Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: WStlsEX8eYFpqGX/RgpCI2ba1locUsy1e2r6r8A7+ds=
Subject key identifier: 8C:A5:21:90:12:61:B6:E0:FC:36:CF:E3:CD:A2:D7:E4:99:0E:A6:E4
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 0197B70EAD63D660A4D8FD598DAE7134ACEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 0FC6
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: rVDaRCd5IyHb8aIMLPTawQSaNicM9YyT8VKnAWON1uI=)
2: jokJ4cI7eIPzST9EcLtOSM-xX_8.roa (hash: TCebbhEEB8T5cCXDYMCJ8S4mvXhrW2F1v0Z6DU/4YuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ad:63:d6:60:a4:d8:fd:59:8d:ae:71:34:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=8ca521901261b6e0fc36cfe3cda2d7e4990ea6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:27:0d:0d:7e:25:a3:60:4a:56:79:1c:eb:
b5:05:fe:3f:45:e4:86:78:45:69:50:33:73:f8:c6:
eb:db:25:4b:9f:7b:5d:df:10:5b:db:6b:7f:bc:bf:
2d:03:10:4b:3c:b7:d6:e8:00:0f:37:62:a6:e2:35:
78:98:cd:2d:6e:98:48:cc:fc:7b:3d:b7:25:aa:2a:
79:a1:d3:cb:94:61:d9:27:ca:3e:81:f2:4f:9f:7f:
01:8c:a1:d2:e6:f5:5b:50:f2:87:08:e2:56:2e:b7:
09:04:34:a2:62:5f:f0:d2:e7:55:1a:9d:1d:0e:71:
8d:b8:bf:04:9a:0c:83:10:70:a6:17:62:fa:22:31:
8e:17:ca:7c:bc:d4:fc:e3:d3:10:2f:21:63:57:dc:
d1:86:96:3f:f8:4e:8b:fd:7f:13:00:78:30:88:93:
e7:79:d5:c9:3c:53:eb:21:63:d3:ca:71:c9:9a:c5:
45:dd:bf:33:1f:01:65:8f:41:c5:3b:1f:01:ac:cb:
5d:14:1d:8c:ad:ed:8a:c2:6e:80:d0:06:7e:7c:60:
24:db:a7:94:13:0d:e5:28:75:03:f0:07:e4:e7:ab:
7b:a5:93:8b:6f:56:9f:ac:2e:3d:5a:4c:a4:2f:7b:
aa:e7:27:20:00:61:d9:e7:81:7a:d8:cb:e1:74:07:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:21:90:12:61:B6:E0:FC:36:CF:E3:CD:A2:D7:E4:99:0E:A6:E4
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:bf:fa:cf:88:08:81:01:1e:81:8a:f7:30:be:64:36:6b:
a5:e0:b2:00:8f:32:b8:75:ff:23:d3:0d:db:e4:11:dd:dc:42:
09:75:e9:88:ac:66:0c:66:9e:3a:e3:a2:75:fc:39:4c:ed:e6:
28:cf:dd:89:54:5e:9b:3b:01:b9:b6:69:12:53:87:ea:f9:df:
e9:0d:e9:c8:d6:8b:1f:12:f3:bf:17:9d:3c:db:0b:88:10:11:
82:71:46:92:29:83:25:90:21:5a:4c:5a:59:3f:5d:68:dd:d6:
1e:0e:5f:74:cc:52:d4:a3:39:7f:64:a0:e4:f7:7c:37:3b:57:
b2:3c:fe:7b:e3:ba:5f:a8:28:27:92:ee:46:44:01:59:29:08:
9d:8a:24:e9:e0:e5:78:b2:f8:a0:a7:a5:19:f9:4e:d3:7a:a6:
83:a4:e6:e5:60:34:d6:94:6c:3f:7d:d8:9a:5f:bd:e0:5f:18:
4c:35:76:48:72:04:73:8d:91:73:55:6a:a6:e7:d7:0b:78:5f:
de:a3:59:e4:3e:6d:82:de:52:0b:e6:c5:6e:1d:ae:9d:38:38:
d2:c8:29:d5:d7:be:0c:8b:9a:2d:ef:ee:94:e1:e1:e5:90:77:
91:e4:a7:8d:11:bf:eb:e9:bf:d6:c1:0d:82:a9:72:8d:fd:0c:
2a:43:a3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dq1j1mCk2P1Zja5xNKzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm
NzJkOTMwHhcNMjUwNjI4MTUwMTIxWhcNMjUwNjI5MTUwMTIxWjAzMTEwLwYDVQQD
Eyg4Y2E1MjE5MDEyNjFiNmUwZmMzNmNmZTNjZGEyZDdlNDk5MGVhNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5UnDQ1+JaNgSlZ5HOu1Bf4/ReSG
eEVpUDNz+Mbr2yVLn3td3xBb22t/vL8tAxBLPLfW6AAPN2Km4jV4mM0tbphIzPx7
Pbclqip5odPLlGHZJ8o+gfJPn38BjKHS5vVbUPKHCOJWLrcJBDSiYl/w0udVGp0d
DnGNuL8EmgyDEHCmF2L6IjGOF8p8vNT849MQLyFjV9zRhpY/+E6L/X8TAHgwiJPn
edXJPFPrIWPTynHJmsVF3b8zHwFlj0HFOx8BrMtdFB2Mre2Kwm6A0AZ+fGAk26eU
Ew3lKHUD8Afk56t7pZOLb1afrC49WkykL3uq5ycgAGHZ54F62MvhdAdNFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIylIZASYbbg/DbP482i1+SZDqbkMB8GA1UdIwQY
MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt
NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh
LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFW/+s+I
CIEBHoGK9zC+ZDZrpeCyAI8yuHX/I9MN2+QR3dxCCXXpiKxmDGaeOuOidfw5TO3m
KM/diVRemzsBubZpElOH6vnf6Q3pyNaLHxLzvxedPNsLiBARgnFGkimDJZAhWkxa
WT9daN3WHg5fdMxS1KM5f2Sg5Pd8NztXsjz+e+O6X6goJ5LuRkQBWSkInYok6eDl
eLL4oKelGflO03qmg6Tm5WA01pRsP33Yml+94F8YTDV2SHIEc42Rc1VqpufXC3hf
3qNZ5D5tgt5SC+bFbh2unTg40sgp1de+DIuaLe/ulOHh5ZB3keSnjRG/6+m/1sEN
gqlyjf0MKkOjSg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:03 2025 by rpki-client