Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: ikj8rH7e6l/oMYfA2Zj/Ml7WSzahKCwrAkG4T+5UfqU=
Subject key identifier: 5B:0B:6A:66:D3:45:58:CD:02:59:4B:A7:E6:F8:0D:EB:30:D8:FD:CF
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 01978C91FCA1B615FD04BE110007AC649564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 010F
Signing time: Fri 20 Jun 2025 09:01:06 +0000
Manifest this update: Fri 20 Jun 2025 09:01:06 +0000
Manifest next update: Sat 21 Jun 2025 09:01:06 +0000
Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: BgKFyNizBz/rKz5bcO4u+b4F5pVkHaV62AbWwE4U7Gk=)
2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:fc:a1:b6:15:fd:04:be:11:00:07:ac:64:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Jun 20 09:01:06 2025 GMT
Not After : Jun 21 09:01:06 2025 GMT
Subject: CN=5b0b6a66d34558cd02594ba7e6f80deb30d8fdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:57:cd:fa:15:9e:e9:97:a9:37:a5:5a:00:
f4:e1:db:13:c1:66:2a:ca:af:5d:c2:2f:23:5a:e2:
57:f6:37:0d:41:9a:fa:69:6f:de:38:4d:30:d8:4d:
28:83:bd:cc:4a:2e:5d:80:4a:0f:21:7f:34:05:6b:
df:10:0e:f2:bb:af:8d:3d:5b:78:59:5f:c6:8e:41:
3a:ef:f9:19:2b:77:e9:d0:24:74:52:ca:81:3c:d1:
09:a5:0d:d8:81:b6:3e:91:2c:8a:f4:24:3e:32:ee:
dc:53:5a:38:72:48:4c:94:7d:04:99:79:6f:f5:9e:
07:f3:97:25:1a:ef:87:ae:20:ed:e6:d8:51:60:3e:
86:78:ca:93:20:7a:6a:48:96:86:a3:17:33:b7:3e:
90:4f:67:e0:e2:84:c2:4a:fc:47:f0:97:84:77:37:
85:2d:0c:b2:97:11:1f:1b:2b:b4:e6:25:d4:6a:a0:
3c:99:c1:60:c5:3e:54:f6:25:d5:79:0b:82:0b:ea:
c9:d8:28:5a:87:4f:1e:05:32:88:28:da:40:52:32:
52:e4:69:30:80:56:bd:4b:38:5c:7d:88:d0:ae:87:
c0:16:56:a4:75:62:9d:82:18:97:63:92:bc:c2:90:
c4:58:00:31:b6:37:12:d7:92:c8:29:c9:b9:01:48:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:6A:66:D3:45:58:CD:02:59:4B:A7:E6:F8:0D:EB:30:D8:FD:CF
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:32:af:31:16:8e:07:be:91:b8:ce:5e:5d:4d:7b:55:14:
7b:cf:3b:86:a0:31:01:43:fb:44:56:31:c2:b7:28:26:69:07:
7f:b5:ec:05:06:2a:b5:6f:a1:33:2a:df:5f:ca:06:94:b8:db:
1e:f5:cd:a2:d8:8a:d9:91:ed:19:22:55:cc:30:9a:97:72:30:
da:08:ca:fd:cd:68:84:42:d6:c7:6d:04:7d:8a:4c:6c:69:10:
ff:76:eb:42:da:36:bc:6a:da:f1:e4:67:c3:e6:97:c7:e5:eb:
02:32:4a:2b:4e:e1:e5:d9:e0:08:0c:63:10:7b:23:22:fd:5c:
c3:bb:00:8c:67:61:d8:fe:b8:09:dc:02:e8:ef:a8:f8:8b:97:
c5:5b:55:9d:60:91:4d:81:4a:86:ff:8c:e7:cb:bf:6d:7f:2b:
a9:4d:99:95:b1:65:c2:a8:01:e9:aa:42:3c:29:c7:6d:af:ff:
81:54:c1:bd:2d:ea:32:5f:03:05:e4:5e:9f:ca:74:7d:cf:8f:
f0:99:80:15:22:30:07:a9:e2:50:13:ec:44:00:08:d9:85:1a:
de:95:8a:38:f4:36:75:90:67:81:61:39:37:7c:ce:54:e6:44:
3a:eb:e2:44:04:4a:52:2c:75:3e:b3:c6:a3:3f:a5:14:ed:63:
ce:d0:d8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMkfyhthX9BL4RAAesZJVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWFkODg5OWQ1YmM4NTQ5ZWVkZDNlNTlmMmQwZDYyMTM1
Y2NmMTQwHhcNMjUwNjIwMDkwMTA2WhcNMjUwNjIxMDkwMTA2WjAzMTEwLwYDVQQD
Eyg1YjBiNmE2NmQzNDU1OGNkMDI1OTRiYTdlNmY4MGRlYjMwZDhmZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssdXzfoVnumXqTelWgD04dsTwWYq
yq9dwi8jWuJX9jcNQZr6aW/eOE0w2E0og73MSi5dgEoPIX80BWvfEA7yu6+NPVt4
WV/GjkE67/kZK3fp0CR0UsqBPNEJpQ3YgbY+kSyK9CQ+Mu7cU1o4ckhMlH0EmXlv
9Z4H85clGu+HriDt5thRYD6GeMqTIHpqSJaGoxcztz6QT2fg4oTCSvxH8JeEdzeF
LQyylxEfGyu05iXUaqA8mcFgxT5U9iXVeQuCC+rJ2Chah08eBTKIKNpAUjJS5Gkw
gFa9SzhcfYjQrofAFlakdWKdghiXY5K8wpDEWAAxtjcS15LIKcm5AUjfZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsLambTRVjNAllLp+b4Desw2P3PMB8GA1UdIwQY
MBaAFF2a2ImdW8hUnu3T5Z8tDWITXM8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQt
MDkzMWZkM2U1YmVlLzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQtMDkzMWZkM2U1YmVl
LzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhsyrzEW
jge+kbjOXl1Ne1UUe887hqAxAUP7RFYxwrcoJmkHf7XsBQYqtW+hMyrfX8oGlLjb
HvXNotiK2ZHtGSJVzDCal3Iw2gjK/c1ohELWx20EfYpMbGkQ/3brQto2vGra8eRn
w+aXx+XrAjJKK07h5dngCAxjEHsjIv1cw7sAjGdh2P64CdwC6O+o+IuXxVtVnWCR
TYFKhv+M58u/bX8rqU2ZlbFlwqgB6apCPCnHba//gVTBvS3qMl8DBeRen8p0fc+P
8JmAFSIwB6niUBPsRAAI2YUa3pWKOPQ2dZBngWE5N3zOVOZEOuviRARKUix1PrPG
oz+lFO1jztDYNQ==
-----END CERTIFICATE-----
Generated at Fri Jun 20 14:22:46 2025 by rpki-client