Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: AGkUQO1dxd1oUYQz8UoWX4Sx4daOA8Aua9gL8c6o/mo=
Subject key identifier: 4C:45:8A:94:84:87:CA:AE:33:46:6C:86:DB:0F:8B:AD:EF:E9:22:A2
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 0197B70E9C7589067A1571CACEE7CD0F3ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 1173
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: D+zm2SrbkWNauPZ+8v4GL2hwCoFPyv2MiFUUGy9J1cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9c:75:89:06:7a:15:71:ca:ce:e7:cd:0f:3a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=4c458a948487caae33466c86db0f8badefe922a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:dc:c6:16:b0:89:9f:12:18:c8:22:bd:3c:
09:f9:3b:9c:f6:a9:ad:c5:89:a2:b3:ff:95:1d:41:
2b:33:74:78:a5:51:aa:da:a3:34:74:2d:33:e5:c1:
26:f9:43:2d:5c:d9:e1:d3:6e:9a:ac:ff:91:80:14:
8f:21:ff:13:ac:13:fe:f8:6e:92:9d:5e:79:9f:b4:
91:97:aa:0d:56:c1:cf:38:13:f6:42:be:d7:da:3c:
ca:b6:58:49:a0:11:c8:41:c3:cb:96:73:1b:47:14:
0d:71:52:b6:6e:12:ef:5c:ed:91:6a:8b:6d:46:24:
58:03:ea:a5:b1:21:eb:2d:69:36:50:e6:ce:67:e6:
39:eb:ef:bc:34:ad:42:11:ee:48:5e:3a:98:13:2a:
a3:5a:22:60:f2:bc:d8:47:aa:18:92:f7:e5:80:33:
1f:90:28:3d:63:c4:80:42:69:45:8c:1d:ef:6f:2b:
bf:1d:fa:34:fb:1a:16:b3:03:62:85:93:a2:3e:c2:
7f:97:ff:8a:73:48:c5:cd:34:12:3d:ff:d3:3c:87:
9c:7d:41:6e:c9:09:52:5c:e9:81:ce:22:96:47:61:
01:97:83:73:ae:e5:82:34:3e:bd:81:a4:91:ea:30:
5d:e8:a5:7b:4d:e3:3e:55:e8:80:90:58:ad:b3:07:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:8A:94:84:87:CA:AE:33:46:6C:86:DB:0F:8B:AD:EF:E9:22:A2
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:3b:e0:7f:67:5a:6f:02:6d:9a:e6:49:fe:0b:5c:4f:46:
b6:0a:8a:a5:70:59:b2:b6:f2:84:84:3b:9f:e0:15:bb:5b:2b:
d1:b9:b0:5b:52:3e:62:ed:42:4d:94:f2:ac:8f:c0:b8:05:a3:
5c:ad:4a:f5:ef:69:ad:9a:cc:b6:56:9e:c9:a9:0f:8d:ef:c4:
a1:45:91:2d:06:d1:75:de:33:33:52:33:53:f3:d0:a4:fa:c2:
d5:37:cf:91:b2:37:cd:01:09:31:29:5c:b6:54:9f:9b:6f:b1:
ec:89:75:d1:ae:1b:18:fd:37:01:b7:a8:4d:41:30:c4:ff:53:
4f:5d:9a:05:fd:58:98:04:94:77:6d:aa:62:52:6d:71:65:c7:
36:2e:8a:8c:72:5f:89:37:13:15:7d:68:e9:33:89:3e:a0:e6:
9c:05:73:7e:98:d3:fc:fe:a3:e1:30:da:d7:53:ea:99:1c:56:
d5:a5:1a:0f:45:8e:bb:5b:8a:75:4d:04:04:7f:e3:5e:75:17:
92:09:aa:73:c3:37:be:87:ee:07:38:6e:45:95:76:d2:30:00:
75:bf:f9:5d:c4:52:0a:90:20:9a:bb:6f:92:6a:cd:fb:9d:ea:
51:0e:7f:50:7f:d0:db:84:b9:a1:a8:d5:60:83:5c:44:23:fd:
2e:ad:ff:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dpx1iQZ6FXHKzufNDzrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1
MDhkNTcwHhcNMjUwNjI4MTUwMTE3WhcNMjUwNjI5MTUwMTE3WjAzMTEwLwYDVQQD
Eyg0YzQ1OGE5NDg0ODdjYWFlMzM0NjZjODZkYjBmOGJhZGVmZTkyMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZvcxhawiZ8SGMgivTwJ+Tuc9qmt
xYmis/+VHUErM3R4pVGq2qM0dC0z5cEm+UMtXNnh026arP+RgBSPIf8TrBP++G6S
nV55n7SRl6oNVsHPOBP2Qr7X2jzKtlhJoBHIQcPLlnMbRxQNcVK2bhLvXO2Raott
RiRYA+qlsSHrLWk2UObOZ+Y56++8NK1CEe5IXjqYEyqjWiJg8rzYR6oYkvflgDMf
kCg9Y8SAQmlFjB3vbyu/Hfo0+xoWswNihZOiPsJ/l/+Kc0jFzTQSPf/TPIecfUFu
yQlSXOmBziKWR2EBl4NzruWCND69gaSR6jBd6KV7TeM+VeiAkFitswdpNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExFipSEh8quM0ZshtsPi63v6SKiMB8GA1UdIwQY
MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt
ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx
LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7Q74H9n
Wm8CbZrmSf4LXE9GtgqKpXBZsrbyhIQ7n+AVu1sr0bmwW1I+Yu1CTZTyrI/AuAWj
XK1K9e9prZrMtlaeyakPje/EoUWRLQbRdd4zM1IzU/PQpPrC1TfPkbI3zQEJMSlc
tlSfm2+x7Il10a4bGP03AbeoTUEwxP9TT12aBf1YmASUd22qYlJtcWXHNi6KjHJf
iTcTFX1o6TOJPqDmnAVzfpjT/P6j4TDa11PqmRxW1aUaD0WOu1uKdU0EBH/jXnUX
kgmqc8M3vofuBzhuRZV20jAAdb/5XcRSCpAgmrtvkmrN+53qUQ5/UH/Q24S5oajV
YINcRCP9Lq3/mQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:20 2025 by rpki-client