Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier: r5CsWBn9b0pmtINswlWrj7krj2nX9CBDzUt0lX24iCo=
Subject key identifier: F4:99:C9:3E:B9:7B:7E:63:D8:10:34:59:11:46:3B:5C:7A:2D:AE:FD
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial: 019769CE7300D98E2525071D9268ADB26D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number: 0134
Signing time: Fri 13 Jun 2025 15:00:26 +0000
Manifest this update: Fri 13 Jun 2025 15:00:26 +0000
Manifest next update: Sat 14 Jun 2025 15:00:26 +0000
Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: hNxONCjiModfxbfq97RwQxiJnzc6un4xBgr+N9d/ZTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:73:00:d9:8e:25:25:07:1d:92:68:ad:b2:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Validity
Not Before: Jun 13 15:00:26 2025 GMT
Not After : Jun 14 15:00:26 2025 GMT
Subject: CN=f499c93eb97b7e63d810345911463b5c7a2daefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:91:b7:aa:5e:a8:a6:8c:13:60:58:13:c0:
09:a8:f0:67:c2:a2:30:a8:fc:61:bf:b3:58:e0:67:
46:e3:2e:db:a5:70:39:c3:70:f9:b2:0c:f2:fc:e7:
70:f3:35:c7:58:5c:63:2b:7d:f5:1a:ee:97:5c:6f:
36:b7:7c:c5:2c:9b:b9:5c:5c:83:6c:de:3c:be:51:
b4:da:5f:59:5c:4c:2e:e1:64:af:25:7e:37:bd:c1:
4d:d6:fa:5d:bc:83:c2:e4:8b:21:0c:b9:27:2c:eb:
21:00:5e:bc:e5:5e:ce:d8:7c:0b:8a:a0:6d:f5:68:
70:0c:b5:c7:9b:47:30:fe:11:de:61:76:b2:35:09:
6f:34:75:1b:38:0d:96:18:df:76:64:4e:e1:72:cb:
19:c5:dd:a7:28:14:a7:37:cf:6f:1c:be:66:b0:f7:
e4:5b:2a:f5:f0:f3:0e:38:14:8b:2a:3b:d4:b8:b5:
fa:7a:3e:de:e1:7c:c0:64:da:4a:cd:f9:c1:27:cd:
81:13:36:5d:1e:88:ac:6c:8f:44:4b:55:e4:af:2b:
28:3f:f6:b0:f3:43:08:36:4d:c2:cb:f8:1c:7b:73:
6d:66:26:a7:47:6d:b2:b6:18:e3:3c:95:13:5b:05:
14:1b:02:e4:d9:39:9f:1c:4c:17:c1:fb:cb:86:5f:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:C9:3E:B9:7B:7E:63:D8:10:34:59:11:46:3B:5C:7A:2D:AE:FD
X509v3 Authority Key Identifier:
keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e3:d8:65:12:0b:50:bd:7a:92:d5:fb:09:95:3f:11:59:c1:
48:dd:d9:b0:f8:86:5d:3c:33:5f:85:85:2a:1e:02:08:77:76:
d3:cc:7e:f0:b2:c3:1b:92:82:82:d4:58:af:98:29:7f:f0:95:
28:3d:7f:1c:91:23:64:ce:18:12:5d:1c:68:93:ce:14:43:af:
2e:d6:6c:7a:c9:75:21:85:d0:67:b4:b0:9a:c2:81:58:90:a9:
dd:c3:cc:8e:a9:22:86:f0:dc:1e:92:66:b0:d3:a7:9c:a5:d6:
17:ca:77:0d:f6:df:b5:59:7b:6a:3c:c8:99:b5:fa:83:ca:4a:
81:9f:a2:3e:5c:83:d9:3b:36:33:40:3e:fa:1c:72:bc:dc:69:
09:4b:30:62:61:7f:74:c7:f6:15:14:90:46:86:76:bd:66:a2:
35:f7:1d:62:17:85:37:a5:b3:94:81:32:bf:3f:39:ff:a5:4f:
f5:8e:b6:36:0b:25:d5:59:0a:a4:da:03:46:c0:e3:ee:01:d6:
a0:a5:3a:8d:22:f6:67:be:d7:c0:31:12:1d:69:70:1e:e4:52:
85:9b:25:0b:f8:3d:ef:84:86:fe:e1:3c:6f:bc:12:a7:ea:b7:
5e:47:62:1e:b8:39:d2:aa:bd:c5:38:2f:bd:4b:78:bf:d5:88:
fa:5a:1f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpznMA2Y4lJQcdkmitsm1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjOTE3N2I0ZjU0ZTY1N2UzODc2NTZlNjczYWY4YzBlZTBh
NjA5MTcwHhcNMjUwNjEzMTUwMDI2WhcNMjUwNjE0MTUwMDI2WjAzMTEwLwYDVQQD
EyhmNDk5YzkzZWI5N2I3ZTYzZDgxMDM0NTkxMTQ2M2I1YzdhMmRhZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+uRt6peqKaME2BYE8AJqPBnwqIw
qPxhv7NY4GdG4y7bpXA5w3D5sgzy/Odw8zXHWFxjK331Gu6XXG82t3zFLJu5XFyD
bN48vlG02l9ZXEwu4WSvJX43vcFN1vpdvIPC5IshDLknLOshAF685V7O2HwLiqBt
9WhwDLXHm0cw/hHeYXayNQlvNHUbOA2WGN92ZE7hcssZxd2nKBSnN89vHL5msPfk
Wyr18PMOOBSLKjvUuLX6ej7e4XzAZNpKzfnBJ82BEzZdHoisbI9ES1XkrysoP/aw
80MINk3Cy/gce3NtZianR22ythjjPJUTWwUUGwLk2TmfHEwXwfvLhl+QiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSZyT65e35j2BA0WRFGO1x6La79MB8GA1UdIwQY
MBaAFFyRd7T1TmV+OHZW5nOvjA7gpgkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jYTUyZjAtZDNiMy00MmM1LThhN2It
NmRjMzY5ZGZmNTNmLzEvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jYTUyZjAtZDNiMy00MmM1LThhN2ItNmRjMzY5ZGZmNTNm
LzEvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouPYZRIL
UL16ktX7CZU/EVnBSN3ZsPiGXTwzX4WFKh4CCHd208x+8LLDG5KCgtRYr5gpf/CV
KD1/HJEjZM4YEl0caJPOFEOvLtZsesl1IYXQZ7SwmsKBWJCp3cPMjqkihvDcHpJm
sNOnnKXWF8p3DfbftVl7ajzImbX6g8pKgZ+iPlyD2Ts2M0A++hxyvNxpCUswYmF/
dMf2FRSQRoZ2vWaiNfcdYheFN6WzlIEyvz85/6VP9Y62Ngsl1VkKpNoDRsDj7gHW
oKU6jSL2Z77XwDESHWlwHuRShZslC/g974SG/uE8b7wSp+q3XkdiHrg50qq9xTgv
vUt4v9WI+lofAw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:26 2025 by rpki-client