Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: XXKyHduZP1MTx76NIxMTo/psPrDeCFuGDa5kh90rrGs=
Subject key identifier: CE:E8:F0:6E:D1:79:8F:B2:1D:60:F1:F8:40:9A:82:B9:19:B6:40:FD
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01976BBCCD8C303B36972144101EF6E08F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 01E0
Signing time: Sat 14 Jun 2025 00:00:24 +0000
Manifest this update: Sat 14 Jun 2025 00:00:24 +0000
Manifest next update: Sun 15 Jun 2025 00:00:24 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: ebyAsIAMImzrQiQfy+SQI/DQWKJrLLVHaoKIU8TbYxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:cd:8c:30:3b:36:97:21:44:10:1e:f6:e0:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Jun 14 00:00:24 2025 GMT
Not After : Jun 15 00:00:24 2025 GMT
Subject: CN=cee8f06ed1798fb21d60f1f8409a82b919b640fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:96:0d:cb:55:bc:e2:8a:e3:af:5f:f9:63:
35:bf:5f:9a:83:27:95:0d:87:8f:c3:0b:c9:76:60:
13:2b:7a:9c:5f:0c:a9:a3:76:7b:a5:15:5c:61:a5:
75:e4:54:ba:e7:b0:39:4a:17:12:79:3c:5c:88:3d:
cd:12:a4:5b:80:6c:d5:fb:1c:dd:ee:f3:bf:28:f1:
c8:c6:51:18:8e:8b:dd:b9:e9:b8:5a:f6:e2:91:43:
ab:76:56:5a:be:25:98:79:15:60:54:c0:dd:2f:c3:
db:bd:bc:e9:c8:14:11:4b:54:bc:cd:e1:39:58:74:
d7:b3:e2:c1:61:80:46:f4:b3:86:ca:bc:5d:1e:55:
fa:c8:1d:6e:85:27:e1:c2:8c:c6:f6:16:bc:ed:a1:
37:9c:4b:ac:ad:ef:33:d4:2a:ff:30:98:7e:64:15:
6a:65:bd:4b:71:34:46:70:fd:1d:99:63:cd:65:c4:
06:e0:56:9e:0b:c1:98:83:11:70:57:88:7f:02:d5:
72:00:4a:24:58:8c:85:b5:30:f2:19:6a:f7:48:99:
04:76:26:df:2a:f7:9e:ad:68:05:5d:c3:c2:60:bf:
18:e2:bd:bb:00:99:a0:08:d8:0a:0b:a5:c5:b4:97:
d4:74:b8:67:bb:07:96:47:31:5d:82:a0:a7:c3:d9:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:F0:6E:D1:79:8F:B2:1D:60:F1:F8:40:9A:82:B9:19:B6:40:FD
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b4:c5:fd:97:da:c2:6b:b0:8f:e1:61:68:d8:a3:79:a6:36:
69:2c:c2:46:c7:8b:2b:7c:26:e2:c5:1c:8f:61:f1:b5:9e:1a:
b8:c8:e1:2c:2c:77:18:c3:0b:9b:03:a5:80:d3:7d:0b:68:4d:
5f:ee:91:fc:72:82:26:75:9b:b7:29:76:06:ed:0c:58:e9:c7:
b9:e7:0a:49:7f:50:97:68:f0:30:e7:cf:93:98:6e:2c:6e:52:
d5:17:ac:9e:65:ba:b9:fb:54:0d:c2:54:95:db:f7:30:8b:05:
75:36:61:77:1e:d0:19:61:d1:4c:01:fe:05:bf:66:9a:92:c1:
b1:c9:06:84:61:01:2e:1c:ca:fa:3a:85:c9:9e:ba:4d:9b:79:
36:35:e8:a5:50:54:aa:5f:6a:f0:dd:87:7e:68:1e:ef:a1:0e:
d3:37:0c:8e:83:83:1d:a8:7e:eb:68:16:24:49:b4:bb:0b:ca:
02:37:64:49:db:2e:27:ad:27:61:f0:39:6a:79:4f:3b:e4:7c:
5e:47:14:6b:31:e9:18:6b:bf:a8:fd:76:bf:7b:db:c8:4a:63:
e4:17:bf:3d:be:29:67:5b:2a:90:b4:c2:a5:7d:52:8f:b9:11:
49:2e:14:57:63:ff:c4:fa:2c:73:06:99:f9:b6:12:60:40:a7:
e6:00:07:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvM2MMDs2lyFEEB724I9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy
OTJkN2EwHhcNMjUwNjE0MDAwMDI0WhcNMjUwNjE1MDAwMDI0WjAzMTEwLwYDVQQD
EyhjZWU4ZjA2ZWQxNzk4ZmIyMWQ2MGYxZjg0MDlhODJiOTE5YjY0MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DmWDctVvOKK469f+WM1v1+agyeV
DYePwwvJdmATK3qcXwypo3Z7pRVcYaV15FS657A5ShcSeTxciD3NEqRbgGzV+xzd
7vO/KPHIxlEYjovduem4WvbikUOrdlZaviWYeRVgVMDdL8PbvbzpyBQRS1S8zeE5
WHTXs+LBYYBG9LOGyrxdHlX6yB1uhSfhwozG9ha87aE3nEusre8z1Cr/MJh+ZBVq
Zb1LcTRGcP0dmWPNZcQG4FaeC8GYgxFwV4h/AtVyAEokWIyFtTDyGWr3SJkEdibf
KveerWgFXcPCYL8Y4r27AJmgCNgKC6XFtJfUdLhnuweWRzFdgqCnw9mO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7o8G7ReY+yHWDx+ECagrkZtkD9MB8GA1UdIwQY
MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt
Zjg5OTc3YTQ1YjYwLzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw
LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbTF/Zfa
wmuwj+FhaNijeaY2aSzCRseLK3wm4sUcj2HxtZ4auMjhLCx3GMMLmwOlgNN9C2hN
X+6R/HKCJnWbtyl2Bu0MWOnHuecKSX9Ql2jwMOfPk5huLG5S1ResnmW6uftUDcJU
ldv3MIsFdTZhdx7QGWHRTAH+Bb9mmpLBsckGhGEBLhzK+jqFyZ66TZt5NjXopVBU
ql9q8N2Hfmge76EO0zcMjoODHah+62gWJEm0uwvKAjdkSdsuJ60nYfA5anlPO+R8
XkcUazHpGGu/qP12v3vbyEpj5Be/Pb4pZ1sqkLTCpX1Sj7kRSS4UV2P/xPoscwaZ
+bYSYECn5gAHIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:23 2025 by rpki-client