhcNMjUwNjE2MDYwMDIyWjAzMTEwLwYDVQQD
Eyg5OTgzOWE0MGZiNjY3OGIzNjA4OTlhNjdjOWJjOWMwMTNjNjRiZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFi96EUYO+kIieM/OdVPntldKehb
/T6KjC2Fk5+VLPV+7H8k9zANSTWmW0fmAbfEWCq/SG892LUSAFkKgzQ7oFyc4ttO
0u6UCjH5K2LsTrBjLtuuo4ngSUjQ5mF2cX6iUR+h3J4JRuig8GsPMPaKyMZ82nxm
QKNgTI8PWfWc4HXYtpGe8vy7k7CND6DvTs2YC93i3leFuD/yl0T3MHCK+2n4LiD/
xivbJpbBA/zIzS8pt1wtAQzYBGMnIWb08OBfCpn8rte9cd1NFnifYRr66rLHDHZa
AijIIYRtLnrrnoOC/b31bt9g31rg4fWTur2WDh9TZ0uswcmV/FRv6wo8twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmDmkD7ZnizYImaZ8m8nAE8ZL3IMB8GA1UdIwQY
MBaAFFyp913KLNOzk1PgMAswultil2orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDU0MzMtODNkOS00MTJjLTlmYzQt
MWQ1MWM0NjhkNTU2LzEvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMDU0MzMtODNkOS00MTJjLTlmYzQtMWQ1MWM0NjhkNTU2
LzEvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJT72y9a
L+PSEAWeLPX5AXf2pJxSvgLs0miGezOqfrBUahYRBLHuUeh0vq11ZBKUQNd64q3s
gFM+oW2tAVtz+NeeN7f9zhnd6PADoseqdvWgzWJymcjqNNBcDX2PtRFUCV21TZ3Z
uOiS/G4cLwHBik1YdFvRqv6kYHptCLtCvYFoGNIbGym/qwkLxQy/VDTRDp9deHfh
DvUQ516wyKEmSwZLeoFNz8xDTvN2wQK/nFnwNWYG0/PCos8snNnNOzuzks6v5KHe
Wu3smLCkRk0MHNyCsFpaemJAN7Dn5bYF34sW/IgU3Nr3DXlTyRZOXD9Ll1eCvHdx
xsMK29b2RMFYWw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:33 2025 by rpki-client