Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: jz9o/HrSASpaj1yBFABR0SPQLO+iivEWVvs7YchvOUg=
Subject key identifier: 28:5D:7C:FA:39:24:72:BB:AE:1F:0C:D3:38:6B:7E:ED:00:F7:62:05
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 01976BBD4CB868D06681154F5C8D7EDC2474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:57 +0000
Manifest this update: Sat 14 Jun 2025 00:00:57 +0000
Manifest next update: Sun 15 Jun 2025 00:00:57 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: lv+9DhO0rvCjTeBuxfaU7kvgPzwT5MS1dfbtwK6B8x4=)
2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:4c:b8:68:d0:66:81:15:4f:5c:8d:7e:dc:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Jun 14 00:00:57 2025 GMT
Not After : Jun 15 00:00:57 2025 GMT
Subject: CN=285d7cfa392472bbae1f0cd3386b7eed00f76205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:78:d6:0a:78:58:ab:d9:89:41:1a:ec:9d:
e4:57:ba:8b:0d:2e:13:23:d3:17:b4:03:fa:a8:f7:
5e:fb:14:94:e0:5d:3d:52:4b:d3:87:a2:e9:37:39:
35:56:b2:01:64:d7:db:9d:d9:1f:57:f4:84:fd:ec:
87:74:95:a9:25:6e:a1:4b:3b:26:20:0a:5c:fa:3c:
9d:40:53:61:c8:73:9a:06:9c:f4:be:43:49:1d:22:
9a:c6:2f:22:c9:75:a1:74:a6:8e:ec:3c:e2:59:20:
97:13:b9:de:ff:1c:ad:b8:85:23:27:f3:4f:3b:35:
54:81:1d:9b:4b:37:ff:db:f8:89:1a:23:89:fd:a6:
40:86:39:f0:68:8d:62:e5:84:a7:f3:f5:d8:3a:65:
89:5b:ae:b7:62:38:79:61:86:ca:64:d1:2d:00:74:
b2:4e:48:e6:17:a3:8a:e2:3e:35:70:08:1c:e4:04:
d0:8a:40:3e:64:a5:e9:91:b2:bb:85:86:b6:c7:c5:
49:43:be:3f:76:fe:3a:e0:55:fd:3b:90:04:d9:63:
0e:64:a3:71:e4:56:b2:a0:fc:3b:6e:95:1a:ea:06:
3b:4b:23:29:dd:9b:d7:45:fa:30:b1:b4:49:61:d8:
ca:e6:52:e9:f4:31:8b:7b:f2:50:fe:0a:1c:4a:5b:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:7C:FA:39:24:72:BB:AE:1F:0C:D3:38:6B:7E:ED:00:F7:62:05
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:4c:41:e2:18:6f:19:44:b5:5c:66:90:a8:79:60:96:e4:
de:5d:3c:9c:04:72:31:8e:bd:6e:67:86:5c:f0:f9:55:7e:e4:
83:44:4b:b3:db:fe:6d:33:d7:75:d0:2f:e8:01:a6:de:fc:11:
32:c3:52:c4:74:86:7a:fc:61:4b:48:56:4b:cb:26:5a:c3:fe:
9e:6d:ae:b7:75:ec:40:9d:d5:95:be:90:71:ea:91:ce:f6:7f:
f9:7c:16:95:96:15:24:3f:e2:9a:25:f5:80:7b:77:4c:4e:2c:
24:c3:fd:f5:e3:15:3a:24:ec:42:b4:c4:2e:c0:8e:af:b5:ad:
06:86:cc:e7:fc:56:93:fb:75:6f:01:52:af:cf:e2:11:59:dd:
6a:43:7e:c4:6f:ad:46:c0:62:cd:fb:ae:d9:00:1b:52:09:ae:
97:af:59:8f:72:d9:81:11:70:9e:e5:a6:da:f4:ce:fc:9f:87:
fa:78:7a:12:da:87:87:76:7e:28:ae:49:b9:6d:85:2d:25:b0:
04:59:31:ec:7d:71:a7:b6:8c:98:ee:8c:e1:5b:08:11:63:bf:
4a:9e:5e:6d:0a:b1:1a:af:7b:b9:75:84:78:74:5f:12:ee:80:
6b:f6:78:77:43:70:25:4b:5c:bd:58:22:7c:17:f6:a0:6c:c4:
f1:53:78:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvUy4aNBmgRVPXI1+3CR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQyYzJiNjljMjQ4NTE2MjNiZjkxNDc2OTAyNjM1YTRj
ZTA5ZWEwHhcNMjUwNjE0MDAwMDU3WhcNMjUwNjE1MDAwMDU3WjAzMTEwLwYDVQQD
EygyODVkN2NmYTM5MjQ3MmJiYWUxZjBjZDMzODZiN2VlZDAwZjc2MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aB41gp4WKvZiUEa7J3kV7qLDS4T
I9MXtAP6qPde+xSU4F09UkvTh6LpNzk1VrIBZNfbndkfV/SE/eyHdJWpJW6hSzsm
IApc+jydQFNhyHOaBpz0vkNJHSKaxi8iyXWhdKaO7DziWSCXE7ne/xytuIUjJ/NP
OzVUgR2bSzf/2/iJGiOJ/aZAhjnwaI1i5YSn8/XYOmWJW663Yjh5YYbKZNEtAHSy
TkjmF6OK4j41cAgc5ATQikA+ZKXpkbK7hYa2x8VJQ74/dv464FX9O5AE2WMOZKNx
5FayoPw7bpUa6gY7SyMp3ZvXRfowsbRJYdjK5lLp9DGLe/JQ/gocSltyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChdfPo5JHK7rh8M0zhrfu0A92IFMB8GA1UdIwQY
MBaAFF5tLCtpwkhRYjv5FHaQJjWkzgnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEt
ZTdiYjUwYmMwODFiLzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEtZTdiYjUwYmMwODFi
LzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2RMQeIY
bxlEtVxmkKh5YJbk3l08nARyMY69bmeGXPD5VX7kg0RLs9v+bTPXddAv6AGm3vwR
MsNSxHSGevxhS0hWS8smWsP+nm2ut3XsQJ3Vlb6QceqRzvZ/+XwWlZYVJD/imiX1
gHt3TE4sJMP99eMVOiTsQrTELsCOr7WtBobM5/xWk/t1bwFSr8/iEVndakN+xG+t
RsBizfuu2QAbUgmul69Zj3LZgRFwnuWm2vTO/J+H+nh6EtqHh3Z+KK5JuW2FLSWw
BFkx7H1xp7aMmO6M4VsIEWO/Sp5ebQqxGq97uXWEeHRfEu6Aa/Z4d0NwJUtcvVgi
fBf2oGzE8VN44g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:51 2025 by rpki-client