Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: SD2K36ck2+B+LHTwDZYP4WnuZplb2ClerrpM458Qaj4=
Subject key identifier: AA:DB:EA:91:DC:93:91:53:88:8E:3A:7D:93:4E:72:94:A0:E0:1E:EB
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 0197B6A038842F396D593A381FE04B70DCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0E51
Signing time: Sat 28 Jun 2025 13:00:42 +0000
Manifest this update: Sat 28 Jun 2025 13:00:42 +0000
Manifest next update: Sun 29 Jun 2025 13:00:42 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: 36kI9LniY/A795gVaX9MFUxWe/o8CriU5QrQFi7VuaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:38:84:2f:39:6d:59:3a:38:1f:e0:4b:70:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Jun 28 13:00:42 2025 GMT
Not After : Jun 29 13:00:42 2025 GMT
Subject: CN=aadbea91dc939153888e3a7d934e7294a0e01eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:ba:97:02:42:c7:9d:34:b0:18:ae:ea:c1:
ee:48:b8:02:e7:ff:30:e7:ee:4c:ec:b4:42:27:38:
99:2b:8e:1f:c5:68:99:f9:09:81:6d:6f:32:0a:e8:
65:fd:cf:fb:2b:87:e9:de:8c:dc:7c:0c:10:24:cc:
d8:73:66:39:9d:9c:07:4f:ee:f8:04:9e:42:ee:00:
11:23:f0:19:7a:f0:2b:cf:bc:ea:85:ab:08:fb:4e:
99:63:63:cf:b0:a9:3f:e1:96:05:c9:d2:a5:5b:3d:
97:a7:cb:5d:5f:e0:24:cd:5e:b7:67:35:f4:98:58:
95:c2:ca:de:96:a4:cb:b4:7b:c1:57:9c:59:dd:9e:
56:ef:d9:71:ae:ad:59:ad:21:6d:ca:fc:d7:28:ba:
78:2a:8f:66:09:4b:d4:0f:25:3c:66:dd:1d:db:fa:
08:91:3f:ce:7d:59:ce:8b:1a:ce:e1:ad:aa:cd:6d:
f9:d0:7e:6b:51:15:e2:98:76:35:4a:ad:1c:cf:43:
62:f2:75:05:4a:d7:3b:a8:4d:f4:af:d5:0a:69:fb:
9b:15:95:d5:ba:7e:01:1c:82:46:08:be:18:e9:7f:
c1:10:a3:6b:bd:67:82:49:16:13:f1:8e:c1:23:6f:
36:a0:0e:3d:f9:2b:c3:f3:fc:b0:7d:0d:97:83:83:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DB:EA:91:DC:93:91:53:88:8E:3A:7D:93:4E:72:94:A0:E0:1E:EB
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0b:1e:45:d3:f2:d2:16:b2:1f:8e:82:0f:b8:51:e9:3a:66:
c8:3c:b0:8b:5f:15:36:ae:d6:39:22:74:2b:c8:f6:09:cd:1f:
ae:85:e0:ba:46:0c:e6:cd:92:8a:30:f0:4b:67:35:d0:c3:8f:
19:d2:a2:5d:d5:56:2f:7b:7b:57:7a:b5:8d:5b:0e:30:39:b8:
41:b0:e1:42:2e:1a:b5:79:63:8b:f7:0f:29:c9:04:2f:8d:68:
af:b8:58:7e:fc:23:0c:c6:bb:50:65:cd:7f:92:be:be:42:3d:
f2:16:35:9a:ef:41:42:36:09:b1:82:f0:9d:e8:47:b3:c4:ab:
07:c1:88:ee:65:6c:fa:dc:0f:00:1f:2d:08:cd:10:93:32:7d:
0a:af:17:6d:66:34:c4:4a:70:88:3e:d8:fb:1f:8c:8a:01:ab:
ce:17:41:0f:05:36:12:a1:d8:fb:8f:82:1f:fb:b3:02:67:fa:
f4:42:e4:d3:da:d3:da:27:2c:d0:33:ee:ac:f8:92:5b:be:4e:
14:9c:ec:15:d1:0b:72:d5:45:8b:fb:6e:fb:3b:cb:0e:f0:bc:
d8:f1:45:c1:a5:8e:a0:e8:24:93:25:2e:e0:5d:c2:63:f0:83:
80:9b:15:fc:e2:4c:bb:c4:5b:55:63:86:51:cc:b8:00:6e:d5:
7e:7f:e7:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oDiELzltWTo4H+BLcNy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWRkMGU5NDViYzYxMTAxYzY5YmNlNjRhM2Q3MjhiYTFi
Yjg2NjEwHhcNMjUwNjI4MTMwMDQyWhcNMjUwNjI5MTMwMDQyWjAzMTEwLwYDVQQD
EyhhYWRiZWE5MWRjOTM5MTUzODg4ZTNhN2Q5MzRlNzI5NGEwZTAxZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+6lwJCx500sBiu6sHuSLgC5/8w
5+5M7LRCJziZK44fxWiZ+QmBbW8yCuhl/c/7K4fp3ozcfAwQJMzYc2Y5nZwHT+74
BJ5C7gARI/AZevArz7zqhasI+06ZY2PPsKk/4ZYFydKlWz2Xp8tdX+AkzV63ZzX0
mFiVwsrelqTLtHvBV5xZ3Z5W79lxrq1ZrSFtyvzXKLp4Ko9mCUvUDyU8Zt0d2/oI
kT/OfVnOixrO4a2qzW350H5rURXimHY1Sq0cz0Ni8nUFStc7qE30r9UKafubFZXV
un4BHIJGCL4Y6X/BEKNrvWeCSRYT8Y7BI282oA49+SvD8/ywfQ2Xg4Mp8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrb6pHck5FTiI46fZNOcpSg4B7rMB8GA1UdIwQY
MBaAFF+t0OlFvGEQHGm85ko9couhu4ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMDA3M2QtMzg4Zi00YWI5LWI5MGUt
NzFjN2U4YWM1OWMwLzEvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iMDA3M2QtMzg4Zi00YWI5LWI5MGUtNzFjN2U4YWM1OWMw
LzEvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQseRdPy
0hayH46CD7hR6TpmyDywi18VNq7WOSJ0K8j2Cc0froXgukYM5s2SijDwS2c10MOP
GdKiXdVWL3t7V3q1jVsOMDm4QbDhQi4atXlji/cPKckEL41or7hYfvwjDMa7UGXN
f5K+vkI98hY1mu9BQjYJsYLwnehHs8SrB8GI7mVs+twPAB8tCM0QkzJ9Cq8XbWY0
xEpwiD7Y+x+MigGrzhdBDwU2EqHY+4+CH/uzAmf69ELk09rT2ics0DPurPiSW75O
FJzsFdELctVFi/tu+zvLDvC82PFFwaWOoOgkkyUu4F3CY/CDgJsV/OJMu8RbVWOG
Ucy4AG7Vfn/n9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:27 2025 by rpki-client