Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: JJBbCAt2tkGKXSVdfoZkbTaQVjjeDsjWHszgWeHHr+Q=
Subject key identifier: 89:FB:72:AB:3A:61:04:8A:6C:6A:12:A1:18:C3:13:5C:9A:39:A3:72
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 0197CBDEAA94C812C5E6D83537945C49ED46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 019D
Signing time: Wed 02 Jul 2025 16:00:56 +0000
Manifest this update: Wed 02 Jul 2025 16:00:56 +0000
Manifest next update: Thu 03 Jul 2025 16:00:56 +0000
Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: fzw9KSTHCNeMr8w2o0vkdGEUzdLkxy3eXV/5FnEJN1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:aa:94:c8:12:c5:e6:d8:35:37:94:5c:49:ed:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Jul 2 16:00:56 2025 GMT
Not After : Jul 3 16:00:56 2025 GMT
Subject: CN=89fb72ab3a61048a6c6a12a118c3135c9a39a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:97:62:10:62:f1:e1:f8:fd:7f:a8:df:a4:
8c:59:37:ce:5b:e8:b3:1c:d2:da:25:2f:c4:c8:b4:
ef:87:79:af:8d:4e:2f:24:1d:48:2f:1b:63:29:29:
4c:8f:c4:d7:6d:dd:e8:7f:7c:b3:62:e6:20:4f:8c:
e2:12:b4:02:7a:ed:af:5b:dc:ae:b9:9d:e3:54:79:
0e:da:3d:df:28:8b:ad:73:fa:50:81:de:03:83:83:
7f:18:ee:ef:63:a9:b0:58:1c:cb:31:a6:dd:48:68:
01:d9:1d:d0:85:fe:a4:35:b7:10:c9:c5:95:30:ca:
f7:27:b8:b7:fe:a6:dc:e3:f1:00:d0:68:84:80:26:
65:34:ea:22:64:35:a6:38:8b:fa:04:46:ec:b5:0e:
5e:c3:86:75:e1:b8:1a:95:aa:aa:dd:af:76:a7:e6:
b1:cd:bc:27:6d:1c:37:3c:a5:ab:fc:45:41:a1:71:
de:4b:58:e4:af:fe:75:49:5b:81:57:85:7a:1e:83:
0b:af:1f:21:65:8f:bb:c3:32:86:88:b1:1e:f1:2a:
6c:02:6b:0a:3d:e0:03:ac:28:27:71:65:5a:9c:ae:
ea:75:b9:20:5d:1e:eb:cf:f1:b8:30:dc:7c:3e:c4:
da:8b:a2:b3:6e:78:c5:55:14:9d:7a:9b:af:be:ec:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:72:AB:3A:61:04:8A:6C:6A:12:A1:18:C3:13:5C:9A:39:A3:72
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:67:6a:eb:ed:5f:29:24:65:1e:67:e6:03:bd:af:1b:3f:d3:
d8:c1:79:93:ac:9a:20:25:ff:4a:23:4d:ef:1f:ad:c3:72:36:
4c:23:5b:0c:44:8a:d6:f2:cc:7e:f1:ae:a9:e4:8e:b9:2a:f9:
78:8f:12:aa:33:e6:01:c9:e6:46:32:2b:b1:69:4d:94:1b:32:
f9:9e:75:c9:ff:fd:af:5f:1d:d5:d2:6f:72:3d:7e:10:3e:cf:
72:c0:e5:84:60:94:18:9f:a5:5d:4d:eb:b6:3c:d4:f5:33:b2:
ea:9a:e0:8a:14:0d:f6:d2:e0:8c:54:c1:54:20:72:f6:50:75:
dd:3b:17:80:ff:60:4c:12:29:cd:0b:3c:5c:a6:03:82:ae:0a:
d7:87:b1:8b:4a:76:94:6a:a8:d1:42:f5:3c:ef:91:73:c7:fd:
54:c8:7c:d1:d6:66:b3:64:84:4b:33:f4:d2:c0:83:f5:c6:63:
0b:62:25:cf:9c:c2:4b:1a:b8:9a:d9:d7:8d:3d:a2:ad:3f:c9:
aa:b8:b9:b0:31:b1:02:45:39:5f:c2:8b:7c:b6:29:88:ab:6f:
8c:72:6d:56:c9:f3:e7:59:dd:30:54:25:38:f1:43:02:11:38:
73:08:20:18:3a:e5:9f:79:76:4e:db:d7:a9:1d:f7:b8:18:fa:
cb:3a:77:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL3qqUyBLF5tg1N5RcSe1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjllODU2ZjA0OTVjODQ5MGQ1MTI0ZThjZmJhZjA4ZDcw
ZGZiMTcwHhcNMjUwNzAyMTYwMDU2WhcNMjUwNzAzMTYwMDU2WjAzMTEwLwYDVQQD
Eyg4OWZiNzJhYjNhNjEwNDhhNmM2YTEyYTExOGMzMTM1YzlhMzlhMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4mXYhBi8eH4/X+o36SMWTfOW+iz
HNLaJS/EyLTvh3mvjU4vJB1ILxtjKSlMj8TXbd3of3yzYuYgT4ziErQCeu2vW9yu
uZ3jVHkO2j3fKIutc/pQgd4Dg4N/GO7vY6mwWBzLMabdSGgB2R3Qhf6kNbcQycWV
MMr3J7i3/qbc4/EA0GiEgCZlNOoiZDWmOIv6BEbstQ5ew4Z14bgalaqq3a92p+ax
zbwnbRw3PKWr/EVBoXHeS1jkr/51SVuBV4V6HoMLrx8hZY+7wzKGiLEe8SpsAmsK
PeADrCgncWVanK7qdbkgXR7rz/G4MNx8PsTai6KzbnjFVRSdepuvvuziGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn7cqs6YQSKbGoSoRjDE1yaOaNyMB8GA1UdIwQY
MBaAFF356FbwSVyEkNUSToz7rwjXDfsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAt
ZTFlYTQ1M2M1MjU3LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAtZTFlYTQ1M2M1MjU3
LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2dq6+1f
KSRlHmfmA72vGz/T2MF5k6yaICX/SiNN7x+tw3I2TCNbDESK1vLMfvGuqeSOuSr5
eI8SqjPmAcnmRjIrsWlNlBsy+Z51yf/9r18d1dJvcj1+ED7PcsDlhGCUGJ+lXU3r
tjzU9TOy6prgihQN9tLgjFTBVCBy9lB13TsXgP9gTBIpzQs8XKYDgq4K14exi0p2
lGqo0UL1PO+Rc8f9VMh80dZms2SESzP00sCD9cZjC2Ilz5zCSxq4mtnXjT2irT/J
qri5sDGxAkU5X8KLfLYpiKtvjHJtVsnz51ndMFQlOPFDAhE4cwggGDrln3l2TtvX
qR33uBj6yzp3nw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:16:45 2025 by rpki-client