Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: Qbu0c7MROFVtW6PIHovqboy0R08dhrhOECS1PP+4RHc=
Subject key identifier: B5:2E:2B:54:B4:5A:C5:34:F8:9E:A5:E8:B4:81:70:05:FE:6E:69:8F
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019769CF18F25292CB06F268C02BD0C63924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0ACE
Signing time: Fri 13 Jun 2025 15:01:09 +0000
Manifest this update: Fri 13 Jun 2025 15:01:09 +0000
Manifest next update: Sat 14 Jun 2025 15:01:09 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: GCYBc9uf7ICZbgR3SZLXUHacUd3+06nfyuq53kwq4Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:18:f2:52:92:cb:06:f2:68:c0:2b:d0:c6:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jun 13 15:01:09 2025 GMT
Not After : Jun 14 15:01:09 2025 GMT
Subject: CN=b52e2b54b45ac534f89ea5e8b4817005fe6e698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:b2:62:f5:df:2f:44:89:f9:ae:b7:2c:43:
a0:6f:95:5d:ce:f7:6d:df:be:06:6f:20:a2:db:54:
84:19:56:bb:23:39:f4:50:d2:55:d8:72:70:f4:98:
76:70:03:97:18:df:a6:e7:6c:1b:eb:d1:40:e2:a9:
7b:78:4c:80:6e:71:28:66:fb:e1:ba:1a:62:1d:70:
35:23:4a:7e:9d:37:2e:79:0a:d2:ab:b9:d2:13:ba:
c1:9a:34:df:22:cf:dd:15:64:33:cb:51:de:08:aa:
97:b1:11:53:1a:d0:ec:31:60:21:43:c5:ca:cf:8b:
1a:21:90:a7:21:88:10:05:af:b0:9d:b3:e9:fd:d7:
b1:de:72:1d:1a:17:64:4d:83:b2:19:f6:d3:f6:b4:
83:93:00:ea:72:6c:a9:c5:3b:34:7e:df:ec:53:3e:
f3:08:3f:fb:55:e9:40:8d:5e:5f:9c:70:a5:9c:a0:
c9:e5:28:53:5b:e0:12:22:72:e5:e2:4d:69:76:93:
d3:28:1d:d9:c3:0d:eb:0a:60:f5:e9:00:ec:0c:f0:
f8:02:50:74:a9:24:25:4d:67:15:c7:cc:9a:b8:91:
a5:8f:f9:22:1d:4e:a7:8a:e6:a6:64:4d:47:7a:64:
7e:7d:36:c2:84:76:d3:71:6f:56:fe:9e:f6:7f:f4:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:2B:54:B4:5A:C5:34:F8:9E:A5:E8:B4:81:70:05:FE:6E:69:8F
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c6:96:d1:93:14:a8:41:13:d9:ca:95:3d:0f:e9:84:02:11:
05:6e:25:45:ab:41:dd:bd:53:43:ac:ad:9f:f2:93:71:bf:63:
b7:53:ba:bc:1a:c3:ff:98:a7:50:1c:c8:3d:b5:20:1e:6e:51:
00:54:e9:2a:7d:8f:75:01:0e:1a:34:08:5a:75:ad:f3:fb:e1:
4a:c7:91:5f:90:8e:e9:fa:86:cb:16:e5:db:c8:65:63:e6:68:
e5:20:f6:60:00:4a:3f:9d:0b:ab:c0:6f:bb:10:97:ab:0c:5d:
65:78:07:f4:b5:df:cb:89:98:c9:5e:e1:82:b3:6d:4f:f4:c0:
f4:ad:0f:ae:92:f6:f9:3b:74:fe:30:24:23:f2:22:34:e6:ea:
ad:84:77:13:6a:a3:33:4e:b1:22:78:68:e1:7b:77:37:7c:3d:
97:36:6a:d4:ad:48:69:1f:99:53:73:48:76:ba:bc:f4:06:83:
ba:f9:06:4f:34:2f:f9:2a:ea:39:76:d6:ab:65:9b:fe:51:12:
61:e1:83:99:c4:ac:0c:11:52:a5:75:9d:97:67:a3:6c:ac:29:
a8:2c:51:1c:7d:47:b9:92:9e:c5:66:44:34:51:27:d5:af:6d:
06:65:06:36:a0:84:66:6f:d0:44:f6:a2:66:70:8d:e7:1c:db:
34:b5:0a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzxjyUpLLBvJowCvQxjkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh
OTNjZDgwHhcNMjUwNjEzMTUwMTA5WhcNMjUwNjE0MTUwMTA5WjAzMTEwLwYDVQQD
EyhiNTJlMmI1NGI0NWFjNTM0Zjg5ZWE1ZThiNDgxNzAwNWZlNmU2OThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bWyYvXfL0SJ+a63LEOgb5Vdzvdt
374GbyCi21SEGVa7Izn0UNJV2HJw9Jh2cAOXGN+m52wb69FA4ql7eEyAbnEoZvvh
uhpiHXA1I0p+nTcueQrSq7nSE7rBmjTfIs/dFWQzy1HeCKqXsRFTGtDsMWAhQ8XK
z4saIZCnIYgQBa+wnbPp/dex3nIdGhdkTYOyGfbT9rSDkwDqcmypxTs0ft/sUz7z
CD/7VelAjV5fnHClnKDJ5ShTW+ASInLl4k1pdpPTKB3Zww3rCmD16QDsDPD4AlB0
qSQlTWcVx8yauJGlj/kiHU6niuamZE1HemR+fTbChHbTcW9W/p72f/RMIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUuK1S0WsU0+J6l6LSBcAX+bmmPMB8GA1UdIwQY
MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt
ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz
LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8aW0ZMU
qEET2cqVPQ/phAIRBW4lRatB3b1TQ6ytn/KTcb9jt1O6vBrD/5inUBzIPbUgHm5R
AFTpKn2PdQEOGjQIWnWt8/vhSseRX5CO6fqGyxbl28hlY+Zo5SD2YABKP50Lq8Bv
uxCXqwxdZXgH9LXfy4mYyV7hgrNtT/TA9K0PrpL2+Tt0/jAkI/IiNObqrYR3E2qj
M06xInho4Xt3N3w9lzZq1K1IaR+ZU3NIdrq89AaDuvkGTzQv+SrqOXbWq2Wb/lES
YeGDmcSsDBFSpXWdl2ejbKwpqCxRHH1HuZKexWZENFEn1a9tBmUGNqCEZm/QRPai
ZnCN5xzbNLUK6Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:47 2025 by rpki-client