Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: 18IKod//xYvh6q0zkA3NgXtFWbPuGV6tUkWmJbUg3Y8=
Subject key identifier: 0A:55:8B:92:A7:CF:99:37:6B:52:97:5D:57:E3:45:66:0D:6F:B7:FC
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 0197B8213169A0A1686E114F64925A1A6A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: fjfqVm64SkM60asv0S+lCu7oCJCVA+x2UY/ZIPgpcmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:31:69:a0:a1:68:6e:11:4f:64:92:5a:1a:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=0a558b92a7cf99376b52975d57e345660d6fb7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:d0:fb:89:60:ea:c5:d2:9d:c6:cd:25:56:
22:91:03:3f:5c:37:08:24:97:e5:f4:21:8c:c4:c3:
1c:17:16:70:43:e5:6a:20:34:c2:e3:c8:2a:14:91:
79:f5:69:14:aa:6c:8a:89:5e:23:90:f2:3d:db:97:
e8:7e:1f:2f:80:6e:6b:47:c0:f6:66:f9:33:cc:ab:
87:0f:56:e8:64:c7:65:e2:bd:96:78:f3:6c:3f:30:
d9:2a:8e:6f:06:c9:16:8e:8a:e2:1b:be:3b:11:31:
92:a0:bf:cc:7c:f7:8c:a5:ae:0d:57:75:34:38:30:
8c:11:b4:79:f5:3e:12:27:81:28:0f:04:ec:d6:92:
b1:2c:7a:ad:82:ed:10:e6:39:a6:3a:7b:f7:47:f6:
bd:d9:14:1b:9c:fa:74:91:f9:6b:0c:54:47:21:d2:
02:4c:a7:5d:a0:a2:e7:03:26:f9:47:49:41:8b:b7:
ee:59:99:c5:2a:32:03:25:6d:b6:67:cb:e9:89:59:
4c:97:f1:7a:e5:d3:cb:5d:37:2a:57:9b:29:55:da:
5c:16:75:f9:40:0d:30:99:85:51:6a:13:ec:6d:28:
96:b8:3e:04:e2:f6:d6:1a:b8:72:83:f6:2f:0b:83:
ef:42:df:eb:cd:fb:c7:fb:2e:76:29:a6:d7:5e:b5:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:8B:92:A7:CF:99:37:6B:52:97:5D:57:E3:45:66:0D:6F:B7:FC
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f6:cb:a2:29:9b:41:68:87:bf:72:08:b9:38:84:0c:9e:d9:
e5:2a:15:e5:56:25:bc:65:38:35:5a:80:91:bc:15:66:a1:ff:
82:d4:78:77:b4:a0:7d:8b:63:1f:f9:76:8e:80:81:b3:0a:a1:
4e:fe:bb:6a:e1:ad:56:31:d4:a9:52:38:28:81:91:bf:5f:22:
1c:bc:04:df:3a:f5:c4:0c:9d:43:db:af:15:56:94:91:77:32:
43:5c:f3:9b:fa:af:72:48:61:bb:81:e7:8a:81:cb:b6:8d:a6:
70:1e:ae:e9:3f:89:ab:3b:cb:a8:af:7e:1c:ab:5c:04:ff:66:
39:f7:e3:2d:ba:e2:5b:a3:20:0c:a1:16:b1:49:0e:d8:df:ce:
4a:a8:f5:7d:0d:82:17:f6:9b:5e:e1:12:09:e0:db:d9:c5:f0:
69:5b:bf:ae:3d:0a:69:bf:d0:2a:45:3b:f6:a5:8d:a2:43:45:
ae:f3:bd:c6:dc:82:5a:5b:b1:cf:b9:e1:74:07:ab:d4:af:67:
9f:aa:9d:b6:ac:ba:c2:c3:0a:08:19:8a:9e:ed:e0:30:0e:2b:
90:44:db:01:b0:a0:95:ed:81:3f:62:03:27:b7:de:1d:ec:73:
70:4c:10:ca:d7:a9:8c:75:2c:0b:c5:6f:f4:02:08:47:de:4c:
85:19:71:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITFpoKFobhFPZJJaGmplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi
NjdlNDkwHhcNMjUwNjI4MjAwMTEyWhcNMjUwNjI5MjAwMTEyWjAzMTEwLwYDVQQD
EygwYTU1OGI5MmE3Y2Y5OTM3NmI1Mjk3NWQ1N2UzNDU2NjBkNmZiN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5TQ+4lg6sXSncbNJVYikQM/XDcI
JJfl9CGMxMMcFxZwQ+VqIDTC48gqFJF59WkUqmyKiV4jkPI925fofh8vgG5rR8D2
ZvkzzKuHD1boZMdl4r2WePNsPzDZKo5vBskWjoriG747ETGSoL/MfPeMpa4NV3U0
ODCMEbR59T4SJ4EoDwTs1pKxLHqtgu0Q5jmmOnv3R/a92RQbnPp0kflrDFRHIdIC
TKddoKLnAyb5R0lBi7fuWZnFKjIDJW22Z8vpiVlMl/F65dPLXTcqV5spVdpcFnX5
QA0wmYVRahPsbSiWuD4E4vbWGrhyg/YvC4PvQt/rzfvH+y52KabXXrUigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApVi5Knz5k3a1KXXVfjRWYNb7f8MB8GA1UdIwQY
MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt
YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3
LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfbLoimb
QWiHv3IIuTiEDJ7Z5SoV5VYlvGU4NVqAkbwVZqH/gtR4d7SgfYtjH/l2joCBswqh
Tv67auGtVjHUqVI4KIGRv18iHLwE3zr1xAydQ9uvFVaUkXcyQ1zzm/qvckhhu4Hn
ioHLto2mcB6u6T+JqzvLqK9+HKtcBP9mOffjLbriW6MgDKEWsUkO2N/OSqj1fQ2C
F/abXuESCeDb2cXwaVu/rj0Kab/QKkU79qWNokNFrvO9xtyCWluxz7nhdAer1K9n
n6qdtqy6wsMKCBmKnu3gMA4rkETbAbCgle2BP2IDJ7feHexzcEwQytepjHUsC8Vv
9AIIR95MhRlxGw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:09:37 2025 by rpki-client