Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json)
Hash identifier: 9VYaiwG6jm/7Po9EO1kGCBmLAdnmQU1WLjKuv06H8Aw=
Subject key identifier: 90:73:3F:57:7E:A7:81:73:9F:36:F9:1B:15:E9:EC:5C:69:97:41:C2
Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Certificate issuer: /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Certificate serial: 0197B6A24761B49956B7DE949F84FF826C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: 3dOz99xUba4uNWQC1JJMI2MFZ1VLOiIBRg/VhNWWRuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:47:61:b4:99:56:b7:de:94:9f:84:ff:82:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=90733f577ea781739f36f91b15e9ec5c699741c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:f3:23:74:96:15:b6:ba:8a:45:cc:dc:13:
56:0d:37:35:05:bc:e8:8a:54:0e:1a:e3:8c:bf:20:
0d:e5:55:f9:6d:6c:3c:cb:24:8c:3f:3b:70:0e:20:
7d:e7:a8:73:84:25:a1:5f:5e:94:46:72:3a:8e:91:
4d:12:73:9b:a3:3d:27:f3:e7:ee:b1:0f:01:44:8e:
6d:bb:d2:f2:1d:23:38:65:23:97:34:a1:2f:1f:8d:
ce:90:c7:ff:d6:b7:b8:97:68:f7:fc:d4:00:70:e2:
9c:45:de:80:34:b9:0e:65:ba:62:6d:9b:b8:8a:58:
9b:89:d4:ca:51:91:81:67:30:ea:78:08:b9:ef:fc:
be:8b:f4:57:19:22:04:a5:14:67:70:d5:9f:f9:a7:
0d:18:64:a9:ab:82:86:03:13:94:10:01:0b:b0:78:
11:d6:c0:eb:14:6f:bb:92:57:36:ff:d5:d2:2f:11:
e2:f0:96:35:b8:d7:a8:c8:ff:c4:c5:a2:f8:4d:92:
74:54:86:a6:dc:d9:6c:8e:dc:94:22:11:4c:3e:8a:
0e:07:56:e3:43:5d:ca:91:52:34:0f:e9:6d:e3:b4:
f1:d7:4c:25:85:4e:f0:3a:d1:a3:45:bc:64:8e:d1:
39:8b:a6:ea:1c:7a:19:4a:3d:af:4a:10:e1:ce:8d:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:3F:57:7E:A7:81:73:9F:36:F9:1B:15:E9:EC:5C:69:97:41:C2
X509v3 Authority Key Identifier:
keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fe:6c:ef:01:53:a9:cd:c1:b6:d9:0c:19:a0:b0:ac:f4:03:
a8:bb:ed:2b:99:d7:f7:5d:a3:07:68:b2:29:82:0c:4e:7b:6c:
d0:80:cf:0c:33:a5:84:21:19:b1:5d:a7:99:2a:02:4d:48:c5:
db:e3:bc:b9:de:d6:12:73:30:62:58:14:dd:d4:78:59:70:cc:
d4:9e:2f:9f:ed:49:15:9e:fe:0e:15:00:f4:85:84:a2:64:ff:
a9:e8:44:84:74:44:17:92:0c:ff:aa:72:9e:7b:ae:b7:83:d7:
04:61:74:e4:2c:b8:64:90:8e:2e:bf:4a:ff:f8:6b:97:08:eb:
1e:7d:7e:e9:e5:c3:74:72:e9:06:ee:00:18:d4:55:f9:88:a2:
47:30:da:b2:02:b1:8f:c1:09:6c:de:d4:2e:39:c2:ad:5e:2d:
79:55:df:a6:99:58:0c:d1:1d:79:1e:cb:a4:5d:02:3b:bc:f3:
e9:06:56:e3:b8:68:a7:78:62:40:11:fd:b7:f3:be:32:1c:58:
5c:2e:39:0e:ff:27:ac:cc:53:41:f3:ed:a5:3f:f4:99:db:dd:
73:43:74:57:0a:54:fe:d3:93:8f:28:eb:e5:ce:4b:db:70:35:
17:13:a1:01:66:f1:ae:03:06:3c:35:01:7d:8c:b0:f0:5a:95:
d6:77:b7:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okdhtJlWt96Un4T/gmybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzQ0YTFhYzBjYmZjNDBjNzVhMGNmYzdiZWM5NmM3YzM1
YmQyN2IwHhcNMjUwNjI4MTMwMjU3WhcNMjUwNjI5MTMwMjU3WjAzMTEwLwYDVQQD
Eyg5MDczM2Y1NzdlYTc4MTczOWYzNmY5MWIxNWU5ZWM1YzY5OTc0MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln/zI3SWFba6ikXM3BNWDTc1Bbzo
ilQOGuOMvyAN5VX5bWw8yySMPztwDiB956hzhCWhX16URnI6jpFNEnOboz0n8+fu
sQ8BRI5tu9LyHSM4ZSOXNKEvH43OkMf/1re4l2j3/NQAcOKcRd6ANLkOZbpibZu4
ilibidTKUZGBZzDqeAi57/y+i/RXGSIEpRRncNWf+acNGGSpq4KGAxOUEAELsHgR
1sDrFG+7klc2/9XSLxHi8JY1uNeoyP/ExaL4TZJ0VIam3NlsjtyUIhFMPooOB1bj
Q13KkVI0D+lt47Tx10wlhU7wOtGjRbxkjtE5i6bqHHoZSj2vShDhzo1EIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBzP1d+p4Fznzb5GxXp7Fxpl0HCMB8GA1UdIwQY
MBaAFFw0ShrAy/xAx1oM/HvslsfDW9J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zMjlhYjgtYjFkOS00ZjlmLWE5Yzgt
Y2QxODUxMGVkY2RmLzEvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zMjlhYjgtYjFkOS00ZjlmLWE5YzgtY2QxODUxMGVkY2Rm
LzEvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv5s7wFT
qc3BttkMGaCwrPQDqLvtK5nX912jB2iyKYIMTnts0IDPDDOlhCEZsV2nmSoCTUjF
2+O8ud7WEnMwYlgU3dR4WXDM1J4vn+1JFZ7+DhUA9IWEomT/qehEhHREF5IM/6py
nnuut4PXBGF05Cy4ZJCOLr9K//hrlwjrHn1+6eXDdHLpBu4AGNRV+YiiRzDasgKx
j8EJbN7ULjnCrV4teVXfpplYDNEdeR7LpF0CO7zz6QZW47hop3hiQBH9t/O+MhxY
XC45Dv8nrMxTQfPtpT/0mdvdc0N0VwpU/tOTjyjr5c5L23A1FxOhAWbxrgMGPDUB
fYyw8FqV1ne3GQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:56 2025 by rpki-client