Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: 1vg4uodikYSNqBQPHcYIQHprVYNvWRT50YEskSwRl7w=
Subject key identifier: B3:90:34:C2:8F:23:99:41:91:AB:D9:CD:0D:15:14:8E:99:BA:F6:00
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 0197B7B2FBD9E553D4105CD61EA3BAEA6115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 09DB
Signing time: Sat 28 Jun 2025 18:00:49 +0000
Manifest this update: Sat 28 Jun 2025 18:00:49 +0000
Manifest next update: Sun 29 Jun 2025 18:00:49 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: 3c/ExOVBezfLfpwCatcH6vYTy/SuQ7IjHzBHR70xk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:fb:d9:e5:53:d4:10:5c:d6:1e:a3:ba:ea:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jun 28 18:00:49 2025 GMT
Not After : Jun 29 18:00:49 2025 GMT
Subject: CN=b39034c28f23994191abd9cd0d15148e99baf600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:c3:17:86:2f:9a:48:f6:ce:b5:84:04:69:
f5:3f:37:31:36:0b:d9:28:94:5d:85:3a:49:b6:00:
55:1f:95:40:25:1a:9b:ab:f4:9b:3e:21:10:c0:55:
fc:06:e5:55:f6:12:18:25:15:e3:58:5c:ee:f2:02:
d2:e8:cb:e1:4a:2e:8d:9e:db:3d:ab:41:a0:cb:59:
31:b9:47:a2:99:ca:b3:a3:4c:70:92:3d:c8:55:85:
64:e0:b2:1a:c9:f7:e2:34:b7:e7:47:d5:3a:fd:4f:
f5:36:ef:95:4c:59:42:a2:5d:e7:cd:27:fb:62:cd:
96:35:6a:ac:a5:b6:39:7e:b0:44:2d:2b:54:8f:ed:
98:bf:ef:9a:ff:dd:b3:38:6d:5d:cd:5d:05:8e:38:
b2:d1:e2:38:33:8b:72:42:0e:ad:90:bb:16:d3:ee:
b1:81:04:54:88:bd:50:44:22:31:54:53:ea:83:0d:
1f:de:fc:b7:ce:75:b3:b8:4e:e5:a1:83:88:19:cf:
f6:b9:64:d5:47:77:fa:72:d0:bc:62:f8:3b:35:f0:
d8:5f:a2:34:d2:9e:f1:e0:30:24:98:b9:84:fd:0a:
ee:65:62:c8:c7:06:53:2d:32:99:e0:40:43:22:0c:
fa:9d:a5:2f:7e:06:10:6f:40:5f:cd:46:73:ea:47:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:34:C2:8F:23:99:41:91:AB:D9:CD:0D:15:14:8E:99:BA:F6:00
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:85:00:6c:d9:05:92:21:ff:f3:b8:5f:ee:f3:b6:ee:88:94:
b6:96:ba:1f:43:98:b2:0f:0a:42:1e:a6:bf:72:82:62:81:2f:
f3:e6:94:8e:8c:df:ef:db:6a:f9:67:4b:cf:7f:32:10:5a:26:
7d:9d:d3:d6:3e:c1:e5:dc:9a:c6:06:6a:d6:57:bc:6e:78:49:
59:24:19:0c:03:c4:7f:fc:ba:87:de:e6:ae:eb:8d:6f:d9:72:
fa:4e:90:a7:4e:c6:d2:1b:0c:0d:14:42:a1:49:10:d0:52:f6:
d9:64:38:67:5b:1d:a5:69:54:86:c6:13:91:6c:ec:43:95:78:
18:27:ed:6b:cd:b3:3e:14:6f:4a:1d:6a:d4:31:ad:84:ed:5b:
45:4b:e4:dc:cc:5e:a6:0d:8c:52:63:21:e4:82:18:e1:f0:df:
e0:1b:81:4c:47:fa:41:5c:7c:c0:06:a6:13:32:5a:35:16:fb:
2a:ae:f1:7e:5d:1a:b8:6c:9b:6c:52:f2:32:11:3f:9d:7b:06:
86:dd:6a:d7:f6:97:91:8e:7e:69:e2:59:d7:3a:88:d5:c8:2b:
92:10:b5:15:3b:91:03:a0:c2:89:f7:ed:41:ba:6c:33:bb:4f:
69:79:60:67:04:9b:af:32:de:58:99:53:e7:d5:45:16:91:8f:
f7:3d:31:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3svvZ5VPUEFzWHqO66mEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjUwNjI4MTgwMDQ5WhcNMjUwNjI5MTgwMDQ5WjAzMTEwLwYDVQQD
EyhiMzkwMzRjMjhmMjM5OTQxOTFhYmQ5Y2QwZDE1MTQ4ZTk5YmFmNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyfDF4Yvmkj2zrWEBGn1PzcxNgvZ
KJRdhTpJtgBVH5VAJRqbq/SbPiEQwFX8BuVV9hIYJRXjWFzu8gLS6MvhSi6Nnts9
q0Ggy1kxuUeimcqzo0xwkj3IVYVk4LIayffiNLfnR9U6/U/1Nu+VTFlCol3nzSf7
Ys2WNWqspbY5frBELStUj+2Yv++a/92zOG1dzV0Fjjiy0eI4M4tyQg6tkLsW0+6x
gQRUiL1QRCIxVFPqgw0f3vy3znWzuE7loYOIGc/2uWTVR3f6ctC8Yvg7NfDYX6I0
0p7x4DAkmLmE/QruZWLIxwZTLTKZ4EBDIgz6naUvfgYQb0BfzUZz6kcbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOQNMKPI5lBkavZzQ0VFI6ZuvYAMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYUAbNkF
kiH/87hf7vO27oiUtpa6H0OYsg8KQh6mv3KCYoEv8+aUjozf79tq+WdLz38yEFom
fZ3T1j7B5dyaxgZq1le8bnhJWSQZDAPEf/y6h97mruuNb9ly+k6Qp07G0hsMDRRC
oUkQ0FL22WQ4Z1sdpWlUhsYTkWzsQ5V4GCfta82zPhRvSh1q1DGthO1bRUvk3Mxe
pg2MUmMh5IIY4fDf4BuBTEf6QVx8wAamEzJaNRb7Kq7xfl0auGybbFLyMhE/nXsG
ht1q1/aXkY5+aeJZ1zqI1cgrkhC1FTuRA6DCifftQbpsM7tPaXlgZwSbrzLeWJlT
59VFFpGP9z0xkw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:34 2025 by rpki-client