Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: c8KKCeY/7XK+8zyTSRaMOFLtlFgxcPvMsi8twpI4DPY=
Subject key identifier: 77:83:C4:2D:FC:37:4B:3C:68:7B:52:01:9D:B2:2A:50:29:EA:F8:3A
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019774F6D7712D54076C42EE910A85859144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0929
Signing time: Sun 15 Jun 2025 19:00:23 +0000
Manifest this update: Sun 15 Jun 2025 19:00:23 +0000
Manifest next update: Mon 16 Jun 2025 19:00:23 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: IdJjNd/O4xYIQVOxGKKrqOe0CX+1X2RoZIfE8y55cRE=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:d7:71:2d:54:07:6c:42:ee:91:0a:85:85:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jun 15 19:00:23 2025 GMT
Not After : Jun 16 19:00:23 2025 GMT
Subject: CN=7783c42dfc374b3c687b52019db22a5029eaf83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:ba:e5:c7:f1:41:b2:f3:1e:b7:cd:27:23:
95:cf:a2:2a:ea:a6:ee:08:aa:c7:cf:0a:f6:61:06:
5b:df:5e:37:41:92:f5:7f:2b:d5:c3:06:93:0c:81:
7b:85:83:89:e0:7a:e8:e9:79:aa:a2:b3:0d:13:e8:
ea:9a:1a:33:1e:ff:d8:3a:d6:65:5e:5f:82:43:23:
6c:e2:14:97:f6:94:ce:36:da:30:63:25:0c:26:7c:
08:f0:bb:9f:b6:a2:a0:29:51:72:e3:61:df:fc:82:
36:9a:7c:ff:f3:56:c6:63:e9:18:4f:58:34:7f:f8:
ff:d8:6b:e1:75:b5:ea:27:7a:c2:61:ff:39:6a:18:
30:38:92:de:b4:56:20:64:03:cc:0e:fb:b5:a4:c7:
7f:02:ff:ea:8b:8b:e9:95:cc:a2:ca:e8:2c:8d:1a:
21:0b:d2:6a:12:38:bd:6c:b8:8b:aa:10:7b:14:2e:
a0:f8:bc:53:69:3a:2e:8b:61:2d:bb:cb:01:ca:73:
a3:49:02:30:04:c7:08:d0:b6:8b:9d:f0:c4:de:3e:
2d:27:41:42:34:3a:5a:23:83:d3:6b:bd:a3:27:7a:
ae:92:2c:f3:f0:88:d2:3a:3e:2c:73:b8:1d:3a:3c:
71:ed:b5:24:59:e0:28:f3:73:9f:7b:8e:71:6f:90:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:C4:2D:FC:37:4B:3C:68:7B:52:01:9D:B2:2A:50:29:EA:F8:3A
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:33:cd:27:91:8d:f5:f3:f0:e8:79:49:2c:41:4d:e4:81:c7:
62:b7:59:4c:58:56:09:c5:eb:39:89:78:93:79:a0:2b:34:f6:
a9:4c:2e:93:8c:93:63:2f:76:bc:ab:5b:24:19:60:3d:14:87:
c6:e8:12:b3:c1:20:7e:62:56:e0:6a:bf:ee:9f:a4:03:f3:7f:
5a:06:2f:b0:8a:02:31:c8:06:98:e1:ac:0c:67:8d:64:7a:c3:
d2:37:f3:13:45:d3:e2:a0:6f:3d:2d:d0:9a:31:d3:df:15:25:
06:c9:d3:84:ae:98:f2:30:b2:33:ae:bb:cc:4f:f7:c0:94:6f:
e3:7c:74:9e:ee:e0:65:ef:ec:63:d1:6c:ba:57:89:76:f5:d1:
d9:bd:34:99:64:04:16:e2:94:12:f7:08:88:bc:89:52:28:79:
c8:d8:4b:06:fa:fb:d1:eb:0c:b2:a0:da:b8:97:29:32:2c:e2:
7f:dd:2e:38:a3:9f:c5:57:46:81:d1:34:25:2c:ab:db:f2:65:
4b:c7:15:bf:bf:a1:1c:53:e3:b2:4b:a1:33:a3:0a:fe:f7:fd:
82:1a:d4:98:c3:4e:f9:b1:68:dd:81:c0:1c:5d:f1:d1:09:d9:
d8:45:16:0b:fc:a5:da:61:2e:c3:8a:8f:4b:7f:10:1c:66:c9:
cf:8a:27:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd09tdxLVQHbELukQqFhZFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl
NmRiMGUwHhcNMjUwNjE1MTkwMDIzWhcNMjUwNjE2MTkwMDIzWjAzMTEwLwYDVQQD
Eyg3NzgzYzQyZGZjMzc0YjNjNjg3YjUyMDE5ZGIyMmE1MDI5ZWFmODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyma65cfxQbLzHrfNJyOVz6Iq6qbu
CKrHzwr2YQZb3143QZL1fyvVwwaTDIF7hYOJ4Hro6XmqorMNE+jqmhozHv/YOtZl
Xl+CQyNs4hSX9pTONtowYyUMJnwI8LuftqKgKVFy42Hf/II2mnz/81bGY+kYT1g0
f/j/2GvhdbXqJ3rCYf85ahgwOJLetFYgZAPMDvu1pMd/Av/qi4vplcyiyugsjRoh
C9JqEji9bLiLqhB7FC6g+LxTaToui2Etu8sBynOjSQIwBMcI0LaLnfDE3j4tJ0FC
NDpaI4PTa72jJ3qukizz8IjSOj4sc7gdOjxx7bUkWeAo83Ofe45xb5DItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeDxC38N0s8aHtSAZ2yKlAp6vg6MB8GA1UdIwQY
MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt
ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm
LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTPNJ5GN
9fPw6HlJLEFN5IHHYrdZTFhWCcXrOYl4k3mgKzT2qUwuk4yTYy92vKtbJBlgPRSH
xugSs8EgfmJW4Gq/7p+kA/N/WgYvsIoCMcgGmOGsDGeNZHrD0jfzE0XT4qBvPS3Q
mjHT3xUlBsnThK6Y8jCyM667zE/3wJRv43x0nu7gZe/sY9FsuleJdvXR2b00mWQE
FuKUEvcIiLyJUih5yNhLBvr70esMsqDauJcpMizif90uOKOfxVdGgdE0JSyr2/Jl
S8cVv7+hHFPjskuhM6MK/vf9ghrUmMNO+bFo3YHAHF3x0QnZ2EUWC/yl2mEuw4qP
S38QHGbJz4onYw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:20:05 2025 by rpki-client