Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: uvuNN2ca1k8uzH5u/vtIQ+QUl0RqxW3dAJ4cfmqa1QQ=
Subject key identifier: 9C:F9:C2:66:6C:26:C3:E0:03:04:38:BE:1E:0A:C5:CA:16:AC:4F:EF
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0197B63285FEAB55B841210227D9578428E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 14BA
Signing time: Sat 28 Jun 2025 11:00:53 +0000
Manifest this update: Sat 28 Jun 2025 11:00:53 +0000
Manifest next update: Sun 29 Jun 2025 11:00:53 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: mrJJtfJiwLetnAohjUi2h9kpkK0HVSFmP2YhK5g7No4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:85:fe:ab:55:b8:41:21:02:27:d9:57:84:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Jun 28 11:00:53 2025 GMT
Not After : Jun 29 11:00:53 2025 GMT
Subject: CN=9cf9c2666c26c3e0030438be1e0ac5ca16ac4fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:4e:22:ff:5b:fa:93:ee:51:eb:bf:91:3c:
40:a2:7d:a6:c9:8e:85:ce:21:e6:fd:be:17:da:49:
23:9d:7d:c4:42:e1:ed:f9:e7:c8:d8:4e:d3:75:2d:
2b:43:9d:4e:79:11:71:1c:d5:37:d7:5f:1e:cc:cf:
91:a9:cd:76:93:44:5d:f8:43:84:2c:05:1e:4e:23:
9a:9a:d0:12:70:5f:92:5f:0c:05:7e:2b:a6:a1:1a:
6a:ed:71:3f:e6:d8:97:28:2d:88:aa:b2:82:fd:c9:
ff:c7:47:62:21:bf:8e:82:08:52:8c:c4:b6:c7:02:
8a:de:f7:e2:6e:52:74:c6:fa:73:16:29:8d:0e:44:
1a:74:53:e8:b8:c6:be:60:98:2b:80:21:e4:52:62:
c9:fa:21:bf:f1:9c:33:d0:27:2c:69:22:95:c7:7f:
d9:9c:3a:27:34:35:98:0a:b2:45:04:9b:79:29:49:
40:fc:d1:c1:4c:6a:e5:94:6e:fc:d6:42:77:c8:e9:
5e:3b:13:e2:5c:cd:ab:d6:24:c7:8b:f0:8c:a0:6d:
f2:cb:0f:63:a5:8b:16:f2:0a:57:00:ea:98:2c:b0:
d6:31:26:0e:26:a9:17:aa:f9:31:fa:fb:3b:62:7b:
48:9e:3e:93:e4:1a:85:50:f2:92:be:7f:19:d2:a2:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F9:C2:66:6C:26:C3:E0:03:04:38:BE:1E:0A:C5:CA:16:AC:4F:EF
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0c:08:ed:a5:92:da:23:14:51:93:22:cc:84:cd:ef:b5:3e:
54:84:2f:6f:eb:84:d7:49:c1:5e:e2:8c:61:70:35:8a:b9:17:
46:2b:ab:4d:12:21:c7:f1:7e:03:92:0b:22:bf:87:f3:96:d8:
42:48:cc:0c:b3:2d:39:d9:67:87:9d:d2:5f:ad:ae:75:04:75:
52:d4:71:0d:38:58:f6:65:c5:30:e1:85:6a:cd:bd:63:60:9f:
1b:05:e5:ef:ca:ff:b4:01:d0:e5:ef:aa:27:28:05:d1:72:1f:
28:d4:75:dc:79:01:f4:36:ff:d4:b8:52:20:bc:09:52:c3:9c:
8c:dd:b2:7d:83:3b:fa:50:86:e1:77:60:cf:57:9b:65:48:4e:
59:f2:08:78:c5:62:5a:90:b2:76:b6:2a:a2:13:b0:4e:d4:d9:
36:b0:05:ff:ec:6e:f0:85:aa:1b:d3:eb:05:f5:4b:d6:1f:19:
fd:01:28:2b:db:b3:58:cc:14:14:5a:9d:68:d5:62:f0:e5:45:
43:c1:1f:d2:b3:5a:3a:dc:02:02:48:79:98:81:41:ab:c4:27:
e2:9c:17:16:a7:c5:5b:fc:5b:42:bf:f1:29:d0:30:91:95:92:
be:1e:fa:9f:8c:73:75:b9:b6:06:7e:95:29:85:8e:4f:3d:3b:
eb:fa:68:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MoX+q1W4QSECJ9lXhCjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjg4YWRjMTllYWFkMTNkNjg1YjgxZWMzOTkzNWJkNGIy
YzY5YWQwHhcNMjUwNjI4MTEwMDUzWhcNMjUwNjI5MTEwMDUzWjAzMTEwLwYDVQQD
Eyg5Y2Y5YzI2NjZjMjZjM2UwMDMwNDM4YmUxZTBhYzVjYTE2YWM0ZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZtOIv9b+pPuUeu/kTxAon2myY6F
ziHm/b4X2kkjnX3EQuHt+efI2E7TdS0rQ51OeRFxHNU3118ezM+Rqc12k0Rd+EOE
LAUeTiOamtAScF+SXwwFfiumoRpq7XE/5tiXKC2IqrKC/cn/x0diIb+OgghSjMS2
xwKK3vfiblJ0xvpzFimNDkQadFPouMa+YJgrgCHkUmLJ+iG/8Zwz0CcsaSKVx3/Z
nDonNDWYCrJFBJt5KUlA/NHBTGrllG781kJ3yOleOxPiXM2r1iTHi/CMoG3yyw9j
pYsW8gpXAOqYLLDWMSYOJqkXqvkx+vs7YntInj6T5BqFUPKSvn8Z0qIzXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz5wmZsJsPgAwQ4vh4KxcoWrE/vMB8GA1UdIwQY
MBaAFFz4itwZ6q0T1oW4HsOZNb1LLGmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUt
MTdjZTY3YmRhZDdiLzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUtMTdjZTY3YmRhZDdi
LzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAwI7aWS
2iMUUZMizITN77U+VIQvb+uE10nBXuKMYXA1irkXRiurTRIhx/F+A5ILIr+H85bY
QkjMDLMtOdlnh53SX62udQR1UtRxDThY9mXFMOGFas29Y2CfGwXl78r/tAHQ5e+q
JygF0XIfKNR13HkB9Db/1LhSILwJUsOcjN2yfYM7+lCG4Xdgz1ebZUhOWfIIeMVi
WpCydrYqohOwTtTZNrAF/+xu8IWqG9PrBfVL1h8Z/QEoK9uzWMwUFFqdaNVi8OVF
Q8Ef0rNaOtwCAkh5mIFBq8Qn4pwXFqfFW/xbQr/xKdAwkZWSvh76n4xzdbm2Bn6V
KYWOTz076/polA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:19 2025 by rpki-client