Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: VC6DBgxcnyyiM/7MGgY6HydzYOSPsvZ9G+M6ftx6XYc=
Subject key identifier: 2A:89:66:C4:73:4F:7C:B1:16:41:05:34:6D:D6:40:E1:32:F2:8A:B0
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0197722CB20F24FDF0117E7D9F9FE7FDD93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 0518
Signing time: Sun 15 Jun 2025 06:00:20 +0000
Manifest this update: Sun 15 Jun 2025 06:00:20 +0000
Manifest next update: Mon 16 Jun 2025 06:00:20 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: ksCpEvtTsK02GT3IGiFGMCjm1E0xZ3ZhJnFOIVGV7rg=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:b2:0f:24:fd:f0:11:7e:7d:9f:9f:e7:fd:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jun 15 06:00:20 2025 GMT
Not After : Jun 16 06:00:20 2025 GMT
Subject: CN=2a8966c4734f7cb1164105346dd640e132f28ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:bd:a2:36:e7:73:da:91:bb:91:91:56:d5:
36:55:c4:99:74:c7:4d:1e:95:8e:da:3c:d6:ec:d2:
d4:64:e9:2f:b8:51:ce:3f:97:f3:6f:1f:22:e9:ba:
23:57:e7:cc:b3:96:30:38:c6:94:90:4e:2f:c1:b6:
39:71:4a:ab:3a:5f:b9:ee:cb:77:32:94:22:50:23:
6f:7b:75:75:34:58:1f:e1:7f:87:21:d7:68:ef:31:
42:a6:46:f6:8a:09:f0:51:b0:f3:5e:d3:64:36:fa:
ca:05:70:a3:45:f7:de:50:9a:d0:dc:67:b2:c0:de:
0a:e6:e7:73:6f:51:7b:47:be:87:1b:54:39:6b:5f:
90:04:87:32:0f:05:fb:85:7c:04:eb:16:b7:e0:fd:
2d:3b:6e:7f:02:80:06:15:f3:c6:1a:76:02:98:ea:
e5:ef:1b:8d:bc:9c:3a:c1:c3:a5:44:e9:91:92:e8:
55:ea:6d:19:79:b7:28:27:2e:d0:c2:ae:6f:6b:16:
8a:71:47:31:d3:15:9f:ba:ab:a9:42:9a:37:5a:95:
e3:62:21:5c:67:33:61:57:ed:9a:31:e1:fc:00:bd:
f7:c2:f7:09:11:94:00:09:fe:09:65:d1:86:19:c6:
56:3d:6f:e2:29:47:20:30:cc:86:dc:65:11:65:49:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:89:66:C4:73:4F:7C:B1:16:41:05:34:6D:D6:40:E1:32:F2:8A:B0
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bd:0f:24:47:57:4f:fc:78:47:2a:c7:5c:66:8b:17:24:d0:
ce:d6:0c:19:4e:c1:97:96:f7:f3:c6:1b:58:ea:ea:57:58:aa:
60:4a:42:24:ce:0a:d0:1b:27:4d:98:94:89:6b:3b:73:68:31:
30:a7:9d:1c:09:09:03:aa:65:35:19:91:67:80:d0:24:84:65:
33:5d:a6:15:46:23:df:2f:35:1a:09:63:d2:72:da:83:a5:0b:
a3:4e:f1:bf:0f:53:a7:c6:90:3d:e4:00:54:10:a1:40:f8:20:
c9:5e:b8:b7:35:1c:ea:53:88:33:2a:fd:41:e2:a8:71:2d:bb:
00:c3:8d:65:5c:e5:61:c8:ff:0e:57:ac:0f:21:52:0e:b6:8d:
b7:6b:0f:09:a6:ce:3b:a1:78:4d:f6:ce:17:61:27:78:77:ba:
2f:72:c3:ad:bb:df:4c:24:df:3d:6c:ea:d4:87:cd:74:e8:21:
d2:61:45:17:3e:78:6d:7c:75:04:11:33:f6:08:d0:5d:ae:a8:
bd:d0:1d:2c:b7:4e:76:76:f6:ba:14:9d:da:f4:c1:9f:f5:67:
c6:6b:03:b3:51:ac:14:87:f9:19:03:47:92:fd:1e:17:0b:f6:
f8:38:84:a8:f4:78:dc:eb:7e:d2:44:53:21:07:09:47:b9:29:
92:cc:9a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLLIPJP3wEX59n5/n/dk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjUwNjE1MDYwMDIwWhcNMjUwNjE2MDYwMDIwWjAzMTEwLwYDVQQD
EygyYTg5NjZjNDczNGY3Y2IxMTY0MTA1MzQ2ZGQ2NDBlMTMyZjI4YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquS9ojbnc9qRu5GRVtU2VcSZdMdN
HpWO2jzW7NLUZOkvuFHOP5fzbx8i6bojV+fMs5YwOMaUkE4vwbY5cUqrOl+57st3
MpQiUCNve3V1NFgf4X+HIddo7zFCpkb2ignwUbDzXtNkNvrKBXCjRffeUJrQ3Gey
wN4K5udzb1F7R76HG1Q5a1+QBIcyDwX7hXwE6xa34P0tO25/AoAGFfPGGnYCmOrl
7xuNvJw6wcOlROmRkuhV6m0ZebcoJy7Qwq5vaxaKcUcx0xWfuqupQpo3WpXjYiFc
ZzNhV+2aMeH8AL33wvcJEZQACf4JZdGGGcZWPW/iKUcgMMyG3GURZUnO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqJZsRzT3yxFkEFNG3WQOEy8oqwMB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb0PJEdX
T/x4RyrHXGaLFyTQztYMGU7Bl5b388YbWOrqV1iqYEpCJM4K0BsnTZiUiWs7c2gx
MKedHAkJA6plNRmRZ4DQJIRlM12mFUYj3y81Gglj0nLag6ULo07xvw9Tp8aQPeQA
VBChQPggyV64tzUc6lOIMyr9QeKocS27AMONZVzlYcj/DlesDyFSDraNt2sPCabO
O6F4TfbOF2EneHe6L3LDrbvfTCTfPWzq1IfNdOgh0mFFFz54bXx1BBEz9gjQXa6o
vdAdLLdOdnb2uhSd2vTBn/VnxmsDs1GsFIf5GQNHkv0eFwv2+DiEqPR43Ot+0kRT
IQcJR7kpksyafw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:39 2025 by rpki-client