Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: 76cxSkV9p2MMT9+5LRhquxgaCokWub64W5VVzaFFxyg=
Subject key identifier: 84:3F:D5:A7:DE:43:93:64:03:8D:E0:DF:42:AD:6E:9C:50:F1:D4:F9
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019774528908D56932DBAAC1A039D4235E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 14A6
Signing time: Sun 15 Jun 2025 16:00:55 +0000
Manifest this update: Sun 15 Jun 2025 16:00:55 +0000
Manifest next update: Mon 16 Jun 2025 16:00:55 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: ac5OwWz3kP+aatkmUQuboz7vEEneBDEEp5nYttV1K5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:89:08:d5:69:32:db:aa:c1:a0:39:d4:23:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jun 15 16:00:55 2025 GMT
Not After : Jun 16 16:00:55 2025 GMT
Subject: CN=843fd5a7de439364038de0df42ad6e9c50f1d4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:f6:85:ac:dc:a5:6f:61:e6:79:38:dc:11:
fe:8f:3c:8e:08:4e:0d:ca:7a:b0:3d:e8:83:25:04:
66:54:c9:f5:d7:72:8d:06:aa:72:c6:de:fd:c1:30:
11:c5:e1:1d:37:92:cb:35:50:1b:f8:d4:f0:e3:0f:
70:4d:10:37:cd:ab:ad:7a:cd:53:3a:b6:bf:ab:5d:
17:e8:69:94:bf:c4:a7:bc:b6:a4:d9:97:d5:4a:08:
44:5c:25:ba:82:0b:25:01:3a:b3:1b:7c:19:4a:27:
eb:dc:49:89:db:bd:15:02:ec:93:19:0c:c0:23:1b:
7b:9e:b7:56:d9:e4:6f:c1:48:98:f1:93:30:87:57:
8b:0c:43:e7:43:51:04:c9:62:c4:a8:d1:61:71:aa:
7a:6e:0b:16:6b:2b:66:7a:10:d0:09:04:06:08:c6:
37:ed:45:cb:c4:2c:a3:b8:04:be:66:a3:af:da:ef:
09:35:2c:19:85:2a:f1:ca:71:35:73:3b:51:fd:80:
72:2c:8d:29:af:f3:20:57:80:1d:2b:eb:d2:c3:a7:
88:b1:9e:23:23:00:08:d1:1e:58:23:66:75:bd:f1:
9e:83:4d:3e:3f:2f:df:bb:14:ab:5c:42:d6:66:16:
ca:0c:81:28:34:6f:d9:fc:34:42:ad:e7:7f:f4:98:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:D5:A7:DE:43:93:64:03:8D:E0:DF:42:AD:6E:9C:50:F1:D4:F9
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7e:01:b0:cc:e6:45:f3:bf:45:24:62:a5:42:18:5b:4e:f2:
46:65:ab:2e:fc:b2:f6:7d:98:30:80:06:66:2f:50:2d:44:f9:
53:95:5a:48:f8:b3:6a:75:1f:d5:9e:25:29:71:7e:2c:6b:ba:
63:19:e0:e1:7a:ae:13:a1:9c:10:61:2c:e4:ec:8d:5e:3d:a8:
c5:3e:0f:d5:c6:fd:3d:91:60:a3:c0:88:e3:01:a6:d9:67:40:
0f:c0:79:3b:23:a4:28:36:12:7e:1d:63:1b:c4:90:2a:cd:af:
58:a0:10:36:91:6c:cd:96:e3:1c:de:f0:a8:89:00:23:5d:4c:
89:99:4b:1e:22:69:15:10:89:10:f5:f5:17:73:65:9c:ad:9c:
66:96:b7:66:89:a2:a3:68:e1:df:55:8e:51:bf:b4:70:e7:b8:
9f:c6:9f:9b:26:f5:23:27:ce:96:f5:92:86:cb:45:50:0f:60:
d5:86:0a:82:62:da:2a:5e:38:88:fa:1f:d6:54:aa:3e:ec:f2:
29:d5:ed:5e:14:0f:54:03:e8:7a:20:be:9c:c1:9d:5b:33:07:
c1:73:c9:bc:99:52:05:12:54:5c:22:d2:97:9c:3e:3a:d9:f0:
61:e5:13:8f:9b:9b:9c:ac:d2:e1:24:e8:18:5c:fd:e3:1b:0b:
e3:ae:5b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0UokI1Wky26rBoDnUI15uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz
YzFkNTAwHhcNMjUwNjE1MTYwMDU1WhcNMjUwNjE2MTYwMDU1WjAzMTEwLwYDVQQD
Eyg4NDNmZDVhN2RlNDM5MzY0MDM4ZGUwZGY0MmFkNmU5YzUwZjFkNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+b2hazcpW9h5nk43BH+jzyOCE4N
ynqwPeiDJQRmVMn113KNBqpyxt79wTARxeEdN5LLNVAb+NTw4w9wTRA3zautes1T
Ora/q10X6GmUv8SnvLak2ZfVSghEXCW6ggslATqzG3wZSifr3EmJ270VAuyTGQzA
Ixt7nrdW2eRvwUiY8ZMwh1eLDEPnQ1EEyWLEqNFhcap6bgsWaytmehDQCQQGCMY3
7UXLxCyjuAS+ZqOv2u8JNSwZhSrxynE1cztR/YByLI0pr/MgV4AdK+vSw6eIsZ4j
IwAI0R5YI2Z1vfGeg00+Py/fuxSrXELWZhbKDIEoNG/Z/DRCred/9JguDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ/1afeQ5NkA43g30KtbpxQ8dT5MB8GA1UdIwQY
MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt
NDUzNzc0MThmYmIyLzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy
LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcn4BsMzm
RfO/RSRipUIYW07yRmWrLvyy9n2YMIAGZi9QLUT5U5VaSPizanUf1Z4lKXF+LGu6
Yxng4XquE6GcEGEs5OyNXj2oxT4P1cb9PZFgo8CI4wGm2WdAD8B5OyOkKDYSfh1j
G8SQKs2vWKAQNpFszZbjHN7wqIkAI11MiZlLHiJpFRCJEPX1F3NlnK2cZpa3Zomi
o2jh31WOUb+0cOe4n8afmyb1IyfOlvWShstFUA9g1YYKgmLaKl44iPof1lSqPuzy
KdXtXhQPVAPoeiC+nMGdWzMHwXPJvJlSBRJUXCLSl5w+OtnwYeUTj5ubnKzS4STo
GFz94xsL465bkg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:30:34 2025 by rpki-client