Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: Mh+C3m2SUjiPfGzrkukRHnRNIogcXh5lYf2P+8RBck0=
Subject key identifier: 4D:42:EE:30:89:DC:FE:66:F7:B2:E2:7F:4B:13:25:E2:8F:A5:3F:99
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019782450F5C26C7CCBB19E0E2CAD38C8965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0864
Signing time: Wed 18 Jun 2025 09:00:53 +0000
Manifest this update: Wed 18 Jun 2025 09:00:53 +0000
Manifest next update: Thu 19 Jun 2025 09:00:53 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: SjXQJVbeV3jqE4dXSOHHormumvtF3Rssc1uYjiIDdus=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:45:0f:5c:26:c7:cc:bb:19:e0:e2:ca:d3:8c:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jun 18 09:00:53 2025 GMT
Not After : Jun 19 09:00:53 2025 GMT
Subject: CN=4d42ee3089dcfe66f7b2e27f4b1325e28fa53f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:9f:eb:16:3c:d8:5c:26:ad:90:b4:e4:25:
20:e8:ea:78:95:7c:5d:60:aa:98:76:28:03:4c:fa:
91:53:cc:80:e1:de:12:1c:80:0f:94:42:af:79:95:
f2:45:50:ec:c2:f1:d0:c1:58:9b:23:45:f8:92:8d:
cd:c9:f7:23:d4:fb:8d:c0:36:25:63:e4:65:40:9f:
1e:b7:9a:eb:d1:36:04:bc:32:35:75:25:4a:96:62:
66:29:80:57:44:18:b4:76:19:9a:3f:1a:8e:40:c4:
8f:ee:8b:a6:85:c2:29:18:d4:44:1b:74:1b:e9:66:
49:4b:55:17:f0:b0:8b:e2:c7:a3:08:66:a6:47:2d:
df:3f:6b:d7:44:37:b0:14:07:31:7d:b8:11:66:95:
5e:0c:74:0b:b8:31:48:07:07:1f:42:f0:99:00:ae:
27:ff:2a:98:4b:c8:87:c6:c9:ad:61:df:55:61:59:
37:21:26:3a:35:39:91:f2:b0:98:2b:6b:55:f3:ab:
32:ba:7a:f9:51:b9:05:f1:6e:8f:06:a4:18:2d:1e:
b8:d2:8c:25:b2:d9:52:0f:51:aa:56:65:83:2b:59:
94:ff:b5:f9:7a:52:50:51:bb:5b:27:1d:f0:fa:9b:
fb:9e:48:3c:4c:5c:86:fb:f8:73:03:b9:61:06:4d:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:EE:30:89:DC:FE:66:F7:B2:E2:7F:4B:13:25:E2:8F:A5:3F:99
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f3:50:7f:ea:a3:50:c5:d7:2f:c9:8c:17:a1:8e:e0:b2:4d:
1f:c6:ee:c2:77:10:8e:ec:19:d8:a9:21:8f:66:7c:9c:28:f8:
bd:89:b1:43:7f:48:9f:b3:7a:ac:39:2e:f8:bd:b6:7e:c1:74:
9d:82:ff:c5:ce:c6:3e:f2:98:57:a4:23:ea:e0:c1:1f:00:9b:
d4:a6:85:38:6d:08:bc:81:39:a7:eb:6b:5a:7e:27:d2:bf:1d:
18:3d:87:26:e2:99:fc:b9:c6:ba:23:79:7f:93:a9:b8:7c:29:
fd:bd:6f:2c:e1:16:7e:f0:95:f9:bb:f5:97:4a:7a:01:26:c1:
b1:74:0b:05:a2:f0:7c:4d:11:c3:4d:37:6d:73:27:7f:79:39:
98:3b:96:91:47:af:3c:8c:8d:09:ab:dd:5b:70:d8:04:b1:69:
e5:64:a6:48:ce:8d:20:e9:e1:33:2d:7c:d5:47:cb:c8:71:dd:
07:73:a1:a1:d6:53:ee:dd:8f:9b:8b:30:10:6f:fb:ab:aa:05:
ec:da:37:ac:c0:69:70:ab:c0:e6:db:8b:5f:20:67:75:7e:4c:
11:2e:10:e9:2d:01:9f:fe:7e:f0:c7:d7:38:ad:37:de:56:c6:
72:7a:1f:87:b5:5f:70:9a:e3:6d:d8:15:f2:7d:da:8e:3e:25:
87:ff:7e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCRQ9cJsfMuxng4srTjIllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjUwNjE4MDkwMDUzWhcNMjUwNjE5MDkwMDUzWjAzMTEwLwYDVQQD
Eyg0ZDQyZWUzMDg5ZGNmZTY2ZjdiMmUyN2Y0YjEzMjVlMjhmYTUzZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufuf6xY82FwmrZC05CUg6Op4lXxd
YKqYdigDTPqRU8yA4d4SHIAPlEKveZXyRVDswvHQwVibI0X4ko3Nyfcj1PuNwDYl
Y+RlQJ8et5rr0TYEvDI1dSVKlmJmKYBXRBi0dhmaPxqOQMSP7oumhcIpGNREG3Qb
6WZJS1UX8LCL4sejCGamRy3fP2vXRDewFAcxfbgRZpVeDHQLuDFIBwcfQvCZAK4n
/yqYS8iHxsmtYd9VYVk3ISY6NTmR8rCYK2tV86syunr5UbkF8W6PBqQYLR640owl
stlSD1GqVmWDK1mU/7X5elJQUbtbJx3w+pv7nkg8TFyG+/hzA7lhBk1hNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1C7jCJ3P5m97Lif0sTJeKPpT+ZMB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvNQf+qj
UMXXL8mMF6GO4LJNH8buwncQjuwZ2Kkhj2Z8nCj4vYmxQ39In7N6rDku+L22fsF0
nYL/xc7GPvKYV6Qj6uDBHwCb1KaFOG0IvIE5p+trWn4n0r8dGD2HJuKZ/LnGuiN5
f5OpuHwp/b1vLOEWfvCV+bv1l0p6ASbBsXQLBaLwfE0Rw003bXMnf3k5mDuWkUev
PIyNCavdW3DYBLFp5WSmSM6NIOnhMy181UfLyHHdB3OhodZT7t2Pm4swEG/7q6oF
7No3rMBpcKvA5tuLXyBndX5MES4Q6S0Bn/5+8MfXOK033lbGcnofh7VfcJrjbdgV
8n3ajj4lh/9+ng==
-----END CERTIFICATE-----
Generated at Wed Jun 18 13:19:27 2025 by rpki-client