Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: 3qvKJGOGuxq6q+9ok5HpnvSFEtEyKCTGeiZLfUwU2mY=
Subject key identifier: 55:B9:FC:D4:09:1D:80:5E:A9:1A:AA:1F:E6:05:2A:3C:06:00:FC:FE
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 0197B5FBEC7A94C33656F65557EF61E673E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0779
Signing time: Sat 28 Jun 2025 10:01:15 +0000
Manifest this update: Sat 28 Jun 2025 10:01:15 +0000
Manifest next update: Sun 29 Jun 2025 10:01:15 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: DT2GMmzY3rx1fcUqpxR1XMHfqWteQBfPJDnPots06rQ=)
2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ec:7a:94:c3:36:56:f6:55:57:ef:61:e6:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Jun 28 10:01:15 2025 GMT
Not After : Jun 29 10:01:15 2025 GMT
Subject: CN=55b9fcd4091d805ea91aaa1fe6052a3c0600fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:24:8d:d7:9f:c9:d4:16:de:c2:c4:a7:6c:
e3:96:27:0e:cf:5d:99:df:b6:b5:cf:ed:ad:d9:9e:
b3:2d:8b:b6:3d:36:d4:be:60:c4:f6:95:c0:3c:06:
2f:c7:e8:e9:d8:e5:4a:5c:b3:9e:a4:c0:9a:33:92:
75:a1:99:65:97:ac:16:43:bc:2b:7c:9e:2a:74:49:
44:cc:62:2b:98:4c:c1:95:f5:67:cf:44:65:b1:03:
49:ea:d4:cf:c4:b4:8c:4e:a2:10:3d:00:5c:49:a6:
51:ee:98:45:cd:c4:b3:f7:03:0e:bd:42:0f:34:b7:
64:06:d6:27:42:f6:ca:87:be:10:31:fe:56:20:b2:
ec:4e:ba:9a:5c:41:a6:ab:d7:10:8a:af:7a:5a:1a:
8b:4e:3d:3b:43:da:46:c7:f9:e3:77:47:8b:a4:fc:
6e:ca:71:74:fc:df:53:80:6d:a4:e2:c3:3b:15:99:
1e:68:0e:66:9e:4e:dc:41:04:d8:3a:aa:a2:6a:ef:
63:bb:01:f9:2b:97:30:ab:c2:f2:f8:d1:78:36:77:
9a:6d:ee:c6:ba:d6:c8:a2:42:75:5a:01:74:c3:bc:
c6:c1:d9:8b:a0:ea:8d:4d:9e:1d:cc:5d:ed:dd:71:
7f:b8:0a:fa:20:00:f2:c4:97:ed:a6:a0:27:a4:f2:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:FC:D4:09:1D:80:5E:A9:1A:AA:1F:E6:05:2A:3C:06:00:FC:FE
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:97:ce:20:48:37:17:4d:86:d9:1b:17:3a:f1:ef:ea:40:
c9:67:fd:ff:5a:18:ca:e6:7f:db:95:c8:f6:b0:e9:15:84:b9:
dd:1b:b5:35:46:fb:5f:20:97:ce:58:1c:c0:17:a2:fe:12:0a:
36:4e:f5:be:70:d4:ca:cb:86:b2:98:ba:a7:99:be:7d:46:5a:
12:a3:8e:bb:f8:d5:c8:42:8d:5c:7e:83:41:26:f2:75:fa:08:
89:67:2b:00:99:41:3e:17:aa:54:ac:a5:da:21:b8:c1:4d:d2:
9e:ff:02:ff:b8:46:ca:50:c1:32:bd:9e:03:be:19:aa:1a:21:
11:dd:dd:e4:a7:2e:c9:34:5c:6e:86:41:4f:73:36:f2:3e:fe:
aa:fe:ba:bd:8b:cf:4d:98:e1:48:6d:03:87:61:94:3b:e4:79:
ce:0c:e3:95:2a:14:01:a6:fc:c0:10:a4:be:7c:08:9b:6a:75:
66:24:fb:1f:c4:25:10:60:a8:6a:48:e2:60:38:51:ff:3c:5b:
2c:a4:54:7c:1c:d9:6d:52:bb:38:46:dd:f8:d1:84:a4:3b:d7:
2f:cf:3a:a1:81:09:0c:14:2c:f2:c0:c5:cf:87:f1:72:e3:17:
32:c9:bc:36:16:79:68:ee:c2:e2:8e:53:7b:89:92:95:10:43:
c9:38:a7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1++x6lMM2VvZVV+9h5nPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGRmMGM4ZTVkMWIyMzUzOGJlYjVlY2NjM2FiMTI4NjVk
ZjdlYWEwHhcNMjUwNjI4MTAwMTE1WhcNMjUwNjI5MTAwMTE1WjAzMTEwLwYDVQQD
Eyg1NWI5ZmNkNDA5MWQ4MDVlYTkxYWFhMWZlNjA1MmEzYzA2MDBmY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEkjdefydQW3sLEp2zjlicOz12Z
37a1z+2t2Z6zLYu2PTbUvmDE9pXAPAYvx+jp2OVKXLOepMCaM5J1oZlll6wWQ7wr
fJ4qdElEzGIrmEzBlfVnz0RlsQNJ6tTPxLSMTqIQPQBcSaZR7phFzcSz9wMOvUIP
NLdkBtYnQvbKh74QMf5WILLsTrqaXEGmq9cQiq96WhqLTj07Q9pGx/njd0eLpPxu
ynF0/N9TgG2k4sM7FZkeaA5mnk7cQQTYOqqiau9juwH5K5cwq8Ly+NF4Nneabe7G
utbIokJ1WgF0w7zGwdmLoOqNTZ4dzF3t3XF/uAr6IADyxJftpqAnpPJaBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW5/NQJHYBeqRqqH+YFKjwGAPz+MB8GA1UdIwQY
MBaAFF8N8Mjl0bI1OL617Mw6sShl336qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUt
YmM1MTNhOThiOWJlLzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUtYmM1MTNhOThiOWJl
LzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuuXziBI
NxdNhtkbFzrx7+pAyWf9/1oYyuZ/25XI9rDpFYS53Ru1NUb7XyCXzlgcwBei/hIK
Nk71vnDUysuGspi6p5m+fUZaEqOOu/jVyEKNXH6DQSbydfoIiWcrAJlBPheqVKyl
2iG4wU3Snv8C/7hGylDBMr2eA74ZqhohEd3d5KcuyTRcboZBT3M28j7+qv66vYvP
TZjhSG0Dh2GUO+R5zgzjlSoUAab8wBCkvnwIm2p1ZiT7H8QlEGCoakjiYDhR/zxb
LKRUfBzZbVK7OEbd+NGEpDvXL886oYEJDBQs8sDFz4fxcuMXMsm8NhZ5aO7C4o5T
e4mSlRBDyTinuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:43 2025 by rpki-client