Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: f5LrUh1NgifV5aG7PV5KGPRlV1Sd/QuHKCJDY+1dFqA=
Subject key identifier: C0:D7:4D:49:B3:34:CD:BF:F1:56:B9:63:13:4C:B0:04:91:D9:64:4C
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 0197B5FC0086FFDDE8A08AEB30AE1833A54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0C9C
Signing time: Sat 28 Jun 2025 10:01:20 +0000
Manifest this update: Sat 28 Jun 2025 10:01:20 +0000
Manifest next update: Sun 29 Jun 2025 10:01:20 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: G3ZTnnLh6PcuGNYRU4OnI+rUmKJ52z1+upRWEsSJldg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:00:86:ff:dd:e8:a0:8a:eb:30:ae:18:33:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Jun 28 10:01:20 2025 GMT
Not After : Jun 29 10:01:20 2025 GMT
Subject: CN=c0d74d49b334cdbff156b963134cb00491d9644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:04:7f:2d:60:01:b4:de:4d:fb:99:3f:1d:
73:3e:62:c6:62:28:65:e3:d7:04:81:35:e6:5b:97:
d5:6f:fa:1f:01:83:57:63:11:a9:52:52:d9:48:4f:
a1:80:91:c1:36:92:c6:7f:06:c4:13:d1:63:94:1c:
81:0e:3d:d6:08:33:71:9e:25:3a:aa:37:c3:36:45:
41:4f:90:a3:9c:f8:6f:6c:4a:00:c8:9e:9a:2b:27:
52:71:db:85:59:8c:92:8c:df:eb:2b:36:5a:76:00:
c0:13:c1:21:9f:c4:37:e8:cb:9d:03:63:21:53:16:
55:e2:25:a6:ce:18:24:83:cc:d5:ce:9e:d3:e8:5e:
1a:c9:fd:be:a6:cc:86:34:3c:0f:46:c9:ba:fa:5a:
03:4d:61:59:f1:26:7d:96:3d:e9:81:ba:71:df:50:
d0:d7:a7:ff:d3:84:51:4a:cb:7e:a4:14:16:ab:a2:
94:2d:9f:c6:81:3d:b2:3a:6c:f1:32:46:2f:b1:eb:
0e:ff:8c:17:7b:ff:7f:b4:48:97:cd:1e:ff:da:62:
4b:5e:47:6e:0a:6f:89:99:d6:3a:ee:c5:a2:fd:2a:
56:3d:2d:4e:43:80:bf:be:f4:51:cb:13:09:a9:3d:
52:0e:32:ed:d4:dc:6b:f0:91:7d:7e:82:a6:fa:b3:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:4D:49:B3:34:CD:BF:F1:56:B9:63:13:4C:B0:04:91:D9:64:4C
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:b5:d5:64:7b:31:d4:4c:8c:ce:a1:fe:ac:9e:9c:12:2d:
b9:21:89:4f:3b:7d:37:d2:fe:fb:3d:07:e5:d8:58:ef:8f:0f:
3d:52:36:95:ab:a9:1b:0c:ee:78:db:33:61:e5:9e:3b:a5:d7:
3b:d6:80:7f:db:6e:07:16:c4:72:32:89:13:39:dc:1a:68:1e:
76:32:7b:8d:f9:2b:56:86:b2:c6:cf:59:9b:33:dc:3d:6b:4c:
c5:0a:24:a1:f8:f1:e7:ff:cb:82:c6:c5:cf:5f:2d:e9:5d:fc:
8c:db:f2:fa:eb:f4:85:66:00:65:e2:6d:be:b9:2e:c1:19:74:
ab:16:a6:d1:10:6a:51:26:b1:7d:91:86:42:e0:49:75:36:96:
6b:8a:8e:13:43:a8:6d:66:32:09:02:ad:11:14:c5:0a:58:3f:
64:73:de:c7:1f:77:a9:60:53:43:78:84:0c:76:94:e2:fb:6c:
b6:ab:d2:0c:90:be:84:77:ae:44:52:61:61:25:8a:20:c1:ce:
17:aa:7a:e3:3e:da:a9:86:a0:f1:c0:31:64:45:b5:a2:f1:52:
78:83:b3:26:ff:2b:2a:24:ac:18:df:52:ce:71:89:21:e4:c8:
0b:cb:d5:01:19:ef:5a:42:c8:b8:c1:93:28:be:70:c2:dd:6c:
f9:54:8e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/ACG/93ooIrrMK4YM6VPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0
MmJjY2EwHhcNMjUwNjI4MTAwMTIwWhcNMjUwNjI5MTAwMTIwWjAzMTEwLwYDVQQD
EyhjMGQ3NGQ0OWIzMzRjZGJmZjE1NmI5NjMxMzRjYjAwNDkxZDk2NDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt4Efy1gAbTeTfuZPx1zPmLGYihl
49cEgTXmW5fVb/ofAYNXYxGpUlLZSE+hgJHBNpLGfwbEE9FjlByBDj3WCDNxniU6
qjfDNkVBT5CjnPhvbEoAyJ6aKydScduFWYySjN/rKzZadgDAE8Ehn8Q36MudA2Mh
UxZV4iWmzhgkg8zVzp7T6F4ayf2+psyGNDwPRsm6+loDTWFZ8SZ9lj3pgbpx31DQ
16f/04RRSst+pBQWq6KULZ/GgT2yOmzxMkYvsesO/4wXe/9/tEiXzR7/2mJLXkdu
Cm+JmdY67sWi/SpWPS1OQ4C/vvRRyxMJqT1SDjLt1Nxr8JF9foKm+rMoEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDXTUmzNM2/8Va5YxNMsASR2WRMMB8GA1UdIwQY
MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt
OWFjMWE3ZTRjNDA2LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2
LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/e11WR7
MdRMjM6h/qyenBItuSGJTzt9N9L++z0H5dhY748PPVI2laupGwzueNszYeWeO6XX
O9aAf9tuBxbEcjKJEzncGmgedjJ7jfkrVoayxs9ZmzPcPWtMxQokofjx5//LgsbF
z18t6V38jNvy+uv0hWYAZeJtvrkuwRl0qxam0RBqUSaxfZGGQuBJdTaWa4qOE0Oo
bWYyCQKtERTFClg/ZHPexx93qWBTQ3iEDHaU4vtstqvSDJC+hHeuRFJhYSWKIMHO
F6p64z7aqYag8cAxZEW1ovFSeIOzJv8rKiSsGN9SznGJIeTIC8vVARnvWkLIuMGT
KL5wwt1s+VSOFw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:51 2025 by rpki-client