Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: l33jjfNKzRw0NDBKgf364C5LrIzOEydduXcqmaEerhk=
Subject key identifier: 37:5D:F0:0F:72:34:8E:9D:25:07:18:E5:CB:9A:8E:E2:73:EF:2D:7B
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 0197786610FC61B9BB9FEC36F0775805904C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 0624
Signing time: Mon 16 Jun 2025 11:00:44 +0000
Manifest this update: Mon 16 Jun 2025 11:00:44 +0000
Manifest next update: Tue 17 Jun 2025 11:00:44 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: nV2wspnJRP7uDpusMQYm3YRFepnazJ16hfYacjeO9kk=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:10:fc:61:b9:bb:9f:ec:36:f0:77:58:05:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Jun 16 11:00:44 2025 GMT
Not After : Jun 17 11:00:44 2025 GMT
Subject: CN=375df00f72348e9d250718e5cb9a8ee273ef2d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:10:9c:c5:c3:c6:48:5b:95:8e:13:04:39:1c:
45:26:ba:ba:00:ff:6d:a3:0b:a5:f3:d2:e2:6d:47:
95:f6:c6:50:37:f8:49:15:7c:c3:78:c2:29:9e:b7:
b3:80:04:fe:13:31:bc:57:ac:f6:98:e6:2b:de:89:
6e:b4:11:1d:61:af:d3:4c:65:18:38:d5:ca:3b:a2:
a4:38:4e:81:ed:26:f7:6b:80:68:64:7c:8b:a4:ff:
4b:04:e0:03:a6:e2:dc:11:95:c8:a7:c6:f9:8d:6e:
f8:f8:fb:7a:37:5b:62:ce:7f:8d:3e:f1:c5:f3:fd:
45:06:14:ee:70:c6:2d:55:b0:b5:08:df:15:40:d3:
2c:b4:4b:06:fe:55:49:ec:06:09:f1:4e:46:5d:d6:
15:5d:d7:6a:36:4a:d0:53:e8:ac:22:7d:97:f9:1b:
6b:d0:06:84:0d:d7:5c:9a:95:f3:01:e7:b2:b2:56:
61:3b:53:9c:c7:3b:09:7e:63:0a:2a:93:07:87:b4:
c5:64:9e:f6:4d:e3:b7:24:18:4f:c1:44:06:4b:74:
7c:02:29:81:f0:28:50:a1:6d:92:e4:04:cc:2f:0d:
fa:ff:3e:f7:2b:d4:a1:cc:ef:3d:07:de:56:09:7e:
88:28:1c:5a:f2:2f:58:31:1b:74:2c:9d:2d:d2:25:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:F0:0F:72:34:8E:9D:25:07:18:E5:CB:9A:8E:E2:73:EF:2D:7B
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e7:2e:39:af:98:46:40:22:f7:94:cb:04:0b:46:f2:e8:cd:
ad:48:6b:03:d4:df:05:ea:25:6a:5a:1c:06:73:5b:0d:89:c4:
a8:8a:58:94:da:cf:b9:c4:5c:b8:cf:fb:21:6f:73:8e:53:99:
75:51:d9:b3:b8:39:4d:6d:ce:b2:73:b4:54:d9:f2:eb:51:c0:
d5:c3:2f:ef:bc:6f:2e:7a:0f:ab:83:b0:93:ac:9c:c6:7d:62:
93:18:61:16:03:b9:84:19:d2:4b:32:6e:c0:87:dc:90:b5:ce:
43:8a:dd:05:a9:ec:5c:a9:f0:4e:6f:03:16:47:43:a8:34:39:
9b:c2:c4:52:5f:83:1b:30:70:e1:69:94:a7:c6:d4:71:97:7d:
b0:d5:b8:1d:5e:f7:6a:77:a9:b5:02:d8:e8:c5:26:0b:8a:8a:
a9:c8:36:41:04:ab:5c:3e:19:cf:ba:4b:64:79:33:e1:19:d2:
08:e0:e9:48:d0:24:41:98:c6:2b:6d:bf:21:7b:02:a5:0b:dd:
dd:de:b0:54:62:2c:78:8e:65:62:4c:ec:75:18:d4:a8:8b:c0:
e9:cd:d8:4c:01:33:7f:1f:12:6a:8b:9c:2b:f7:dd:bf:8e:77:
64:99:92:8d:74:95:bb:fe:92:72:a3:0c:b7:84:d8:a6:04:8d:
90:b1:18:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4ZhD8Ybm7n+w28HdYBZBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh
MWQxOTUwHhcNMjUwNjE2MTEwMDQ0WhcNMjUwNjE3MTEwMDQ0WjAzMTEwLwYDVQQD
EygzNzVkZjAwZjcyMzQ4ZTlkMjUwNzE4ZTVjYjlhOGVlMjczZWYyZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RCcxcPGSFuVjhMEORxFJrq6AP9t
owul89LibUeV9sZQN/hJFXzDeMIpnrezgAT+EzG8V6z2mOYr3olutBEdYa/TTGUY
ONXKO6KkOE6B7Sb3a4BoZHyLpP9LBOADpuLcEZXIp8b5jW74+Pt6N1tizn+NPvHF
8/1FBhTucMYtVbC1CN8VQNMstEsG/lVJ7AYJ8U5GXdYVXddqNkrQU+isIn2X+Rtr
0AaEDddcmpXzAeeyslZhO1OcxzsJfmMKKpMHh7TFZJ72TeO3JBhPwUQGS3R8AimB
8ChQoW2S5ATMLw36/z73K9ShzO89B95WCX6IKBxa8i9YMRt0LJ0t0iWzswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdd8A9yNI6dJQcY5cuajuJz7y17MB8GA1UdIwQY
MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt
MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm
LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFucuOa+Y
RkAi95TLBAtG8ujNrUhrA9TfBeolalocBnNbDYnEqIpYlNrPucRcuM/7IW9zjlOZ
dVHZs7g5TW3OsnO0VNny61HA1cMv77xvLnoPq4Owk6ycxn1ikxhhFgO5hBnSSzJu
wIfckLXOQ4rdBansXKnwTm8DFkdDqDQ5m8LEUl+DGzBw4WmUp8bUcZd9sNW4HV73
aneptQLY6MUmC4qKqcg2QQSrXD4Zz7pLZHkz4RnSCODpSNAkQZjGK22/IXsCpQvd
3d6wVGIseI5lYkzsdRjUqIvA6c3YTAEzfx8SaoucK/fdv453ZJmSjXSVu/6ScqMM
t4TYpgSNkLEYqw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:50:17 2025 by rpki-client