Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: dwBQ6Ymn3b1euIQlvdiNx20MCl3xfrc4G1t3csv4HSw=
Subject key identifier: 35:FD:28:73:98:EC:8B:82:32:84:85:78:2A:A0:FC:B2:2C:37:4C:2A
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01977DC34E9E6812714D663B2C58379966B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 12:00:40 +0000
Manifest this update: Tue 17 Jun 2025 12:00:40 +0000
Manifest next update: Wed 18 Jun 2025 12:00:40 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: WdF0vZlc3l3xXJXKTAbR0bH362b+Ddyuk9z0Q7fzw1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:4e:9e:68:12:71:4d:66:3b:2c:58:37:99:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jun 17 12:00:40 2025 GMT
Not After : Jun 18 12:00:40 2025 GMT
Subject: CN=35fd287398ec8b82328485782aa0fcb22c374c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:e8:f5:1b:fe:01:37:79:42:ea:1a:3b:f9:
6b:9f:ea:64:9f:a4:6c:e6:55:b1:1a:e8:d9:fb:0e:
0b:b4:1c:cc:b3:93:c5:64:14:4f:ac:c3:5f:b5:5a:
1c:69:7e:9c:d8:2b:6d:b5:a3:35:d1:bf:23:78:bb:
a6:a8:d3:f0:98:ca:a9:65:db:ff:7d:7d:fb:a0:1b:
fa:88:ea:13:8d:53:b1:76:b2:45:1e:1b:2f:f1:e7:
a9:26:6d:09:ea:0b:38:9d:53:98:1d:a4:d6:89:e9:
b7:3b:4a:e7:3a:c7:10:f1:d1:52:51:fb:0c:47:c0:
c8:71:d4:04:35:bc:65:e8:92:6d:6c:bb:f2:c9:d9:
b7:ec:f5:e9:41:98:9b:8f:66:b9:a4:83:5f:1f:1c:
d3:5e:cb:74:ab:1e:06:ee:47:03:54:ae:d5:ad:5c:
27:af:7a:19:2b:4b:84:0d:bb:4e:9b:b0:19:65:47:
1e:b3:6c:96:6b:2f:ca:21:96:9b:61:a0:56:1b:58:
d3:08:85:48:1c:c0:30:03:94:e7:83:db:2f:a1:1b:
ad:f1:7b:41:1f:c9:5c:58:41:5e:c7:53:7b:f1:a5:
40:e0:3e:fa:c9:f9:7a:bd:55:0d:60:e9:af:a4:fb:
67:d0:3d:21:77:ab:ff:37:e7:b6:1b:1c:8d:30:6a:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:28:73:98:EC:8B:82:32:84:85:78:2A:A0:FC:B2:2C:37:4C:2A
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:7f:57:4b:fe:1f:65:81:fa:a7:42:da:b6:f7:36:91:37:
bb:9d:36:53:1a:81:8b:b0:a2:16:e3:5a:55:ed:e9:14:cf:55:
1f:7f:d6:01:be:81:5e:1a:26:70:25:42:c3:1c:5e:7d:48:07:
36:89:f3:a3:e1:5d:64:ab:6c:ae:0d:db:6d:c5:e9:98:36:c1:
5c:6e:8c:76:af:b2:66:7f:ea:86:1a:c5:4b:50:ae:23:f9:fd:
19:4b:ab:8e:6b:d2:c8:56:01:9a:b1:29:82:05:0b:c0:72:a1:
70:aa:81:b6:fe:ed:d3:d3:36:04:a3:ac:45:0b:4b:5b:be:7e:
33:0a:b8:1f:b7:fb:eb:c9:a8:ad:97:fc:26:9a:94:5c:09:0b:
eb:c2:20:20:ad:14:96:16:c1:07:64:b3:b2:ee:e3:6f:b8:1a:
37:bc:bd:20:35:a0:b7:f7:83:ac:09:e0:9e:56:ad:56:b4:b5:
c6:bc:ac:4c:8c:54:30:01:37:0a:4e:f8:53:b8:07:63:3f:a1:
05:e8:6c:22:ab:b3:0f:bb:14:bc:c2:ca:3e:18:f1:ae:47:e1:
48:c0:fe:81:84:2c:43:4f:39:d8:67:ba:bb:2d:57:e5:82:1d:
28:8d:d2:bc:b5:64:92:9b:a6:d6:93:7f:b5:8d:6a:6b:92:90:
f3:b9:95:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9w06eaBJxTWY7LFg3mWa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWQ4Njk3NGE3YjYyNDE5MmVjOGQ4MzRjZjI5MDZlMTMw
MmU0MzEwHhcNMjUwNjE3MTIwMDQwWhcNMjUwNjE4MTIwMDQwWjAzMTEwLwYDVQQD
EygzNWZkMjg3Mzk4ZWM4YjgyMzI4NDg1NzgyYWEwZmNiMjJjMzc0YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tzo9Rv+ATd5QuoaO/lrn+pkn6Rs
5lWxGujZ+w4LtBzMs5PFZBRPrMNftVocaX6c2CtttaM10b8jeLumqNPwmMqpZdv/
fX37oBv6iOoTjVOxdrJFHhsv8eepJm0J6gs4nVOYHaTWiem3O0rnOscQ8dFSUfsM
R8DIcdQENbxl6JJtbLvyydm37PXpQZibj2a5pINfHxzTXst0qx4G7kcDVK7VrVwn
r3oZK0uEDbtOm7AZZUces2yWay/KIZabYaBWG1jTCIVIHMAwA5Tng9svoRut8XtB
H8lcWEFex1N78aVA4D76yfl6vVUNYOmvpPtn0D0hd6v/N+e2GxyNMGr2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX9KHOY7IuCMoSFeCqg/LIsN0wqMB8GA1UdIwQY
MBaAFFxdhpdKe2JBkuyNg0zykG4TAuQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEt
YmQ4MDJmYzRhYTk0LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEtYmQ4MDJmYzRhYTk0
LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5B/V0v+
H2WB+qdC2rb3NpE3u502UxqBi7CiFuNaVe3pFM9VH3/WAb6BXhomcCVCwxxefUgH
Nonzo+FdZKtsrg3bbcXpmDbBXG6Mdq+yZn/qhhrFS1CuI/n9GUurjmvSyFYBmrEp
ggULwHKhcKqBtv7t09M2BKOsRQtLW75+Mwq4H7f768morZf8JpqUXAkL68IgIK0U
lhbBB2Szsu7jb7gaN7y9IDWgt/eDrAngnlatVrS1xrysTIxUMAE3Ck74U7gHYz+h
BehsIquzD7sUvMLKPhjxrkfhSMD+gYQsQ0852Ge6uy1X5YIdKI3SvLVkkpum1pN/
tY1qa5KQ87mVfw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:27:23 2025 by rpki-client