Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: ifRWWnVxgsaXK1nnBSOuV+9/3qkEgjwYx5P8wYTO1og=
Subject key identifier: 67:E4:AE:51:09:96:BB:ED:C8:A4:23:F7:30:FB:A2:26:ED:40:E3:54
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 0197B6A114A0D6A7C86ED550A1015139BF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 11D4
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: PpLXcJ86hOE8Qq059qddsasxs69pV4QTwYs46lWoPiY=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:14:a0:d6:a7:c8:6e:d5:50:a1:01:51:39:bf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=67e4ae510996bbedc8a423f730fba226ed40e354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:76:03:3f:54:a9:44:46:4c:d7:07:87:60:
86:11:df:c4:e5:66:1a:2f:54:dc:d7:11:00:77:dc:
f0:67:3a:9c:58:b5:e1:35:e3:d1:8d:31:35:d8:05:
4f:fd:14:2f:ad:cf:dd:f3:52:25:ef:af:91:04:0c:
1e:8d:22:4b:96:ff:17:b6:83:61:c7:f9:29:4c:0f:
a1:88:06:b1:62:f8:a0:9e:4d:48:e4:6b:f0:71:0f:
d5:d8:05:31:ff:62:46:3c:7b:64:c7:1c:5d:2e:16:
ca:4f:1a:76:d1:de:b1:ad:66:0a:a7:17:87:5c:73:
03:09:c8:27:6a:75:a8:bd:8c:1a:e0:5e:74:19:cb:
65:b3:41:df:20:ce:60:18:37:f4:df:17:a8:23:77:
8c:bd:b4:86:a0:b0:04:41:3b:27:ef:6d:aa:d2:e2:
d3:45:a9:fc:86:49:73:a3:80:3f:ad:55:2b:6d:fd:
7d:e0:35:94:93:3b:bf:81:5d:6d:b1:6e:8f:9c:2e:
f5:19:91:19:3a:b5:56:b1:9f:47:24:a9:ae:6f:00:
a8:d5:f6:c3:85:e5:0b:d8:6d:0c:a9:fa:38:a2:44:
68:78:cc:67:f2:f7:98:5d:c6:74:7a:e6:cf:1f:d5:
0b:0e:75:86:a2:e7:9f:31:88:b3:f1:31:7c:bf:15:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E4:AE:51:09:96:BB:ED:C8:A4:23:F7:30:FB:A2:26:ED:40:E3:54
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f0:cc:a6:c3:8f:f1:0e:ea:31:d9:79:54:24:f0:4a:d9:b4:
0a:3c:2e:4a:aa:de:89:0d:85:63:90:e1:cd:c3:3c:1b:82:ab:
b1:be:93:aa:0d:3b:88:9d:d6:92:96:b2:ab:03:ad:a4:86:6b:
c0:e2:22:14:b9:cb:a4:41:c7:bb:85:f9:f1:ed:b6:62:9a:80:
42:b9:30:5f:04:7b:dd:4c:49:47:b7:60:9d:69:5e:34:ab:ef:
c1:54:fc:db:56:24:f1:eb:ec:19:12:85:c1:05:24:86:0d:d7:
22:24:23:06:40:91:eb:e8:e5:30:9d:c9:50:3f:91:c5:b6:e8:
82:51:60:d4:02:92:6a:e7:e3:82:f0:ec:16:88:80:57:89:24:
5c:9a:d2:81:60:e4:85:c4:c0:30:35:06:75:72:12:13:fb:e8:
13:3f:e6:70:40:76:24:5f:d2:40:80:44:e1:8a:6e:8c:1a:76:
bd:9c:24:fb:69:2a:66:3b:39:f1:7c:14:8e:84:bb:79:54:8f:
b2:03:f6:2c:71:68:e5:54:eb:80:b0:a8:73:eb:49:c5:66:45:
c6:71:a3:c6:83:e9:e9:0d:e1:a3:2b:23:40:35:9d:f7:4b:03:
04:4a:6f:75:b9:cf:e0:76:3c:7e:7a:4c:53:4f:49:f3:20:13:
15:76:15:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRSg1qfIbtVQoQFROb9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGZjMWU0ZGVmYzQ3MWM5ZmRiN2ZkYWRiOTg5NTU2M2Rh
Zjk5OWMwHhcNMjUwNjI4MTMwMTM5WhcNMjUwNjI5MTMwMTM5WjAzMTEwLwYDVQQD
Eyg2N2U0YWU1MTA5OTZiYmVkYzhhNDIzZjczMGZiYTIyNmVkNDBlMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOh2Az9UqURGTNcHh2CGEd/E5WYa
L1Tc1xEAd9zwZzqcWLXhNePRjTE12AVP/RQvrc/d81Il76+RBAwejSJLlv8XtoNh
x/kpTA+hiAaxYvignk1I5GvwcQ/V2AUx/2JGPHtkxxxdLhbKTxp20d6xrWYKpxeH
XHMDCcgnanWovYwa4F50Gctls0HfIM5gGDf03xeoI3eMvbSGoLAEQTsn722q0uLT
Ran8hklzo4A/rVUrbf194DWUkzu/gV1tsW6PnC71GZEZOrVWsZ9HJKmubwCo1fbD
heUL2G0Mqfo4okRoeMxn8veYXcZ0eubPH9ULDnWGouefMYiz8TF8vxVTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfkrlEJlrvtyKQj9zD7oibtQONUMB8GA1UdIwQY
MBaAFFxPweTe/Eccn9t/2tuYlVY9r5mcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQt
N2QwZWUyZTk5MGY1LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQtN2QwZWUyZTk5MGY1
LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvDMpsOP
8Q7qMdl5VCTwStm0CjwuSqreiQ2FY5DhzcM8G4Krsb6Tqg07iJ3WkpayqwOtpIZr
wOIiFLnLpEHHu4X58e22YpqAQrkwXwR73UxJR7dgnWleNKvvwVT821Yk8evsGRKF
wQUkhg3XIiQjBkCR6+jlMJ3JUD+RxbboglFg1AKSaufjgvDsFoiAV4kkXJrSgWDk
hcTAMDUGdXISE/voEz/mcEB2JF/SQIBE4YpujBp2vZwk+2kqZjs58XwUjoS7eVSP
sgP2LHFo5VTrgLCoc+tJxWZFxnGjxoPp6Q3hoysjQDWd90sDBEpvdbnP4HY8fnpM
U09J8yATFXYVOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:40 2025 by rpki-client