Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: Xyl9VybwbjUTcc4gyDREwFL0Y3e+s4xjbIwKhM5pwME=
Subject key identifier: C0:90:28:B6:1D:A6:BD:C1:0F:34:D0:BB:3E:1C:59:99:95:30:B5:DC
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 0197B74586F9282E5AEA9EAA4C0ACC7F30CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 8B
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: ypv7piGNcUMrnJrETBoueq0kafO53qTQCjVvttpIu+4=)
3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:86:f9:28:2e:5a:ea:9e:aa:4c:0a:cc:7f:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=c09028b61da6bdc10f34d0bb3e1c59999530b5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:8c:b2:ae:d7:13:6d:02:0f:08:0f:53:29:
89:79:7b:16:7d:81:61:df:0c:8c:e5:20:ce:4f:24:
d0:bd:a7:19:31:18:e2:e7:42:f7:5a:39:c7:0b:03:
3d:92:d2:8f:a6:5b:b9:ed:85:5d:81:e2:18:e1:4b:
c4:7e:b6:d8:02:5a:ef:fa:d7:92:ec:e9:b4:44:6c:
62:93:98:be:52:45:99:68:1b:71:46:45:95:28:25:
a2:a0:4f:2a:a7:18:f7:ba:5f:30:16:0f:63:d0:c4:
a0:d5:c0:ba:60:60:f3:6e:0d:3f:88:e7:bf:93:27:
0a:96:26:62:90:43:f2:89:e5:5d:3e:b4:e8:2a:26:
47:20:08:fc:b7:62:b7:3d:53:65:15:62:dd:10:c3:
81:c8:9e:13:33:e5:85:c2:df:89:b4:df:c6:b5:5b:
76:ad:54:2b:bd:40:b3:ad:32:5b:ca:6a:49:e4:4d:
80:f8:5c:d1:ce:b9:8e:1a:82:0a:cc:da:01:cd:1a:
ee:bf:ad:0a:d0:24:c7:8a:7d:2b:59:ed:d6:a9:cf:
10:51:9f:85:22:c7:85:ee:b4:ec:73:45:1c:7f:c5:
51:87:7a:72:05:76:86:eb:a6:bb:91:0d:e0:58:c0:
b6:04:a8:7c:25:91:59:66:40:bd:3e:9c:6a:74:bc:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:28:B6:1D:A6:BD:C1:0F:34:D0:BB:3E:1C:59:99:95:30:B5:DC
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:ef:11:db:ce:89:3d:40:6d:19:e6:32:e1:ff:61:7b:7e:
c3:71:eb:47:eb:af:10:5b:4e:e3:e7:9d:23:07:fd:de:0a:80:
d0:8d:09:5a:1b:bf:bb:66:19:d0:56:e1:93:2a:eb:67:08:05:
90:09:41:00:59:6a:4a:91:a7:f9:b1:7c:8c:71:10:0e:ee:dd:
4d:70:28:35:9c:12:88:2a:38:fb:99:de:ef:43:87:77:9d:72:
4e:8f:53:c0:24:1e:c1:09:56:39:26:cc:59:a0:94:3a:4e:ec:
39:0c:23:dc:f2:e3:aa:1d:fc:d9:e3:d3:2f:ac:83:1e:78:4f:
ba:73:35:97:46:e7:9b:4e:26:72:d4:4b:a7:53:af:9a:42:3c:
ba:47:7e:15:f0:6e:a2:6d:06:73:7f:6a:54:1e:ba:90:6a:3b:
1c:4d:5a:c5:da:62:5d:fc:dd:58:7e:31:26:e7:cc:61:dc:11:
96:82:89:0a:6b:8d:3d:30:92:06:ed:d9:ed:8f:25:ac:25:ad:
db:2e:d1:57:a8:25:15:75:63:98:6c:05:1e:1d:3f:e1:92:9f:
83:4a:11:90:99:45:7b:a4:05:e0:6f:c2:83:79:2e:5e:c9:bb:
c8:ac:ba:2e:77:6a:30:6b:9e:8b:7f:7d:fc:a2:2e:37:d6:26:
fa:4f:55:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYb5KC5a6p6qTArMfzDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZWI3NTY1ZTIxY2Y1YjA3YmQ5NzFjOTZlY2MzYTRhNjRm
YWQyMDQwHhcNMjUwNjI4MTYwMTE2WhcNMjUwNjI5MTYwMTE2WjAzMTEwLwYDVQQD
EyhjMDkwMjhiNjFkYTZiZGMxMGYzNGQwYmIzZTFjNTk5OTk1MzBiNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaGMsq7XE20CDwgPUymJeXsWfYFh
3wyM5SDOTyTQvacZMRji50L3WjnHCwM9ktKPplu57YVdgeIY4UvEfrbYAlrv+teS
7Om0RGxik5i+UkWZaBtxRkWVKCWioE8qpxj3ul8wFg9j0MSg1cC6YGDzbg0/iOe/
kycKliZikEPyieVdPrToKiZHIAj8t2K3PVNlFWLdEMOByJ4TM+WFwt+JtN/GtVt2
rVQrvUCzrTJbympJ5E2A+FzRzrmOGoIKzNoBzRruv60K0CTHin0rWe3Wqc8QUZ+F
IseF7rTsc0Ucf8VRh3pyBXaG66a7kQ3gWMC2BKh8JZFZZkC9PpxqdLxLnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCQKLYdpr3BDzTQuz4cWZmVMLXcMB8GA1UdIwQY
MBaAFF/rdWXiHPWwe9lxyW7MOkpk+tIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZWViZjktMGUwNS00OGI2LTg0NTAt
ZGNmNWI4NjY5M2M5LzEvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZWViZjktMGUwNS00OGI2LTg0NTAtZGNmNWI4NjY5M2M5
LzEvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs/vEdvO
iT1AbRnmMuH/YXt+w3HrR+uvEFtO4+edIwf93gqA0I0JWhu/u2YZ0FbhkyrrZwgF
kAlBAFlqSpGn+bF8jHEQDu7dTXAoNZwSiCo4+5ne70OHd51yTo9TwCQewQlWOSbM
WaCUOk7sOQwj3PLjqh382ePTL6yDHnhPunM1l0bnm04mctRLp1OvmkI8ukd+FfBu
om0Gc39qVB66kGo7HE1axdpiXfzdWH4xJufMYdwRloKJCmuNPTCSBu3Z7Y8lrCWt
2y7RV6glFXVjmGwFHh0/4ZKfg0oRkJlFe6QF4G/Cg3kuXsm7yKy6LndqMGuei399
/KIuN9Ym+k9VDQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:01:05 2025 by rpki-client