Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
File: xagvOTbyRO3LYBPhIdUadpDRNZk.mft (raw, json)
Hash identifier: WntEgyQiMJwPSrk1eqDFzpUcRm+y1BXUyqZ/x596Ess=
Subject key identifier: 4C:DB:40:83:5D:DD:98:1F:48:9D:EE:25:07:2F:EA:21:E8:0D:3C:18
Authority key identifier: C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
Certificate issuer: /CN=c5a82f3936f244edcb6013e121d51a7690d13599
Certificate serial: 01976D06BE341A93A0F2F07D5F3CDC927D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
Manifest number: 12DF
Signing time: Sat 14 Jun 2025 06:00:47 +0000
Manifest this update: Sat 14 Jun 2025 06:00:47 +0000
Manifest next update: Sun 15 Jun 2025 06:00:47 +0000
Files and hashes: 1: XSbdHCVCRCiTj8mv8uqC5jKu2Wc.roa (hash: 5E+fKGQdMloCaM1N6c8AjIuVH6v9QdhsvGHXvp3zGN0=)
2: xagvOTbyRO3LYBPhIdUadpDRNZk.crl (hash: hZmhyu474v2S5xsThD1bQV1fugno51faFQZguAmKv8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:be:34:1a:93:a0:f2:f0:7d:5f:3c:dc:92:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a82f3936f244edcb6013e121d51a7690d13599
Validity
Not Before: Jun 14 06:00:47 2025 GMT
Not After : Jun 15 06:00:47 2025 GMT
Subject: CN=4cdb40835ddd981f489dee25072fea21e80d3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:fb:4e:64:22:ab:07:7e:24:e8:ed:7f:da:
a0:0f:64:6e:96:43:16:48:13:8c:01:89:5b:d2:fd:
a1:3c:da:be:9e:a5:e1:e7:a8:2d:2a:cc:53:ef:ae:
1b:57:3a:7b:0e:e3:38:90:73:68:76:49:54:90:f1:
06:49:eb:22:a3:9c:4d:ae:c6:e5:55:ad:92:a8:8e:
81:ad:ed:77:3b:49:56:3b:db:98:55:3e:f1:06:e5:
06:e8:06:c1:4d:a0:f3:75:2b:5c:8b:79:b2:c1:9c:
07:10:0e:d6:ff:e6:3b:53:f2:ab:82:d1:b3:e5:9b:
55:85:d1:59:86:42:76:95:00:17:e2:3a:25:40:33:
b0:c3:a9:56:0a:e1:03:06:8e:56:22:24:63:72:fd:
29:1a:b8:84:a6:39:d9:db:da:4d:27:dd:aa:51:9d:
07:6c:75:02:21:c2:fe:81:90:f9:ad:b3:7b:9a:94:
56:02:e5:2b:a9:5e:27:50:d5:63:bd:a9:47:dd:d5:
fa:ad:ff:24:36:5d:52:90:9a:54:78:7a:66:00:23:
a4:c1:58:00:ea:1d:49:64:72:9d:3d:82:95:d6:b5:
db:5b:67:e6:32:00:b0:53:06:82:52:28:57:05:5e:
ed:d6:f7:f8:ff:0b:7c:55:df:69:c5:b9:66:80:27:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:40:83:5D:DD:98:1F:48:9D:EE:25:07:2F:EA:21:E8:0D:3C:18
X509v3 Authority Key Identifier:
keyid:C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:97:7e:0f:65:60:da:8d:e4:5e:a8:59:15:29:07:f1:e5:
ee:19:66:c7:8b:12:5d:22:1c:45:7e:36:b6:97:2e:ec:70:03:
d7:e4:fc:74:20:1a:af:64:c7:76:54:20:68:a2:e5:7e:7b:1a:
29:8d:fc:61:98:87:f8:fd:2e:5e:d3:df:d1:14:06:0e:25:43:
8b:ee:2d:bd:b4:f6:af:71:56:71:be:3e:20:38:16:9c:3e:86:
a4:51:21:eb:29:79:d7:f3:3a:97:6a:81:c7:7d:23:06:12:d6:
a5:5b:25:5e:90:34:38:88:b9:1c:1e:68:a1:f0:0d:7c:1b:bb:
ea:15:ff:fa:9e:eb:3f:dc:ea:52:c5:84:0d:ce:4f:98:00:ff:
18:d7:a5:5c:a8:1f:a9:3f:7f:56:a9:1c:fa:bb:0a:f4:22:b4:
d2:24:78:f6:ad:de:0e:f2:25:29:c3:52:fc:7f:4a:0c:e8:46:
63:d6:be:2c:e9:d4:bf:af:db:d8:7e:89:84:b8:80:45:e5:f2:
20:43:f5:77:55:d7:a0:53:e2:7d:5a:51:2e:7f:44:5b:f8:b2:
f3:ac:4c:51:db:e7:3b:61:90:53:dd:6b:5a:e4:2c:78:43:9f:
71:51:7c:ae:1e:44:4e:37:4b:05:72:84:9a:5f:84:b9:17:7b:
e3:c6:fd:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBr40GpOg8vB9Xzzckn0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTgyZjM5MzZmMjQ0ZWRjYjYwMTNlMTIxZDUxYTc2OTBk
MTM1OTkwHhcNMjUwNjE0MDYwMDQ3WhcNMjUwNjE1MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg0Y2RiNDA4MzVkZGQ5ODFmNDg5ZGVlMjUwNzJmZWEyMWU4MGQzYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gr7TmQiqwd+JOjtf9qgD2RulkMW
SBOMAYlb0v2hPNq+nqXh56gtKsxT764bVzp7DuM4kHNodklUkPEGSesio5xNrsbl
Va2SqI6Bre13O0lWO9uYVT7xBuUG6AbBTaDzdStci3mywZwHEA7W/+Y7U/KrgtGz
5ZtVhdFZhkJ2lQAX4jolQDOww6lWCuEDBo5WIiRjcv0pGriEpjnZ29pNJ92qUZ0H
bHUCIcL+gZD5rbN7mpRWAuUrqV4nUNVjvalH3dX6rf8kNl1SkJpUeHpmACOkwVgA
6h1JZHKdPYKV1rXbW2fmMgCwUwaCUihXBV7t1vf4/wt8Vd9pxblmgCcU5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzbQINd3ZgfSJ3uJQcv6iHoDTwYMB8GA1UdIwQY
MBaAFMWoLzk28kTty2AT4SHVGnaQ0TWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFndk9UYnlSTzNMWUJQaElkVWFkcERSTlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ZjhjZWEtNTRiYS00OTY1LWE0NTQt
MDdhNDQ5YTUwZjA4LzEveGFndk9UYnlSTzNMWUJQaElkVWFkcERSTlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ZjhjZWEtNTRiYS00OTY1LWE0NTQtMDdhNDQ5YTUwZjA4
LzEveGFndk9UYnlSTzNMWUJQaElkVWFkcERSTlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYq+Xfg9l
YNqN5F6oWRUpB/Hl7hlmx4sSXSIcRX42tpcu7HAD1+T8dCAar2THdlQgaKLlfnsa
KY38YZiH+P0uXtPf0RQGDiVDi+4tvbT2r3FWcb4+IDgWnD6GpFEh6yl51/M6l2qB
x30jBhLWpVslXpA0OIi5HB5oofANfBu76hX/+p7rP9zqUsWEDc5PmAD/GNelXKgf
qT9/Vqkc+rsK9CK00iR49q3eDvIlKcNS/H9KDOhGY9a+LOnUv6/b2H6JhLiAReXy
IEP1d1XXoFPifVpRLn9EW/iy86xMUdvnO2GQU91rWuQseEOfcVF8rh5ETjdLBXKE
ml+EuRd748b9sQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:37:27 2025 by rpki-client