Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: rgCN3JlsZxoG37INSB12KebKzpYVJjbUAYaN9RpVN6c=
Subject key identifier: 33:AA:98:E2:E2:59:EE:E8:69:93:1D:FD:2D:E4:84:87:E7:9C:9D:C5
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 0197B6327AB1FDF366553F15E18320B90707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:00:50 +0000
Manifest this update: Sat 28 Jun 2025 11:00:50 +0000
Manifest next update: Sun 29 Jun 2025 11:00:50 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: SMhg8XTxb6nqRBoC+2o/+d3crDy3YTYbTc1RZlti87I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7a:b1:fd:f3:66:55:3f:15:e1:83:20:b9:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jun 28 11:00:50 2025 GMT
Not After : Jun 29 11:00:50 2025 GMT
Subject: CN=33aa98e2e259eee869931dfd2de48487e79c9dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:0c:6e:0e:f4:e1:26:16:d6:0c:f4:d0:bd:
6c:6a:c4:43:9a:58:ba:1c:cb:a6:ed:9d:3f:fe:be:
82:e3:c3:82:d4:dd:c7:40:cb:44:30:21:7b:e2:a3:
3c:05:c5:22:a9:f3:f8:48:25:bc:74:fd:03:95:94:
e6:a5:fb:7a:5b:c4:bd:08:58:93:6f:50:90:a7:a8:
9e:9a:22:55:57:43:e5:30:5f:d3:d5:36:9c:3d:27:
9b:9c:b3:35:60:71:e1:de:9c:5f:42:ab:d3:19:69:
96:56:f5:3a:fd:2f:87:b6:c3:99:cd:48:74:84:3c:
8a:d9:25:e2:95:50:b3:ee:42:14:ba:0a:e9:dd:92:
c4:39:12:c8:07:55:ee:9f:a9:e6:f2:e9:01:4c:4c:
2f:0f:7a:e9:d2:37:69:9d:dc:82:8f:dd:d1:65:29:
12:ef:9a:f9:41:a3:dd:ab:25:40:5e:14:3d:07:b1:
92:da:b3:54:4a:de:ef:b7:b0:49:2c:7f:13:45:0f:
71:e4:cc:bb:7d:d3:ed:43:29:48:38:8d:16:ca:a7:
56:a8:36:e1:82:a4:cc:c4:42:e5:2a:bf:f2:f1:90:
20:dc:60:ed:51:b5:81:5b:13:a9:31:11:e0:90:0f:
ce:bf:5c:01:2d:d5:a6:68:e8:eb:80:15:89:7c:b8:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:98:E2:E2:59:EE:E8:69:93:1D:FD:2D:E4:84:87:E7:9C:9D:C5
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ba:b3:48:34:19:58:66:45:77:ad:89:2f:1b:44:c9:b4:68:
d4:4c:81:c2:8a:93:38:50:25:fd:72:ea:30:c4:33:ff:86:c7:
31:0a:bb:5b:21:c2:4a:62:35:5d:cf:0d:9f:83:8f:e9:07:b6:
bf:5b:78:7a:fd:8c:c0:77:9e:3d:69:91:b5:5c:19:2c:5a:3f:
60:df:01:7d:e9:9a:04:a9:9a:7b:24:12:ab:e9:ca:61:88:32:
9f:43:f6:b7:df:bf:95:26:73:2c:7b:7c:fb:6e:d4:c1:00:1c:
86:ea:3b:0d:90:44:11:ef:7e:b0:ae:37:d1:2b:cc:33:91:38:
a2:7f:87:85:d8:88:64:6b:87:52:3f:41:89:f2:bd:b9:a0:11:
11:d6:ef:cf:d4:77:81:58:43:99:5f:bf:74:35:8b:55:51:24:
7a:80:6c:9d:c8:b0:4e:20:ab:51:85:63:f3:ce:88:fc:04:10:
04:e1:d3:a8:fc:b4:2b:ac:96:63:fd:13:4d:37:e1:a7:00:d3:
4c:62:b3:0b:e1:1e:8b:21:7d:bb:6d:ac:63:bb:e3:49:2b:c9:
96:15:74:b0:41:45:7b:92:a4:1b:ae:73:2a:00:df:48:73:f4:
a5:be:09:a0:90:8d:de:51:c3:bd:e4:08:4b:58:28:3a:65:a5:
6f:6a:2b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mnqx/fNmVT8V4YMguQcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5
ZDZmYjkwHhcNMjUwNjI4MTEwMDUwWhcNMjUwNjI5MTEwMDUwWjAzMTEwLwYDVQQD
EygzM2FhOThlMmUyNTllZWU4Njk5MzFkZmQyZGU0ODQ4N2U3OWM5ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sUMbg704SYW1gz00L1sasRDmli6
HMum7Z0//r6C48OC1N3HQMtEMCF74qM8BcUiqfP4SCW8dP0DlZTmpft6W8S9CFiT
b1CQp6iemiJVV0PlMF/T1TacPSebnLM1YHHh3pxfQqvTGWmWVvU6/S+HtsOZzUh0
hDyK2SXilVCz7kIUugrp3ZLEORLIB1Xun6nm8ukBTEwvD3rp0jdpndyCj93RZSkS
75r5QaPdqyVAXhQ9B7GS2rNUSt7vt7BJLH8TRQ9x5My7fdPtQylIOI0WyqdWqDbh
gqTMxELlKr/y8ZAg3GDtUbWBWxOpMRHgkA/Ov1wBLdWmaOjrgBWJfLjDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOqmOLiWe7oaZMd/S3khIfnnJ3FMB8GA1UdIwQY
MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt
OWNhOGVhOTBlNjE3LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3
LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7qzSDQZ
WGZFd62JLxtEybRo1EyBwoqTOFAl/XLqMMQz/4bHMQq7WyHCSmI1Xc8Nn4OP6Qe2
v1t4ev2MwHeePWmRtVwZLFo/YN8BfemaBKmaeyQSq+nKYYgyn0P2t9+/lSZzLHt8
+27UwQAchuo7DZBEEe9+sK430SvMM5E4on+HhdiIZGuHUj9BifK9uaAREdbvz9R3
gVhDmV+/dDWLVVEkeoBsnciwTiCrUYVj886I/AQQBOHTqPy0K6yWY/0TTTfhpwDT
TGKzC+EeiyF9u22sY7vjSSvJlhV0sEFFe5KkG65zKgDfSHP0pb4JoJCN3lHDveQI
S1goOmWlb2orig==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client