Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: icIvpqzbEaiTNiDDvX67l9+jocqBlwvSxGpR7qKgSys=
Subject key identifier: 7E:69:BE:7A:E7:1C:B9:5D:A4:8F:E2:43:3B:CD:F5:DC:3D:D3:93:12
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 0197B6A0EEAC45B520F2A6CCCFB412AE49B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: 7a7XIDTRqZowhJHHvFvuT/xslxplWQjTwX5IXGzqSQg=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ee:ac:45:b5:20:f2:a6:cc:cf:b4:12:ae:49:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=7e69be7ae71cb95da48fe2433bcdf5dc3dd39312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:e1:cc:e6:02:c1:99:69:56:e4:f2:b6:32:
47:e7:0a:71:52:84:03:2c:f5:62:7d:95:5f:6d:07:
c7:68:fd:b0:e6:90:5c:8f:58:7d:b1:68:ba:33:57:
8b:60:15:2e:01:a1:f0:1b:93:d7:0d:98:18:10:9e:
f2:fb:4e:6e:bd:fe:56:d5:a7:cc:2a:7f:78:d5:67:
a9:37:44:40:f8:ca:21:05:4b:ce:7f:e6:18:b1:29:
bf:2d:52:7c:10:54:9c:9e:2d:92:5c:d6:15:d0:5f:
be:f6:0e:ca:9a:9c:ae:39:cb:96:f4:d6:ca:9f:7c:
24:38:07:68:e1:54:db:15:f1:c9:1f:6f:cc:0a:8b:
3a:28:24:1a:9f:c1:27:46:c2:80:7b:2c:61:38:ed:
59:66:0a:01:db:e9:93:55:63:3d:61:f3:a8:a6:36:
a9:cc:ef:2f:13:e9:59:67:c9:aa:ad:20:ca:19:06:
77:f4:fd:7f:2e:77:d9:d4:10:c4:b6:ba:e8:53:95:
67:ca:ad:15:b3:df:39:60:35:75:69:71:da:d2:4b:
e6:9d:21:ef:36:3e:3c:e0:8f:39:0a:ed:e7:57:aa:
37:29:a1:be:64:99:42:8d:d7:a9:1b:92:79:0c:8d:
06:7a:fd:9f:94:a7:8c:b6:65:2d:88:1d:ff:6b:1d:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:BE:7A:E7:1C:B9:5D:A4:8F:E2:43:3B:CD:F5:DC:3D:D3:93:12
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:c0:83:39:8a:be:b1:aa:5d:5f:9b:99:4c:48:a9:04:ea:
75:52:1a:e2:9b:b6:16:89:0d:86:95:95:7d:d5:14:df:aa:c4:
96:07:f5:f1:b1:a8:a3:0c:c1:22:e8:3d:e7:17:a8:1a:1c:f3:
25:15:2a:2f:ae:27:01:63:ca:3c:5c:f7:8a:c3:d0:12:d9:56:
a7:17:9d:c9:59:71:fd:70:01:d5:0b:cc:4c:5d:f9:f8:7c:75:
54:d9:d3:1c:55:fc:40:b9:dc:0a:ce:2b:cc:96:eb:14:6d:3b:
5a:94:67:00:c3:ec:7c:34:b6:3c:0b:2c:63:ac:44:49:f4:f8:
23:1f:83:a4:11:0d:00:eb:35:c3:9a:98:b1:0b:55:37:c1:86:
71:99:bd:3d:9d:f3:b8:57:ed:4c:80:1f:dd:30:71:09:6d:ce:
5c:43:a5:3a:a5:de:a6:a0:e1:89:53:ca:8a:05:bd:41:de:92:
13:1d:8f:2f:d6:2d:12:8c:91:33:13:86:2a:d5:2f:2e:91:4c:
52:41:39:db:5d:da:a6:3b:73:f1:93:e9:79:81:bb:83:15:00:
4b:e8:9f:a1:d0:96:26:82:5d:9b:71:9d:a6:39:c2:83:f6:32:
77:e2:ec:08:45:84:d6:ba:12:17:da:c6:53:99:29:02:d6:1d:
aa:85:1f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oO6sRbUg8qbMz7QSrkmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODExNjRjZTM4ODI1OTE4NmZiYTAxNWFjYzRiMGViNDhi
ZWI1NTIwHhcNMjUwNjI4MTMwMTI5WhcNMjUwNjI5MTMwMTI5WjAzMTEwLwYDVQQD
Eyg3ZTY5YmU3YWU3MWNiOTVkYTQ4ZmUyNDMzYmNkZjVkYzNkZDM5MzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuznhzOYCwZlpVuTytjJH5wpxUoQD
LPVifZVfbQfHaP2w5pBcj1h9sWi6M1eLYBUuAaHwG5PXDZgYEJ7y+05uvf5W1afM
Kn941WepN0RA+MohBUvOf+YYsSm/LVJ8EFScni2SXNYV0F++9g7KmpyuOcuW9NbK
n3wkOAdo4VTbFfHJH2/MCos6KCQan8EnRsKAeyxhOO1ZZgoB2+mTVWM9YfOopjap
zO8vE+lZZ8mqrSDKGQZ39P1/LnfZ1BDEtrroU5Vnyq0Vs985YDV1aXHa0kvmnSHv
Nj484I85Cu3nV6o3KaG+ZJlCjdepG5J5DI0Gev2flKeMtmUtiB3/ax2LSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5pvnrnHLldpI/iQzvN9dw905MSMB8GA1UdIwQY
MBaAFF6BFkzjiCWRhvugFazEsOtIvrVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9FV1RPT0lKWkdHLTZBVnJNU3c2MGktdFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82Yjk4MjItMmYzZS00NWJhLWEwMTgt
ODhiYTAyNzg2ZDBkLzEvWG9FV1RPT0lKWkdHLTZBVnJNU3c2MGktdFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82Yjk4MjItMmYzZS00NWJhLWEwMTgtODhiYTAyNzg2ZDBk
LzEvWG9FV1RPT0lKWkdHLTZBVnJNU3c2MGktdFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKTAgzmK
vrGqXV+bmUxIqQTqdVIa4pu2FokNhpWVfdUU36rElgf18bGoowzBIug95xeoGhzz
JRUqL64nAWPKPFz3isPQEtlWpxedyVlx/XAB1QvMTF35+Hx1VNnTHFX8QLncCs4r
zJbrFG07WpRnAMPsfDS2PAssY6xESfT4Ix+DpBENAOs1w5qYsQtVN8GGcZm9PZ3z
uFftTIAf3TBxCW3OXEOlOqXepqDhiVPKigW9Qd6SEx2PL9YtEoyRMxOGKtUvLpFM
UkE5213apjtz8ZPpeYG7gxUAS+ifodCWJoJdm3GdpjnCg/Yyd+LsCEWE1roSF9rG
U5kpAtYdqoUfaw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:35 2025 by rpki-client