Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: 2EIH4kjE+W3d/4v+wmieHySwDuLqcSIkqiBjnz7TLZk=
Subject key identifier: 57:76:97:22:2F:73:9B:08:B4:6C:AF:6E:08:44:93:19:96:08:08:5F
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 0197B820CB61E5F9F9826F773E6C6FA5D5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: l3ywbWPslV9YVpoCHliKrzavVVildhklV6cY5j/sZCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cb:61:e5:f9:f9:82:6f:77:3e:6c:6f:a5:d5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=577697222f739b08b46caf6e084493199608085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:ff:cd:55:44:6f:30:75:6e:9c:0f:83:eb:
8e:8c:20:a8:e8:78:6f:dc:7e:b6:21:19:41:3f:b4:
db:ad:d9:da:ac:a2:32:da:15:8c:26:51:3a:4c:ec:
a9:01:01:83:88:7e:06:81:51:f6:bf:b8:fd:27:03:
94:34:4d:33:d3:ab:f1:16:90:7d:06:80:dc:9a:4c:
d0:f6:59:4a:df:84:74:c6:00:f7:bb:88:e7:ed:3b:
3a:5c:ad:48:16:1e:cd:e6:7e:6d:f2:4e:f0:ae:97:
f1:82:20:0c:c1:db:be:c6:50:4e:4e:5d:8a:7d:05:
88:a4:28:1c:de:72:4e:52:4d:00:10:d2:a8:28:c5:
26:bc:05:e6:b6:56:aa:01:0a:66:6e:80:9b:f3:e4:
e9:67:ca:4a:82:13:1e:ba:be:e6:f7:cf:5b:be:df:
eb:06:c0:f4:37:69:1c:d8:ac:cf:1b:8d:7f:3c:cd:
66:b0:a4:33:e6:ec:0d:5e:64:57:c0:45:b3:56:fe:
01:29:60:a7:fa:cd:ed:58:2b:b1:d0:75:1e:33:cd:
97:15:8b:56:50:39:ff:df:8a:5e:8a:bb:24:ad:8d:
e3:35:19:8a:f9:f4:4f:c1:d4:81:79:29:c1:6c:47:
b4:60:14:88:9c:de:76:33:62:13:74:fb:85:58:35:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:97:22:2F:73:9B:08:B4:6C:AF:6E:08:44:93:19:96:08:08:5F
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:fd:cb:5e:8e:a4:d1:5b:c7:dc:a7:c9:26:7e:2f:ed:cd:
d2:49:be:b2:ae:5b:2a:f8:2b:6e:1d:78:2d:33:d1:e4:ad:68:
8f:96:98:6c:57:bd:4c:8f:d5:91:35:31:76:27:4a:e5:12:f1:
aa:32:46:24:c6:92:63:5d:78:07:c6:66:10:f8:81:83:2e:98:
0e:99:fc:8c:5e:ac:fe:5e:89:d1:08:f4:57:f1:75:de:62:84:
f7:fe:48:79:54:34:df:7c:e9:9b:eb:87:2d:77:f3:70:03:dd:
9d:21:f2:20:30:d0:a0:b3:03:8a:ed:aa:8d:d6:2d:8f:b4:a1:
58:f1:b3:be:04:95:03:3d:fc:eb:ea:eb:7c:74:bb:64:4a:8f:
02:ed:2a:1d:f8:0a:38:5b:65:0e:2f:f0:86:24:3f:43:bb:a3:
58:ea:31:9d:53:b5:50:52:e8:c4:f7:9a:01:30:08:12:80:83:
2a:d6:c4:75:bb:66:33:27:5f:b2:7f:34:84:4b:1e:db:af:be:
8b:6f:e0:5a:29:d3:31:cd:58:1c:81:55:21:ab:34:dc:a0:a7:
0b:7c:d7:87:11:66:11:df:55:92:e3:5a:2e:ea:7b:7e:40:1b:
6e:2c:95:ff:6a:7c:28:4a:f6:a8:29:e2:39:8f:44:81:08:b7:
04:3b:3a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IMth5fn5gm93PmxvpdWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmU4ZDcyNTI2ZTRlNzNhM2I1N2Q5MzYwZjNhNTFiZWI1
OWE0NWYwHhcNMjUwNjI4MjAwMDQ2WhcNMjUwNjI5MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg1Nzc2OTcyMjJmNzM5YjA4YjQ2Y2FmNmUwODQ0OTMxOTk2MDgwODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk7/zVVEbzB1bpwPg+uOjCCo6Hhv
3H62IRlBP7TbrdnarKIy2hWMJlE6TOypAQGDiH4GgVH2v7j9JwOUNE0z06vxFpB9
BoDcmkzQ9llK34R0xgD3u4jn7Ts6XK1IFh7N5n5t8k7wrpfxgiAMwdu+xlBOTl2K
fQWIpCgc3nJOUk0AENKoKMUmvAXmtlaqAQpmboCb8+TpZ8pKghMeur7m989bvt/r
BsD0N2kc2KzPG41/PM1msKQz5uwNXmRXwEWzVv4BKWCn+s3tWCux0HUeM82XFYtW
UDn/34peirskrY3jNRmK+fRPwdSBeSnBbEe0YBSInN52M2ITdPuFWDV4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd2lyIvc5sItGyvbghEkxmWCAhfMB8GA1UdIwQY
MBaAFFz+jXJSbk5zo7V9k2DzpRvrWaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMt
ZTRkZGZhMzJlNTJlLzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMtZTRkZGZhMzJlNTJl
LzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYb9y16O
pNFbx9ynySZ+L+3N0km+sq5bKvgrbh14LTPR5K1oj5aYbFe9TI/VkTUxdidK5RLx
qjJGJMaSY114B8ZmEPiBgy6YDpn8jF6s/l6J0Qj0V/F13mKE9/5IeVQ033zpm+uH
LXfzcAPdnSHyIDDQoLMDiu2qjdYtj7ShWPGzvgSVAz386+rrfHS7ZEqPAu0qHfgK
OFtlDi/whiQ/Q7ujWOoxnVO1UFLoxPeaATAIEoCDKtbEdbtmMydfsn80hEse26++
i2/gWinTMc1YHIFVIas03KCnC3zXhxFmEd9VkuNaLup7fkAbbiyV/2p8KEr2qCni
OY9EgQi3BDs6Lw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:21 2025 by rpki-client