Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: MP7QX+HZA0Vq+XADlBkv+/YOR4jib9rSuZa1OzI3iJc=
Subject key identifier: FA:98:3E:5B:D4:3F:F4:88:6C:39:FF:6D:02:ED:C6:3C:CA:5E:4F:79
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 0197B5FC04FFFC45CE7F4AA1C1785B7766C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 0F5F
Signing time: Sat 28 Jun 2025 10:01:21 +0000
Manifest this update: Sat 28 Jun 2025 10:01:21 +0000
Manifest next update: Sun 29 Jun 2025 10:01:21 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: fyoC+Gw/6nJSCqcmv4Ay0AObrf+d8e4F5LTVYAm2zzs=)
2: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (hash: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:04:ff:fc:45:ce:7f:4a:a1:c1:78:5b:77:66:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jun 28 10:01:21 2025 GMT
Not After : Jun 29 10:01:21 2025 GMT
Subject: CN=fa983e5bd43ff4886c39ff6d02edc63cca5e4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:f5:b9:1d:a5:29:65:46:aa:21:c9:48:f9:
6e:0e:db:60:39:5c:2e:00:61:10:73:9f:61:29:04:
3e:9c:eb:10:ba:01:42:91:f6:25:00:4d:f9:c4:07:
0a:37:49:11:9e:6c:9d:2d:0a:cf:12:43:bf:1e:b8:
72:b2:d4:2a:c0:69:1f:ee:9f:35:35:bf:ed:55:3e:
9f:b2:6c:fb:71:5c:ee:39:43:7c:93:6e:3f:32:2b:
6e:fd:01:b1:b2:4c:fd:48:14:e3:e1:cf:a5:d4:6c:
93:e4:78:2b:4a:21:9d:a7:a6:53:aa:08:4c:bf:df:
c1:64:b0:28:23:23:4e:26:07:bd:0a:03:eb:53:d1:
62:c1:37:ea:68:7b:8a:87:f2:41:94:b8:2c:0a:d6:
e1:ba:60:68:3e:cc:ec:7b:90:56:80:cf:01:c2:8a:
90:1a:bc:b9:72:42:bb:80:bc:10:fc:b9:48:33:27:
9c:cb:40:12:a2:11:ef:98:92:7f:25:a7:5f:40:76:
57:cd:17:8c:1f:d0:48:83:cd:42:3d:fb:98:a2:5f:
43:5c:4e:93:c2:a3:e9:5d:7b:49:57:d0:28:ac:f9:
5d:85:3a:a9:30:4b:4a:e1:3c:44:12:f6:0e:92:ab:
81:20:ae:8a:3a:cf:7a:96:4e:f0:24:53:fe:13:85:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:98:3E:5B:D4:3F:F4:88:6C:39:FF:6D:02:ED:C6:3C:CA:5E:4F:79
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e8:a7:ea:ac:0d:c2:ba:50:88:80:85:a2:a1:43:6c:8a:d3:
50:99:c0:42:c8:a5:85:19:d3:40:1f:bc:42:fc:34:08:e0:61:
1a:06:3f:79:d2:91:13:2f:d9:84:2a:f6:af:ac:1c:ed:91:97:
01:09:f1:a6:48:2e:91:2f:df:b7:94:19:07:b2:38:5b:33:80:
eb:4d:f6:87:94:8a:fe:41:80:d2:a5:92:b8:b2:29:2f:16:ff:
9c:b5:19:c4:fa:09:d6:e4:41:fd:3e:70:f8:4b:ef:af:9d:8d:
8b:97:9c:e9:95:76:1f:54:e1:27:d3:02:3a:f7:58:f2:23:e8:
79:a5:81:fb:3f:93:31:99:7c:5a:b9:a6:46:0a:61:bc:59:6f:
b8:20:e1:e4:fb:9c:f7:d4:dd:d5:f2:be:da:9b:38:ec:2e:f2:
4f:de:c6:86:0e:59:65:f9:7d:8b:3b:73:72:9d:65:5f:05:0c:
3d:8a:e1:3c:de:d8:65:6b:1d:73:06:79:bf:fc:40:91:45:f2:
5a:0a:b7:be:8b:80:dd:c4:33:44:e5:3b:80:c0:45:3b:3c:ca:
4f:cb:d8:cb:24:19:9e:e8:a4:3b:0c:3d:75:04:e7:27:0b:7d:
a0:74:d9:03:a7:89:48:23:ca:07:ad:69:ff:27:9e:bc:bf:22:
df:32:0f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/AT//EXOf0qhwXhbd2bGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGQzZTVkOTk0YmVjZDNmMjU4YzQxZGYzOWYxZjYzZWM1
NjNlMWQwHhcNMjUwNjI4MTAwMTIxWhcNMjUwNjI5MTAwMTIxWjAzMTEwLwYDVQQD
EyhmYTk4M2U1YmQ0M2ZmNDg4NmMzOWZmNmQwMmVkYzYzY2NhNWU0Zjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmj1uR2lKWVGqiHJSPluDttgOVwu
AGEQc59hKQQ+nOsQugFCkfYlAE35xAcKN0kRnmydLQrPEkO/HrhystQqwGkf7p81
Nb/tVT6fsmz7cVzuOUN8k24/Mitu/QGxskz9SBTj4c+l1GyT5HgrSiGdp6ZTqghM
v9/BZLAoIyNOJge9CgPrU9FiwTfqaHuKh/JBlLgsCtbhumBoPszse5BWgM8BwoqQ
Gry5ckK7gLwQ/LlIMyecy0ASohHvmJJ/JadfQHZXzReMH9BIg81CPfuYol9DXE6T
wqPpXXtJV9AorPldhTqpMEtK4TxEEvYOkquBIK6KOs96lk7wJFP+E4WcEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqYPlvUP/SIbDn/bQLtxjzKXk95MB8GA1UdIwQY
MBaAFOdNPl2ZS+zT8ljEHfOfH2PsVj4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMt
YzIzZDdhZGJlYmRjLzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMtYzIzZDdhZGJlYmRj
LzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqein6qwN
wrpQiICFoqFDbIrTUJnAQsilhRnTQB+8Qvw0COBhGgY/edKREy/ZhCr2r6wc7ZGX
AQnxpkgukS/ft5QZB7I4WzOA6032h5SK/kGA0qWSuLIpLxb/nLUZxPoJ1uRB/T5w
+Evvr52Ni5ec6ZV2H1ThJ9MCOvdY8iPoeaWB+z+TMZl8WrmmRgphvFlvuCDh5Puc
99Td1fK+2ps47C7yT97Ghg5ZZfl9iztzcp1lXwUMPYrhPN7YZWsdcwZ5v/xAkUXy
Wgq3vouA3cQzROU7gMBFOzzKT8vYyyQZnuikOww9dQTnJwt9oHTZA6eJSCPKB61p
/yeevL8i3zIP2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:39 2025 by rpki-client