Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier: N+nhJQsARc3DTwUeWdd3xeZKPsVGEbvIuWYvJ5bitBE=
Subject key identifier: 14:B7:23:F7:D2:89:47:28:09:A5:4F:4F:9A:74:60:D4:28:C2:D1:CE
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 0197B77C6A3A5D1D803C17B349F392F55ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number: 0D32
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=)
2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: JY6sEkpM2TcmElGaJf2ap986mY3rxQZv4PqTGBaCcXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6a:3a:5d:1d:80:3c:17:b3:49:f3:92:f5:5a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=14b723f7d289472809a54f4f9a7460d428c2d1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6b:0d:a8:10:46:b0:27:67:79:aa:94:4a:9b:
73:e2:3d:94:b8:3c:86:35:1c:99:80:63:c5:8f:52:
6b:bb:b3:57:f4:fa:8a:e4:12:a0:20:8c:06:38:ff:
81:db:0f:0b:ec:3f:ea:f7:ad:79:0c:ac:df:17:d2:
e0:5e:f0:6b:19:77:55:83:37:5a:35:3b:a0:c0:52:
b3:5a:18:73:ba:fa:a2:31:63:e9:d0:80:ec:5f:c3:
6d:95:18:be:1c:96:a2:a5:54:f8:46:67:a2:bd:6c:
be:f5:e1:f9:72:86:77:37:d7:67:eb:2a:ef:b0:fe:
a5:89:ce:1f:cb:ef:61:86:32:cf:81:2e:7d:8e:95:
e0:ca:78:9e:9d:70:9a:66:2b:c8:64:cc:85:43:ff:
14:93:ee:04:05:57:17:97:34:d7:b3:1e:3d:b1:01:
ad:64:75:b0:54:cb:96:e0:a1:53:b4:5d:7f:c4:8e:
52:df:5f:ff:a4:37:b4:3a:09:8a:b6:c5:64:5f:b2:
04:84:f3:e8:01:63:2d:73:ad:c9:cf:26:47:4d:50:
d8:43:1e:13:cf:60:56:fc:31:a7:51:03:bf:1f:00:
43:4b:82:5a:08:28:41:d4:83:16:b2:71:96:d2:6e:
67:b2:88:82:6d:13:6f:a8:03:3f:08:54:3f:fd:ed:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:23:F7:D2:89:47:28:09:A5:4F:4F:9A:74:60:D4:28:C2:D1:CE
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:ae:c5:0a:e3:0e:e7:5e:4e:79:1d:a5:e7:88:e7:15:9a:
ec:3d:54:9b:f3:6a:aa:0f:74:a5:21:76:40:e1:7b:ef:bc:32:
4c:18:c6:9a:71:ec:25:05:b8:a7:b7:33:9e:33:57:81:dc:a7:
10:dc:1a:31:02:f3:9a:78:ee:84:25:55:3e:92:89:82:a7:17:
26:e0:78:70:02:21:a4:10:37:d1:2a:5f:d4:cb:2e:79:08:81:
6f:b1:d0:37:70:4b:49:73:2c:26:05:d6:e7:6f:df:fe:04:f3:
55:c8:19:1b:53:4d:d5:78:59:ed:53:1f:5e:1c:1e:ba:af:76:
d2:ef:ae:18:54:fc:05:80:65:ce:17:cf:d3:d8:17:2c:a8:3e:
85:64:0e:d6:b8:86:a2:da:15:c5:34:a6:2f:a7:d4:08:25:00:
26:3c:42:3c:13:78:f4:13:f0:0e:b9:f5:17:4c:78:24:07:3d:
c2:1f:86:e3:f4:43:97:bc:eb:0e:db:0b:19:d5:89:da:6b:ff:
2b:5c:d2:c7:1f:9b:ea:c2:94:4e:d4:d6:3e:c3:65:3f:e7:47:
f2:01:12:c9:a7:a7:3a:cc:e5:92:44:8d:91:d8:f9:62:54:5d:
e8:ba:67:60:b0:8f:27:06:f5:4e:cc:03:93:2b:b8:f4:68:88:
e7:24:60:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGo6XR2APBezSfOS9Vq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDM3OWNlZGNkYzIwZjA4NzVjNGIwOGI5NGI0MTE2MWIz
ZThjMDMwHhcNMjUwNjI4MTcwMTEzWhcNMjUwNjI5MTcwMTEzWjAzMTEwLwYDVQQD
EygxNGI3MjNmN2QyODk0NzI4MDlhNTRmNGY5YTc0NjBkNDI4YzJkMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62sNqBBGsCdneaqUSptz4j2UuDyG
NRyZgGPFj1Jru7NX9PqK5BKgIIwGOP+B2w8L7D/q9615DKzfF9LgXvBrGXdVgzda
NTugwFKzWhhzuvqiMWPp0IDsX8NtlRi+HJaipVT4RmeivWy+9eH5coZ3N9dn6yrv
sP6lic4fy+9hhjLPgS59jpXgynienXCaZivIZMyFQ/8Uk+4EBVcXlzTXsx49sQGt
ZHWwVMuW4KFTtF1/xI5S31//pDe0OgmKtsVkX7IEhPPoAWMtc63JzyZHTVDYQx4T
z2BW/DGnUQO/HwBDS4JaCChB1IMWsnGW0m5nsoiCbRNvqAM/CFQ//e1+0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS3I/fSiUcoCaVPT5p0YNQowtHOMB8GA1UdIwQY
MBaAFFzTec7c3CDwh1xLCLlLQRYbPowDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQt
MDk2NDQ2NGMxNzUxLzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQtMDk2NDQ2NGMxNzUx
LzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhCuxQrj
DudeTnkdpeeI5xWa7D1Um/Nqqg90pSF2QOF777wyTBjGmnHsJQW4p7cznjNXgdyn
ENwaMQLzmnjuhCVVPpKJgqcXJuB4cAIhpBA30Spf1MsueQiBb7HQN3BLSXMsJgXW
52/f/gTzVcgZG1NN1XhZ7VMfXhweuq920u+uGFT8BYBlzhfP09gXLKg+hWQO1riG
otoVxTSmL6fUCCUAJjxCPBN49BPwDrn1F0x4JAc9wh+G4/RDl7zrDtsLGdWJ2mv/
K1zSxx+b6sKUTtTWPsNlP+dH8gESyaenOszlkkSNkdj5YlRd6LpnYLCPJwb1TswD
kyu49GiI5yRg2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:55 2025 by rpki-client