Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: A8X5kLBCJAeoeCu2J0ADBN+LeqJz23sZpW+70kBnryg=
Subject key identifier: DE:6B:9F:FF:97:F4:3E:4B:28:58:71:4B:70:33:56:AF:21:B1:77:36
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 0197B70E6E3761450C317CC0024E198A5F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0C0B
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: HwQ+YA4QKGweCAJXTQ5EGcmxZTanOXlMO12G8KHQN+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6e:37:61:45:0c:31:7c:c0:02:4e:19:8a:5f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=de6b9fff97f43e4b2858714b703356af21b17736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:78:15:ef:24:75:0a:04:fb:83:06:34:af:
8d:ed:33:70:53:7d:72:b4:77:48:69:f9:0b:0e:18:
bd:5d:cf:3d:bc:b5:32:c2:72:ea:72:7e:3c:a2:21:
01:59:40:1b:2d:30:ba:3c:ae:ea:51:af:70:2d:b0:
24:54:80:36:2e:38:12:51:34:78:25:66:f4:4e:3f:
83:d1:b4:b7:11:75:4d:ee:5d:f0:48:df:27:a8:ee:
fb:7b:41:c7:9e:1c:fe:92:5b:a4:39:83:bc:6b:16:
9c:ad:8b:30:2b:79:8f:ad:ca:a8:dd:d5:fb:9a:4a:
41:80:c4:d4:93:5e:4a:98:f5:a1:62:41:67:78:31:
45:ad:b7:43:b7:7c:e2:da:6f:a1:de:c2:3a:28:85:
5a:25:91:02:24:31:93:bf:4d:4c:73:bd:af:e3:a1:
88:e9:da:35:2b:57:9e:98:8e:57:a3:b5:8f:2b:63:
2d:6b:d8:93:ee:8d:80:60:d9:5a:e7:b5:ae:66:a1:
04:c7:ff:05:61:7a:a1:e3:69:64:19:53:09:f5:c2:
07:2d:6a:ff:a4:0d:93:4a:7a:61:1a:c9:2a:17:b0:
6f:f7:4f:04:3a:3f:0f:08:79:2a:23:40:fc:97:a8:
14:d7:c2:fa:fe:ab:db:4e:84:c4:c2:9b:3e:48:f2:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:9F:FF:97:F4:3E:4B:28:58:71:4B:70:33:56:AF:21:B1:77:36
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:61:ac:a4:71:22:4a:68:75:f6:34:0e:70:62:eb:39:cf:00:
66:07:1c:c5:3e:46:97:ef:6f:38:66:4f:1c:00:69:40:89:2b:
fb:99:1a:5b:8f:86:da:a5:d3:58:3a:a7:98:85:49:b9:d0:d4:
24:f3:8c:74:cb:05:bd:8f:27:e4:d4:f6:2d:19:54:c1:28:36:
ef:75:e3:8d:8b:5a:d3:76:44:07:f7:76:9c:7f:8d:d6:68:7b:
f9:3a:67:1f:e6:c6:04:4e:7f:fd:a1:56:c2:4a:eb:9f:d0:0c:
de:e4:74:71:3b:4a:3d:a4:a0:93:4b:2e:bf:e0:aa:65:7a:7a:
b4:29:be:79:42:49:5a:1e:ac:11:3f:58:07:b3:d7:0f:49:1a:
26:75:10:5f:f0:a0:f7:66:47:54:2a:61:a4:63:c0:b0:9b:fb:
62:30:23:a6:4d:6a:1e:f3:8a:2d:b7:9b:e4:ec:b2:dc:74:1d:
74:d1:1f:4f:74:10:cd:e6:30:05:87:f9:f3:87:fd:a4:d5:f2:
f2:11:68:49:0b:c4:d0:1d:9b:77:67:82:df:67:33:49:b5:cd:
20:3d:c0:66:ec:b6:d5:10:d3:e3:5c:7b:3a:e2:20:d3:59:db:
83:33:ee:bc:08:3d:21:74:85:ff:e7:8f:a6:9b:d6:6c:32:32:
f0:f2:78:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dm43YUUMMXzAAk4Zil+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2U0ZmE4Yzk5NzFhZWYxMjM0NWZjMGUzN2QxNmIzNDU5
Yjc4M2IwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
EyhkZTZiOWZmZjk3ZjQzZTRiMjg1ODcxNGI3MDMzNTZhZjIxYjE3NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztl4Fe8kdQoE+4MGNK+N7TNwU31y
tHdIafkLDhi9Xc89vLUywnLqcn48oiEBWUAbLTC6PK7qUa9wLbAkVIA2LjgSUTR4
JWb0Tj+D0bS3EXVN7l3wSN8nqO77e0HHnhz+klukOYO8axacrYswK3mPrcqo3dX7
mkpBgMTUk15KmPWhYkFneDFFrbdDt3zi2m+h3sI6KIVaJZECJDGTv01Mc72v46GI
6do1K1eemI5Xo7WPK2Mta9iT7o2AYNla57WuZqEEx/8FYXqh42lkGVMJ9cIHLWr/
pA2TSnphGskqF7Bv908EOj8PCHkqI0D8l6gU18L6/qvbToTEwps+SPJlmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5rn/+X9D5LKFhxS3AzVq8hsXc2MB8GA1UdIwQY
MBaAFF4+T6jJlxrvEjRfwON9FrNFm3g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGIt
M2EzYjAyOTZiYjgyLzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGItM2EzYjAyOTZiYjgy
LzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2GspHEi
Smh19jQOcGLrOc8AZgccxT5Gl+9vOGZPHABpQIkr+5kaW4+G2qXTWDqnmIVJudDU
JPOMdMsFvY8n5NT2LRlUwSg273XjjYta03ZEB/d2nH+N1mh7+TpnH+bGBE5//aFW
wkrrn9AM3uR0cTtKPaSgk0suv+CqZXp6tCm+eUJJWh6sET9YB7PXD0kaJnUQX/Cg
92ZHVCphpGPAsJv7YjAjpk1qHvOKLbeb5Oyy3HQddNEfT3QQzeYwBYf584f9pNXy
8hFoSQvE0B2bd2eC32czSbXNID3AZuy21RDT41x7OuIg01nbgzPuvAg9IXSF/+eP
ppvWbDIy8PJ4Bw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:45 2025 by rpki-client