Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier: tZhtCPbht/s0GCGU+7aAu3xqPDwl+2TjMW8hKdHAEqU=
Subject key identifier: D6:85:61:C1:FB:E7:69:CF:11:11:5D:AC:69:26:21:0D:8D:43:C2:9B
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 0197B96B3F8E6BA029729D50E46B2D3686E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number: 0E2C
Signing time: Sun 29 Jun 2025 02:01:42 +0000
Manifest this update: Sun 29 Jun 2025 02:01:42 +0000
Manifest next update: Mon 30 Jun 2025 02:01:42 +0000
Files and hashes: 1: IfVj5aDzwI_pIfsi19tG8SlhNUU.roa (hash: 6w13xfZ6L14mhKJP/CtzgVaPjgCMlMEt5Ve3cKKBCSc=)
2: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
3: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
4: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
5: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: vyg12BNkoO/gsvTS3SL3ZEjpi8zuNa/7jn7BAeV/ZiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:3f:8e:6b:a0:29:72:9d:50:e4:6b:2d:36:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jun 29 02:01:42 2025 GMT
Not After : Jun 30 02:01:42 2025 GMT
Subject: CN=d68561c1fbe769cf11115dac6926210d8d43c29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:90:d3:87:b9:02:22:e6:1c:07:a9:88:ac:
88:0c:1a:fb:cd:47:08:5e:e7:73:18:a5:96:21:91:
17:9d:ff:92:78:9b:31:56:f8:9c:79:5a:e2:31:c2:
bd:4e:13:c3:0b:a5:79:1f:71:74:d4:cb:77:6f:2b:
32:48:7c:7b:1c:f1:6c:6f:ae:d8:db:35:d8:1a:08:
c3:f8:1e:d4:d2:c9:b0:29:34:3b:d3:cd:c9:de:a5:
f3:11:1a:dc:2b:6f:46:35:b8:8d:d5:ee:91:8b:d2:
02:08:0c:f2:75:23:9b:4d:cf:2b:51:b8:07:81:23:
1f:71:35:7d:dd:f0:c3:4e:95:c2:47:fa:08:c6:19:
0d:dd:4f:39:c7:f0:5b:4e:29:db:31:66:0c:cb:1a:
7b:3d:93:e5:8d:5f:4c:f2:78:4c:3c:53:47:49:29:
9b:0e:a3:87:e8:18:2c:d2:2c:41:5d:cf:bf:63:d3:
6f:d9:eb:fd:9c:d8:65:f8:76:b9:9c:a0:46:19:a8:
60:ed:fb:62:1f:37:d1:5c:2a:fd:30:3f:1c:8e:b5:
38:bc:01:eb:a1:46:e7:6f:27:10:9d:8f:06:75:a3:
d1:96:10:69:55:ec:b9:b7:0f:34:4a:cd:fd:7e:4c:
c3:dc:a1:6b:27:1c:31:b8:40:e3:62:c6:37:7d:df:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:61:C1:FB:E7:69:CF:11:11:5D:AC:69:26:21:0D:8D:43:C2:9B
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:02:13:ac:82:37:08:cc:7b:a5:8b:63:7f:0e:3c:29:01:00:
4e:2b:96:89:40:4b:94:49:57:62:ef:15:49:7f:06:66:f1:bc:
7b:89:f2:6a:a5:cc:77:1e:0a:2e:bc:ae:d8:a0:5c:e1:5d:a1:
5e:46:a9:bd:34:d0:9a:77:6d:fe:93:37:58:f1:47:4a:28:93:
06:df:52:ac:9f:95:47:fb:3f:08:c9:46:5d:77:b8:fd:39:03:
bc:da:78:2c:f3:cc:ed:35:25:ac:ac:63:f5:eb:aa:12:d8:e3:
ca:d0:fc:aa:fa:d9:d4:57:c2:b4:74:55:60:dd:2b:18:af:66:
ca:e0:ce:e2:dd:68:68:fb:8c:ea:79:22:fd:0c:b0:c9:7a:8b:
06:bc:0a:89:bf:d5:23:61:b7:12:05:4e:08:22:9a:b9:39:af:
08:54:5f:42:5b:a1:85:3a:88:41:df:24:0c:c4:58:4c:a7:f6:
af:4d:cd:e4:91:29:a4:8e:e3:53:bc:d9:38:ab:25:c6:57:67:
3d:c1:cc:40:b9:7a:4e:bc:53:a0:26:1d:be:32:ad:ee:67:74:
70:88:54:d6:1e:c5:6f:04:de:47:63:42:a6:28:47:4d:25:8e:
99:3a:c5:1b:e8:cd:40:3c:92:d5:b0:56:13:b1:9c:18:4a:a6:
f0:de:9f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5az+Oa6Apcp1Q5GstNoboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjUwNjI5MDIwMTQyWhcNMjUwNjMwMDIwMTQyWjAzMTEwLwYDVQQD
EyhkNjg1NjFjMWZiZTc2OWNmMTExMTVkYWM2OTI2MjEwZDhkNDNjMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcuQ04e5AiLmHAepiKyIDBr7zUcI
XudzGKWWIZEXnf+SeJsxVviceVriMcK9ThPDC6V5H3F01Mt3bysySHx7HPFsb67Y
2zXYGgjD+B7U0smwKTQ7083J3qXzERrcK29GNbiN1e6Ri9ICCAzydSObTc8rUbgH
gSMfcTV93fDDTpXCR/oIxhkN3U85x/BbTinbMWYMyxp7PZPljV9M8nhMPFNHSSmb
DqOH6Bgs0ixBXc+/Y9Nv2ev9nNhl+Ha5nKBGGahg7ftiHzfRXCr9MD8cjrU4vAHr
oUbnbycQnY8GdaPRlhBpVey5tw80Ss39fkzD3KFrJxwxuEDjYsY3fd9OpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaFYcH752nPERFdrGkmIQ2NQ8KbMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgITrII3
CMx7pYtjfw48KQEATiuWiUBLlElXYu8VSX8GZvG8e4nyaqXMdx4KLryu2KBc4V2h
XkapvTTQmndt/pM3WPFHSiiTBt9SrJ+VR/s/CMlGXXe4/TkDvNp4LPPM7TUlrKxj
9euqEtjjytD8qvrZ1FfCtHRVYN0rGK9myuDO4t1oaPuM6nki/QywyXqLBrwKib/V
I2G3EgVOCCKauTmvCFRfQluhhTqIQd8kDMRYTKf2r03N5JEppI7jU7zZOKslxldn
PcHMQLl6TrxToCYdvjKt7md0cIhU1h7FbwTeR2NCpihHTSWOmTrFG+jNQDyS1bBW
E7GcGEqm8N6fLw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:42:22 2025 by rpki-client