Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: YHgl9/J+dUnOih69bPv2o3RYNHzKmrTMnYsXR1uc9O0=
Subject key identifier: D4:0B:64:46:54:D1:31:59:BC:F7:DE:81:9D:52:BF:BB:76:BD:8A:E5
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0197C4C9D9972BC6EDF6378EE20703FCA323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 04E5
Signing time: Tue 01 Jul 2025 07:00:52 +0000
Manifest this update: Tue 01 Jul 2025 07:00:52 +0000
Manifest next update: Wed 02 Jul 2025 07:00:52 +0000
Files and hashes: 1: 6MomF24SoPaNk6ERP73wy8mqx3c.roa (hash: IjQTHFK2Z40w4CuSFshJCdouXIm82jCIjL5J78qv4kA=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: HKFIp/QDR3o/FbWzvzm+KBojQ2MGy5ndZ6OKtrZGJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:d9:97:2b:c6:ed:f6:37:8e:e2:07:03:fc:a3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Jul 1 07:00:52 2025 GMT
Not After : Jul 2 07:00:52 2025 GMT
Subject: CN=d40b644654d13159bcf7de819d52bfbb76bd8ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:68:25:35:52:e9:bc:1e:64:09:fc:0f:5b:
0b:c6:c4:3b:4f:86:cc:55:19:2e:eb:74:8f:13:5c:
f1:25:b4:d3:67:e0:eb:f1:16:f8:55:9e:78:a9:49:
25:9f:6f:7f:07:44:89:d3:e3:56:a8:a3:6f:45:fa:
c4:3f:fb:3e:6c:c2:01:61:cd:e1:8b:5c:20:86:50:
e4:dd:95:87:2c:c0:57:8e:55:a8:dc:1f:d4:9a:7b:
29:39:7a:3d:e8:ec:d5:c0:02:03:06:9e:ca:80:43:
cd:fc:ef:06:b3:d9:0c:90:6d:e1:bd:1d:3a:50:b9:
14:50:59:40:98:26:4b:ac:bd:88:44:bc:6f:43:7a:
0a:73:2a:e7:ee:6b:ea:82:a9:90:95:db:c3:27:5c:
7a:fb:03:9b:c6:fb:2b:7b:dc:d1:ce:7f:c5:1c:ef:
1a:7f:29:c8:e1:7f:06:9c:d2:13:66:fa:0f:0a:95:
fe:62:06:de:5d:89:12:db:f4:4c:ad:7b:62:56:90:
7d:0c:8f:21:84:c9:4b:f4:1c:a3:30:d0:0e:08:63:
e8:44:3f:3d:bd:5b:a9:8e:2b:ab:31:61:7b:06:63:
ad:76:51:db:34:97:f8:68:e0:6b:73:ef:e1:b6:b3:
1e:8d:04:61:a6:7d:b0:b5:67:b5:10:8e:4e:f3:e2:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0B:64:46:54:D1:31:59:BC:F7:DE:81:9D:52:BF:BB:76:BD:8A:E5
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:dc:4a:7e:1a:18:55:9b:61:ac:66:bd:e4:78:52:4f:4d:
cf:bb:fd:1b:a2:e2:a6:93:eb:df:2d:e2:70:0c:de:1b:41:e7:
82:a7:d0:9c:db:2e:88:d8:21:b3:ba:d0:6c:a2:8f:d6:b2:7d:
cf:01:5c:fd:92:5e:a3:0d:d1:46:9b:1a:ac:2a:09:08:02:b4:
a0:5d:22:b7:77:e9:ff:b9:a3:bb:0d:2e:9c:3c:5f:b3:e3:ad:
ac:d4:88:3b:30:9e:3f:fd:3e:ab:86:5f:50:c0:0a:a3:45:45:
29:94:d8:81:00:54:42:f3:26:25:61:ab:f6:5d:ea:48:cf:3d:
1a:d4:84:00:2d:f3:28:07:ad:66:97:a7:40:bf:15:35:0f:6c:
fe:c2:0f:8a:82:40:c4:8d:9c:09:af:8c:91:ed:01:90:af:e5:
3d:91:90:6e:a5:cd:af:6d:e4:b1:e0:6c:6e:70:4f:96:ab:02:
61:4c:86:36:41:1a:62:1a:80:59:56:63:58:5d:c3:79:46:98:
61:cb:14:18:e5:1e:cd:9a:8c:fe:d2:53:9c:a0:1a:7c:de:08:
80:82:12:45:47:21:c8:3f:18:3f:56:93:45:7e:e0:40:c3:6f:
2f:38:88:fc:0e:44:8b:c3:44:ed:fe:c9:2b:c3:0d:ac:1b:d1:
7f:6d:62:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEydmXK8bt9jeO4gcD/KMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmM1OWY4Zjc1NDRmMWVhNWJhNWMxOGIzOGUyNTczNTE3
YzkxMzIwHhcNMjUwNzAxMDcwMDUyWhcNMjUwNzAyMDcwMDUyWjAzMTEwLwYDVQQD
EyhkNDBiNjQ0NjU0ZDEzMTU5YmNmN2RlODE5ZDUyYmZiYjc2YmQ4YWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgRoJTVS6bweZAn8D1sLxsQ7T4bM
VRku63SPE1zxJbTTZ+Dr8Rb4VZ54qUkln29/B0SJ0+NWqKNvRfrEP/s+bMIBYc3h
i1wghlDk3ZWHLMBXjlWo3B/UmnspOXo96OzVwAIDBp7KgEPN/O8Gs9kMkG3hvR06
ULkUUFlAmCZLrL2IRLxvQ3oKcyrn7mvqgqmQldvDJ1x6+wObxvsre9zRzn/FHO8a
fynI4X8GnNITZvoPCpX+YgbeXYkS2/RMrXtiVpB9DI8hhMlL9ByjMNAOCGPoRD89
vVupjiurMWF7BmOtdlHbNJf4aOBrc+/htrMejQRhpn2wtWe1EI5O8+JIrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQLZEZU0TFZvPfegZ1Sv7t2vYrlMB8GA1UdIwQY
MBaAFMa8Wfj3VE8epbpcGLOOJXNRfJEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAt
M2NhNDA5YjUzMTFmLzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAtM2NhNDA5YjUzMTFm
LzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfTcSn4a
GFWbYaxmveR4Uk9Nz7v9G6LippPr3y3icAzeG0HngqfQnNsuiNghs7rQbKKP1rJ9
zwFc/ZJeow3RRpsarCoJCAK0oF0it3fp/7mjuw0unDxfs+OtrNSIOzCeP/0+q4Zf
UMAKo0VFKZTYgQBUQvMmJWGr9l3qSM89GtSEAC3zKAetZpenQL8VNQ9s/sIPioJA
xI2cCa+Mke0BkK/lPZGQbqXNr23kseBsbnBPlqsCYUyGNkEaYhqAWVZjWF3DeUaY
YcsUGOUezZqM/tJTnKAafN4IgIISRUchyD8YP1aTRX7gQMNvLziI/A5Ei8NE7f7J
K8MNrBvRf21iZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:54:21 2025 by rpki-client