Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: yI8iHi1EByVaf4DsO24Y6ZBnvbE/WugLhdWt4NXLa0Q=
Subject key identifier: 89:B1:CD:C9:23:EC:08:6D:7B:69:60:20:5A:90:59:92:2F:4E:6C:D9
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0197B5C4B969E0DF0577A4A32E7571D91086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1425
Signing time: Sat 28 Jun 2025 09:00:58 +0000
Manifest this update: Sat 28 Jun 2025 09:00:58 +0000
Manifest next update: Sun 29 Jun 2025 09:00:58 +0000
Files and hashes: 1: BhzUAWAmqJa_PA-L7yjY7FT9Af0.roa (hash: MUBzsjqvQyVXx3qdpZLrInMDFQqgnqT5UakUiyluBrA=)
2: HCKNxU6TCLkO6DVpZ3lA90mNVKU.roa (hash: Xh6VoAi/B2yrRWzytdRx21/eskMRRaoQHczwQgtUHG8=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: TSja1PFU5tEDbsYOIVjCAg8c1Is4cmtlTuaOIlV0PVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b9:69:e0:df:05:77:a4:a3:2e:75:71:d9:10:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jun 28 09:00:58 2025 GMT
Not After : Jun 29 09:00:58 2025 GMT
Subject: CN=89b1cdc923ec086d7b6960205a9059922f4e6cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:00:c2:08:f8:10:c1:0e:0c:16:7c:1a:9d:
09:cd:ea:30:f7:ba:22:6a:a7:80:aa:37:a7:fe:a3:
f8:29:2b:1a:5e:c0:d8:ca:fa:ce:3a:66:df:51:9d:
0b:b2:a7:48:75:81:5b:3a:56:ab:ef:a1:f3:44:df:
f5:5c:2a:b3:ea:dc:12:16:72:29:ce:d6:38:1c:e5:
76:ed:b9:56:3b:f8:09:b9:58:96:b7:2c:11:88:46:
b8:4d:b1:33:90:3f:41:dc:30:b9:e9:52:c6:d8:1c:
f1:62:e3:c3:99:31:7c:13:86:b6:02:6f:ad:bb:61:
57:9b:ce:52:01:2a:44:99:86:50:81:35:6a:72:13:
ab:53:dd:5a:b9:78:af:1f:b4:73:4a:5a:02:ff:97:
e7:74:2c:36:f8:22:fe:ec:ad:65:4e:c6:d6:84:77:
d2:1b:d4:b1:ce:a5:a8:1e:04:6f:af:bc:87:22:a7:
65:4c:fb:cd:5b:23:e8:d6:b4:73:d9:3d:5c:88:1e:
f3:15:e8:85:cf:2d:7e:e2:55:3a:bd:a7:27:55:60:
ce:3e:10:e2:fc:f4:b8:f7:b1:41:1f:d6:9d:f1:5a:
26:bb:eb:c1:35:d8:b8:6c:85:85:84:1a:bf:17:92:
b9:d0:6a:cc:7a:3d:e6:20:ea:32:96:3d:e2:4f:23:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:CD:C9:23:EC:08:6D:7B:69:60:20:5A:90:59:92:2F:4E:6C:D9
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1c:d5:75:28:c6:d1:fe:2e:e8:88:66:0c:61:81:d7:b9:da:
d3:11:d8:ec:3d:7a:06:7e:65:de:29:a8:07:74:56:fc:c2:c5:
4a:15:b4:59:ff:42:55:71:6d:c5:30:ba:57:02:4e:77:e8:57:
35:cf:63:d9:43:75:28:89:b7:ff:29:0d:6e:7a:bf:1e:7d:b7:
a3:c7:a8:f1:92:45:1b:06:48:f1:31:1a:34:15:d3:ec:b6:41:
7f:96:75:cc:e6:60:9d:f5:c5:ad:21:c2:6f:dc:a3:0e:f4:ad:
6e:dc:9f:e5:94:c8:f0:4d:18:cd:c2:3f:e4:d5:6d:a3:1a:b3:
0e:72:42:35:a2:3e:36:2c:d6:f8:59:7f:ad:70:a2:33:77:80:
a2:57:25:0f:e1:c1:1f:9b:ea:1e:c4:37:85:1e:49:a0:f2:c7:
de:f7:53:2b:4a:fe:40:ec:80:44:52:21:28:e7:75:f4:48:83:
8e:ae:b1:e2:12:23:14:76:0d:09:33:89:77:86:f9:99:b9:a2:
2e:72:a2:c0:90:72:eb:b2:f1:81:4f:18:54:11:e2:90:6c:55:
05:33:9f:c4:d8:19:3a:a1:82:3d:7f:1d:2b:84:ad:d4:25:94:
04:00:0e:2d:8f:36:3d:06:c8:83:d2:cb:f1:39:da:aa:f7:35:
58:ca:b9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xLlp4N8Fd6SjLnVx2RCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj
ZjUwYTEwHhcNMjUwNjI4MDkwMDU4WhcNMjUwNjI5MDkwMDU4WjAzMTEwLwYDVQQD
Eyg4OWIxY2RjOTIzZWMwODZkN2I2OTYwMjA1YTkwNTk5MjJmNGU2Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DYAwgj4EMEODBZ8Gp0Jzeow97oi
aqeAqjen/qP4KSsaXsDYyvrOOmbfUZ0LsqdIdYFbOlar76HzRN/1XCqz6twSFnIp
ztY4HOV27blWO/gJuViWtywRiEa4TbEzkD9B3DC56VLG2BzxYuPDmTF8E4a2Am+t
u2FXm85SASpEmYZQgTVqchOrU91auXivH7RzSloC/5fndCw2+CL+7K1lTsbWhHfS
G9SxzqWoHgRvr7yHIqdlTPvNWyPo1rRz2T1ciB7zFeiFzy1+4lU6vacnVWDOPhDi
/PS497FBH9ad8Vomu+vBNdi4bIWFhBq/F5K50GrMej3mIOoylj3iTyMdkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImxzckj7Ahte2lgIFqQWZIvTmzZMB8GA1UdIwQY
MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt
Y2Y2YTYzZTRlZmI2LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2
LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghzVdSjG
0f4u6IhmDGGB17na0xHY7D16Bn5l3imoB3RW/MLFShW0Wf9CVXFtxTC6VwJOd+hX
Nc9j2UN1KIm3/ykNbnq/Hn23o8eo8ZJFGwZI8TEaNBXT7LZBf5Z1zOZgnfXFrSHC
b9yjDvStbtyf5ZTI8E0YzcI/5NVtoxqzDnJCNaI+NizW+Fl/rXCiM3eAolclD+HB
H5vqHsQ3hR5JoPLH3vdTK0r+QOyARFIhKOd19EiDjq6x4hIjFHYNCTOJd4b5mbmi
LnKiwJBy67LxgU8YVBHikGxVBTOfxNgZOqGCPX8dK4St1CWUBAAOLY82PQbIg9LL
8Tnaqvc1WMq5xA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:35 2025 by rpki-client