Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: wY73i00EjjkDuzxfLu3RJOPZdhQSgRtLhAvKA84Fy1c=
Subject key identifier: 0A:4C:C9:CC:E2:28:B4:41:C2:54:14:D5:10:BE:31:CE:2B:0C:CF:42
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 01977489755973D607D45485D47E317AEACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1132
Signing time: Sun 15 Jun 2025 17:00:54 +0000
Manifest this update: Sun 15 Jun 2025 17:00:54 +0000
Manifest next update: Mon 16 Jun 2025 17:00:54 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: kt8Hl182Eq/tfuIPBpeSJw34RdkBsgLvKwDRsoAQqWQ=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:75:59:73:d6:07:d4:54:85:d4:7e:31:7a:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jun 15 17:00:54 2025 GMT
Not After : Jun 16 17:00:54 2025 GMT
Subject: CN=0a4cc9cce228b441c25414d510be31ce2b0ccf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:18:ea:d0:b3:14:89:76:73:ec:99:5a:f0:
f5:94:68:25:0f:09:20:6a:ee:2f:34:fc:16:61:2c:
5d:9e:89:cb:69:29:46:48:09:46:e9:73:f3:24:ed:
96:e8:0f:1a:96:2b:91:4c:d2:d7:e6:15:ac:c3:5c:
48:01:52:49:c2:f8:f7:5f:c9:fd:7b:42:c3:ff:1f:
8b:ff:a4:74:19:fd:45:f7:dd:5f:da:e3:f2:0f:11:
1c:95:23:7f:d6:ee:f0:8b:45:e8:4f:49:45:2c:a9:
d5:c1:38:79:9c:50:82:5c:4d:2a:fe:7d:f1:be:fd:
bc:b8:25:4b:de:c0:2d:39:16:4c:b5:36:30:b6:2d:
aa:4e:a7:b4:fa:f6:ed:ff:9e:90:ad:31:f2:ff:36:
8d:82:ec:c0:cf:aa:d0:54:cd:30:f5:c4:d2:58:db:
3f:a2:a5:2b:2f:4d:59:f9:4e:48:cb:11:f5:b4:eb:
a0:ed:75:45:22:47:cb:c5:a8:96:4f:ed:15:45:27:
d9:7f:c0:4c:17:55:71:23:aa:f1:c0:c1:1c:94:ea:
96:a6:ce:ff:34:e4:7a:cf:28:3c:c9:4c:5b:a0:35:
ea:b1:1c:db:c2:1a:f2:d0:15:7c:4c:9d:8a:55:63:
c7:c3:b7:fe:ec:b3:1b:61:b9:2f:41:f0:31:00:f7:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:C9:CC:E2:28:B4:41:C2:54:14:D5:10:BE:31:CE:2B:0C:CF:42
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:b2:b8:5e:fc:2d:f9:57:a8:52:cf:38:ff:73:ca:72:ee:
16:df:c1:ee:9e:aa:6d:be:6b:0a:ec:f0:05:11:ab:22:28:9f:
b2:f8:69:f5:0f:8a:65:31:11:57:e6:6c:6f:c9:9c:2f:b0:59:
e7:ea:e0:bc:b7:d2:a8:04:05:83:ed:8a:4b:5b:02:dc:99:32:
02:3b:25:84:76:fb:92:7f:7a:07:ab:d7:47:28:f6:f3:75:17:
a2:78:e3:f0:30:5d:4a:74:da:0f:19:53:f1:e2:1e:64:d9:c5:
55:d9:6b:41:f4:63:29:27:5b:fd:10:6c:f6:a1:a9:10:fa:7e:
db:16:bd:75:f2:dd:24:80:54:f8:38:17:51:34:96:6c:8c:c4:
86:cf:42:fa:e3:d7:17:ef:5b:35:f9:05:16:e6:12:24:28:df:
38:8d:8e:7c:fc:8b:aa:60:eb:45:c1:81:15:87:40:ef:c7:03:
2d:ca:f0:08:59:ef:94:a8:57:bc:b4:9a:8e:7d:bc:f2:21:ca:
1a:83:75:e5:19:08:d5:ea:de:69:91:b1:f6:f4:0c:5d:86:20:
2e:ad:68:e7:c4:eb:48:eb:0b:26:43:5e:7b:b1:da:fe:d9:cd:
82:37:0c:a4:95:be:11:e5:51:9d:9b:b7:0c:de:a4:d4:3d:24:
8f:61:97:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iXVZc9YH1FSF1H4xeurNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2
ZTJmMDgwHhcNMjUwNjE1MTcwMDU0WhcNMjUwNjE2MTcwMDU0WjAzMTEwLwYDVQQD
EygwYTRjYzljY2UyMjhiNDQxYzI1NDE0ZDUxMGJlMzFjZTJiMGNjZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5IY6tCzFIl2c+yZWvD1lGglDwkg
au4vNPwWYSxdnonLaSlGSAlG6XPzJO2W6A8aliuRTNLX5hWsw1xIAVJJwvj3X8n9
e0LD/x+L/6R0Gf1F991f2uPyDxEclSN/1u7wi0XoT0lFLKnVwTh5nFCCXE0q/n3x
vv28uCVL3sAtORZMtTYwti2qTqe0+vbt/56QrTHy/zaNguzAz6rQVM0w9cTSWNs/
oqUrL01Z+U5IyxH1tOug7XVFIkfLxaiWT+0VRSfZf8BMF1VxI6rxwMEclOqWps7/
NOR6zyg8yUxboDXqsRzbwhry0BV8TJ2KVWPHw7f+7LMbYbkvQfAxAPccSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApMycziKLRBwlQU1RC+Mc4rDM9CMB8GA1UdIwQY
MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt
NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4
LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0+yuF78
LflXqFLPOP9zynLuFt/B7p6qbb5rCuzwBRGrIiifsvhp9Q+KZTERV+Zsb8mcL7BZ
5+rgvLfSqAQFg+2KS1sC3JkyAjslhHb7kn96B6vXRyj283UXonjj8DBdSnTaDxlT
8eIeZNnFVdlrQfRjKSdb/RBs9qGpEPp+2xa9dfLdJIBU+DgXUTSWbIzEhs9C+uPX
F+9bNfkFFuYSJCjfOI2OfPyLqmDrRcGBFYdA78cDLcrwCFnvlKhXvLSajn288iHK
GoN15RkI1ereaZGx9vQMXYYgLq1o58TrSOsLJkNee7Ha/tnNgjcMpJW+EeVRnZu3
DN6k1D0kj2GXSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:57:19 2025 by rpki-client