Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: C9SqnMDziXtFgZgLghFoAvsBx0mVr441k5TvNJjjFOw=
Subject key identifier: AD:E3:0B:76:05:B7:FF:21:3F:CD:69:77:10:89:5F:ED:21:8E:FE:F2
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 0197B70EF92EB73D5395AD05A2D52CB6D1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: Kzz4g+1dHaV/K5P4ovNzw2L2kan8fNmsVXml4F/NItk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f9:2e:b7:3d:53:95:ad:05:a2:d5:2c:b6:d1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=ade30b7605b7ff213fcd697710895fed218efef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:f1:5b:b8:38:22:ef:89:19:71:d6:dd:20:
2c:66:24:28:52:71:50:3f:07:2e:04:b3:d1:14:94:
bf:2b:0b:b9:91:84:9f:5c:86:cc:da:d1:b1:5c:1e:
83:58:e3:a8:fc:da:67:a7:e0:cc:8c:52:89:9d:46:
a2:d4:13:04:44:dc:75:08:e4:b6:04:b6:71:72:22:
e7:37:34:09:84:c9:9b:9b:20:90:76:b2:cb:f1:da:
dd:93:7b:ef:58:2f:89:7b:fd:51:b3:d3:62:1b:86:
13:33:68:40:4e:08:fd:24:ee:7b:91:b8:62:4a:ca:
24:1f:c1:51:6d:49:d8:bb:bb:5c:f9:b7:bd:f2:68:
f1:c0:4c:9e:a5:3a:84:e3:11:79:ed:d5:43:8d:2e:
5b:e1:ac:9c:3a:49:f0:fc:6d:17:52:8a:6a:c2:8d:
1e:32:40:fb:94:fe:08:87:5e:44:e0:ef:b6:b3:51:
13:da:5b:c2:a2:09:40:23:b9:ee:14:2c:fc:18:77:
fd:e8:3a:cc:ff:7c:73:2f:6d:57:7c:be:90:d4:bc:
51:c5:f0:72:90:89:75:bc:c4:ae:85:da:84:47:36:
bc:b3:59:4e:62:d8:ee:25:0e:6c:c4:5b:f0:af:86:
fa:64:c8:3f:e6:a5:18:03:f1:73:81:06:39:8e:ab:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:0B:76:05:B7:FF:21:3F:CD:69:77:10:89:5F:ED:21:8E:FE:F2
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:13:d6:17:e7:5a:fe:0e:71:84:cb:05:5a:d9:13:e7:90:06:
23:25:6e:ad:ee:16:65:68:1d:77:2a:01:f5:ad:b3:45:39:7e:
97:c2:05:1a:33:67:fd:76:42:5b:d2:f1:48:a8:d3:3e:a3:21:
38:63:3d:ad:cd:e9:19:2a:21:a4:48:69:1d:c0:71:51:7f:df:
ed:fe:a9:b0:f0:09:46:46:65:cb:7d:a8:ad:ee:3a:4f:2f:8b:
a2:f4:d8:28:ab:0c:f6:eb:fc:55:41:05:cc:7e:87:fa:f8:32:
d7:da:f6:69:95:cc:0c:4b:8e:a2:6c:1f:6b:96:b6:1b:80:d4:
27:71:c6:1a:cd:69:83:27:30:cf:56:65:b7:f3:20:ee:04:b0:
a8:91:18:ff:de:9e:16:10:36:43:2c:be:ea:5a:72:ed:fb:f6:
f4:fe:e5:13:e5:b0:88:74:4d:f5:f9:18:fb:f5:a0:4c:f7:74:
b2:5f:56:77:c6:b0:7b:66:4c:37:43:b2:64:f3:2d:33:83:41:
84:b5:98:36:c2:8b:9e:2a:83:e6:61:59:95:8c:fa:59:4d:53:
4a:6e:2e:4e:23:a9:00:ce:75:e0:02:d6:59:40:87:10:08:6b:
ab:4f:3c:87:82:78:3f:71:43:d1:11:08:2d:64:06:72:98:49:
5a:63:3a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dvkutz1Tla0FotUsttHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdiNjE2MTE3MTllYzdjOGUwMDEyYjFhZmY3ZTgxZmM3
Njg5YmQwHhcNMjUwNjI4MTUwMTQxWhcNMjUwNjI5MTUwMTQxWjAzMTEwLwYDVQQD
EyhhZGUzMGI3NjA1YjdmZjIxM2ZjZDY5NzcxMDg5NWZlZDIxOGVmZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7TxW7g4Iu+JGXHW3SAsZiQoUnFQ
PwcuBLPRFJS/Kwu5kYSfXIbM2tGxXB6DWOOo/Npnp+DMjFKJnUai1BMERNx1COS2
BLZxciLnNzQJhMmbmyCQdrLL8drdk3vvWC+Je/1Rs9NiG4YTM2hATgj9JO57kbhi
SsokH8FRbUnYu7tc+be98mjxwEyepTqE4xF57dVDjS5b4aycOknw/G0XUopqwo0e
MkD7lP4Ih15E4O+2s1ET2lvCoglAI7nuFCz8GHf96DrM/3xzL21XfL6Q1LxRxfBy
kIl1vMSuhdqERza8s1lOYtjuJQ5sxFvwr4b6ZMg/5qUYA/FzgQY5jquouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3jC3YFt/8hP81pdxCJX+0hjv7yMB8GA1UdIwQY
MBaAFFxXthYRcZ7HyOABKxr/foH8dom9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1Mjgt
ZmEzMDcxYzQzNWYxLzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1MjgtZmEzMDcxYzQzNWYx
LzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBPWF+da
/g5xhMsFWtkT55AGIyVure4WZWgddyoB9a2zRTl+l8IFGjNn/XZCW9LxSKjTPqMh
OGM9rc3pGSohpEhpHcBxUX/f7f6psPAJRkZly32ore46Ty+LovTYKKsM9uv8VUEF
zH6H+vgy19r2aZXMDEuOomwfa5a2G4DUJ3HGGs1pgycwz1Zlt/Mg7gSwqJEY/96e
FhA2Qyy+6lpy7fv29P7lE+WwiHRN9fkY+/WgTPd0sl9Wd8awe2ZMN0OyZPMtM4NB
hLWYNsKLniqD5mFZlYz6WU1TSm4uTiOpAM514ALWWUCHEAhrq088h4J4P3FD0REI
LWQGcphJWmM6Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:56 2025 by rpki-client