Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: TlSbRV2JuG/cOCX8YmR02UR+khWkUfopZqQ0MRGqmd4=
Subject key identifier: AA:34:45:AC:07:B3:FB:B1:9A:50:07:B8:FA:4F:3D:21:6B:C7:F1:58
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 01976C622AAC737EF69FE4161DF7A6981C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: Qw0YmaAiSqaqnHn0i202S+OY69uuwSeVUW9rgWuPyak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2a:ac:73:7e:f6:9f:e4:16:1d:f7:a6:98:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=aa3445ac07b3fbb19a5007b8fa4f3d216bc7f158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:5a:1c:90:33:f2:bc:9b:19:20:fd:4b:ce:
be:46:10:35:07:1e:7b:ad:dc:d0:16:d5:c2:af:78:
12:39:f5:d6:da:24:82:63:97:f8:5b:1f:a7:b3:2d:
ea:ad:8f:65:c7:d6:21:76:03:8a:37:cb:b6:9f:62:
a9:66:3b:32:0e:ca:e3:4c:6e:8e:59:7a:db:45:ac:
19:ef:08:eb:22:95:ff:a4:43:0b:35:cb:2e:a2:3c:
75:a1:28:c3:f9:e6:8b:89:7a:26:d4:d1:a2:5b:36:
1a:87:e7:8e:32:a9:b9:5f:04:bd:31:66:4c:54:7e:
9c:02:5d:c3:23:b7:9c:39:0e:2b:22:97:81:4c:34:
b9:c2:7e:e1:9c:e6:37:ed:e8:7b:da:db:f6:24:bf:
f2:f1:c4:37:6b:8c:12:41:79:ff:ab:48:96:16:a6:
5e:b4:1f:65:45:64:e5:12:f7:2c:94:13:37:1c:5d:
be:1a:54:fe:b0:b2:8c:f7:e4:15:ff:31:9b:11:e5:
53:6c:1a:e2:f0:b6:29:f7:9e:5f:b6:58:f1:3d:65:
32:51:5d:d1:0f:23:91:2a:6e:71:b3:f9:a9:44:e2:
66:5f:dc:50:79:a7:c1:d9:ae:09:5c:7b:4d:55:2e:
79:ac:75:78:34:cf:7e:de:ea:ec:70:a6:a7:d4:b4:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:45:AC:07:B3:FB:B1:9A:50:07:B8:FA:4F:3D:21:6B:C7:F1:58
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:ee:d1:0a:26:ce:c9:37:80:e8:2c:d5:9d:da:cd:f4:c8:
f1:cd:a6:42:f7:3e:76:0a:81:ec:26:d6:02:f8:10:b7:30:d2:
f9:e8:d8:0a:6c:a6:a6:00:9f:17:a5:d1:6b:90:9f:91:f9:4d:
7d:09:29:3c:a5:e8:cb:07:a2:e1:98:74:07:19:e2:02:c3:df:
06:65:60:4f:df:5e:9e:3d:81:f3:db:2e:37:3c:26:28:74:b7:
e8:b1:56:57:e7:46:28:15:90:26:ce:ed:b4:1a:fa:96:ca:09:
34:5b:12:6c:25:e8:3a:d8:33:43:a8:db:03:5c:e2:75:f8:f4:
0d:64:0c:7c:66:49:1e:06:d6:34:89:08:a6:bb:a2:1a:0c:1a:
59:9c:83:8d:2e:42:12:19:91:e4:21:8f:ce:43:21:a6:1f:e7:
50:5a:cd:a3:64:a1:fb:01:b4:82:f7:07:e7:fd:63:f4:20:5c:
56:e8:bd:91:ea:43:a5:23:7f:a9:eb:55:d2:4c:3b:7f:bb:ae:
d3:a8:95:50:17:23:b7:f2:e1:52:02:33:b9:28:fa:29:57:64:
c7:a2:c0:a4:ab:b3:64:23:16:d1:58:bc:8d:d3:7d:21:0e:3d:
ab:63:8d:8e:e7:bf:5c:f6:4b:1b:0e:23:62:a5:49:f0:6e:e8:
c6:83:f8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYiqsc372n+QWHfemmByEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTZlMjJmNGUyMzk2NWY2YzRhMDI1YzZjOTJlZmMwYjY2
MmU3OTMwHhcNMjUwNjE0MDMwMTAyWhcNMjUwNjE1MDMwMTAyWjAzMTEwLwYDVQQD
EyhhYTM0NDVhYzA3YjNmYmIxOWE1MDA3YjhmYTRmM2QyMTZiYzdmMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dZaHJAz8rybGSD9S86+RhA1Bx57
rdzQFtXCr3gSOfXW2iSCY5f4Wx+nsy3qrY9lx9YhdgOKN8u2n2KpZjsyDsrjTG6O
WXrbRawZ7wjrIpX/pEMLNcsuojx1oSjD+eaLiXom1NGiWzYah+eOMqm5XwS9MWZM
VH6cAl3DI7ecOQ4rIpeBTDS5wn7hnOY37eh72tv2JL/y8cQ3a4wSQXn/q0iWFqZe
tB9lRWTlEvcslBM3HF2+GlT+sLKM9+QV/zGbEeVTbBri8LYp955ftljxPWUyUV3R
DyORKm5xs/mpROJmX9xQeafB2a4JXHtNVS55rHV4NM9+3urscKan1LTLFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo0RawHs/uxmlAHuPpPPSFrx/FYMB8GA1UdIwQY
MBaAFMam4i9OI5ZfbEoCXGyS78C2YueTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMzM0ZWQtMzZiZC00MTcwLWI0ZDYt
MDZhZjZkYmEzNGY3LzEveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kMzM0ZWQtMzZiZC00MTcwLWI0ZDYtMDZhZjZkYmEzNGY3
LzEveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYfu0Qom
zsk3gOgs1Z3azfTI8c2mQvc+dgqB7CbWAvgQtzDS+ejYCmympgCfF6XRa5CfkflN
fQkpPKXoywei4Zh0BxniAsPfBmVgT99enj2B89suNzwmKHS36LFWV+dGKBWQJs7t
tBr6lsoJNFsSbCXoOtgzQ6jbA1zidfj0DWQMfGZJHgbWNIkIpruiGgwaWZyDjS5C
EhmR5CGPzkMhph/nUFrNo2Sh+wG0gvcH5/1j9CBcVui9kepDpSN/qetV0kw7f7uu
06iVUBcjt/LhUgIzuSj6KVdkx6LApKuzZCMW0Vi8jdN9IQ49q2ONjue/XPZLGw4j
YqVJ8G7oxoP4VA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:44 2025 by rpki-client