Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: 9jFJMN8AUlQ8v2ghLXflM348rSayLMvo3TS8J4fMyBU=
Subject key identifier: 16:13:36:15:44:2C:56:6B:4C:2D:80:58:6A:EA:92:F1:F6:BF:05:8C
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 0197B6A14C6F8EAE57AE705E6E05D3BB8276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: qU/aE2R2V4lKMk1ulxjx+6udmM6Zd6PxvEpaVi2uLTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4c:6f:8e:ae:57:ae:70:5e:6e:05:d3:bb:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=16133615442c566b4c2d80586aea92f1f6bf058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:99:49:71:17:70:c4:fe:91:d6:73:92:d0:
ed:55:34:b4:e2:1b:3a:b0:fc:df:2c:2c:84:25:c2:
09:29:8e:3d:de:2e:dc:20:6d:ae:74:96:9a:ff:16:
80:ee:07:91:a3:84:17:42:91:2f:27:f5:ce:3a:44:
2d:19:2c:47:2c:66:7b:0e:5d:ac:99:db:39:b0:e7:
cd:85:51:34:44:40:cb:86:ae:34:ce:01:db:dd:40:
65:68:66:9f:56:06:03:03:55:ab:ae:e7:4f:6d:41:
22:26:04:68:a2:10:14:aa:ad:78:9b:29:64:fd:fa:
f3:36:31:4c:ec:f4:66:db:89:d2:83:24:b5:ce:a0:
b5:4e:7c:4a:22:88:46:e6:71:86:5f:84:19:21:56:
f5:24:e4:81:b6:c6:6c:da:96:1f:ef:d2:1c:5d:0e:
dc:43:18:6b:ca:68:86:f1:f5:d0:3b:da:5b:dc:5a:
61:ef:9e:af:49:a6:cc:ea:04:f6:86:75:ac:d3:03:
76:ea:6a:2e:fb:16:32:bc:f4:d4:1e:71:b2:f0:d4:
4b:3b:32:ff:7b:79:9c:8b:0c:61:e6:9f:9a:08:ee:
d2:d3:45:96:ed:28:8a:ea:59:52:0b:7a:82:3a:4e:
45:5e:06:b5:56:5b:7d:15:27:49:8c:04:cd:dc:62:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:36:15:44:2C:56:6B:4C:2D:80:58:6A:EA:92:F1:F6:BF:05:8C
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3e:b9:db:87:ab:7d:5d:2f:1b:5c:00:17:8d:a1:b5:3b:19:
24:fd:2c:7b:5b:47:44:5e:ba:4d:3f:a9:53:9c:3b:9d:55:77:
b8:c7:d2:1f:50:19:17:86:9c:45:09:b6:50:ce:45:c5:9c:60:
e3:9f:07:a0:9b:0c:08:d5:f1:0d:a7:15:c4:ea:9c:20:77:e3:
59:26:e5:d8:29:39:d3:42:77:31:b3:09:0d:0f:b8:c1:eb:11:
3d:78:9c:d8:5e:43:30:85:d1:44:98:d3:6e:d0:ff:96:15:9c:
08:1f:a7:8c:e5:62:d4:15:81:18:01:c6:8f:3e:7f:2d:35:64:
14:e3:bf:08:cb:de:df:ea:0a:e9:53:18:6a:65:9c:bb:5f:c7:
64:82:47:2f:a4:a0:65:69:1e:1c:25:a6:51:26:28:b6:ab:0d:
04:44:23:62:69:be:73:1c:83:9d:7d:8c:3a:16:19:68:ca:96:
4b:05:20:b4:9c:fa:4a:a6:46:ea:fd:cd:fb:05:f1:b7:31:1b:
a4:65:32:c8:9f:1b:9f:64:71:e1:fc:0d:65:c4:5b:64:fe:a7:
50:ea:17:73:8d:bd:32:03:e5:00:c6:9f:c1:ff:24:3f:06:93:
1f:98:c3:33:0f:03:ea:30:64:a6:cc:f8:54:55:32:11:4d:7a:
5a:39:82:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUxvjq5XrnBebgXTu4J2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMmYyMWU1YTRmYmUwMTUyMDVmNmNlZjg4YWZhZTE5Y2Qw
NmE2MTIwHhcNMjUwNjI4MTMwMTUzWhcNMjUwNjI5MTMwMTUzWjAzMTEwLwYDVQQD
EygxNjEzMzYxNTQ0MmM1NjZiNGMyZDgwNTg2YWVhOTJmMWY2YmYwNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSSZSXEXcMT+kdZzktDtVTS04hs6
sPzfLCyEJcIJKY493i7cIG2udJaa/xaA7geRo4QXQpEvJ/XOOkQtGSxHLGZ7Dl2s
mds5sOfNhVE0REDLhq40zgHb3UBlaGafVgYDA1WrrudPbUEiJgRoohAUqq14mylk
/frzNjFM7PRm24nSgyS1zqC1TnxKIohG5nGGX4QZIVb1JOSBtsZs2pYf79IcXQ7c
QxhrymiG8fXQO9pb3Fph756vSabM6gT2hnWs0wN26mou+xYyvPTUHnGy8NRLOzL/
e3mciwxh5p+aCO7S00WW7SiK6llSC3qCOk5FXga1Vlt9FSdJjATN3GIf2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYTNhVELFZrTC2AWGrqkvH2vwWMMB8GA1UdIwQY
MBaAFF0vIeWk++AVIF9s74ivrhnNBqYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWIt
MjE0YTc2MjEwZmQ2LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWItMjE0YTc2MjEwZmQ2
LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASz6524er
fV0vG1wAF42htTsZJP0se1tHRF66TT+pU5w7nVV3uMfSH1AZF4acRQm2UM5FxZxg
458HoJsMCNXxDacVxOqcIHfjWSbl2Ck500J3MbMJDQ+4wesRPXic2F5DMIXRRJjT
btD/lhWcCB+njOVi1BWBGAHGjz5/LTVkFOO/CMve3+oK6VMYamWcu1/HZIJHL6Sg
ZWkeHCWmUSYotqsNBEQjYmm+cxyDnX2MOhYZaMqWSwUgtJz6SqZG6v3N+wXxtzEb
pGUyyJ8bn2Rx4fwNZcRbZP6nUOoXc429MgPlAMafwf8kPwaTH5jDMw8D6jBkpsz4
VFUyEU16WjmCQg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:32 2025 by rpki-client