Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: Bn3s5RI5D5F4jxVMWI6fZsulsoNCf9XduDflZ3zlUZQ=
Subject key identifier: E7:2B:BE:D2:33:F8:0F:B7:F5:A8:6A:AD:7C:49:65:94:01:01:F2:2D
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 0197B7B2E44C2547D6E139A254DF92EF1F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: 0j3GDG4QJYobVxefTU/cBTcY4jVrbZkmXsNdnbJgbPI=)
2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e4:4c:25:47:d6:e1:39:a2:54:df:92:ef:1f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=e72bbed233f80fb7f5a86aad7c4965940101f22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:fd:66:1e:02:99:e1:ae:77:61:4b:d9:2c:
f9:d5:2c:a9:48:b2:55:fe:2e:fd:76:2d:df:c6:d7:
1f:15:f4:ab:22:fe:30:0c:4b:11:3f:97:01:6c:6e:
a2:f1:0d:3f:77:97:1a:21:55:a4:dc:d3:e4:e1:42:
46:1c:21:39:a8:01:78:15:47:a9:0c:f6:ec:55:34:
76:48:d6:6e:f4:d4:19:74:c1:94:de:4d:13:90:cd:
7b:32:22:29:97:c3:02:5b:b4:7f:7f:71:54:0e:2f:
3b:c9:b1:45:30:c9:11:8f:83:4b:b4:3a:77:fc:a1:
18:60:db:6a:89:c6:67:3b:2a:e2:d6:47:f1:e7:69:
54:ec:a0:b0:b8:39:eb:2c:7f:3c:d0:ff:d6:24:27:
e9:cd:a9:fd:35:2c:7c:72:39:37:b2:44:54:78:db:
1a:b3:b5:8a:3f:9a:53:a1:17:6a:aa:ae:fc:74:90:
2a:92:be:54:d4:b4:22:7a:40:5f:7a:0b:1a:cc:b2:
f5:fa:7a:c7:6a:47:f6:72:95:1b:a0:3c:2a:7b:11:
e0:50:cf:fc:f5:6a:69:ca:96:d0:21:55:56:fd:94:
0a:89:41:46:d2:07:91:44:85:4a:04:c3:f9:d1:8c:
de:df:82:0c:37:b6:a0:21:a7:59:ad:4c:ba:6e:bf:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:BE:D2:33:F8:0F:B7:F5:A8:6A:AD:7C:49:65:94:01:01:F2:2D
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ad:06:04:1e:30:f9:6c:21:09:58:2b:ec:57:97:5d:3b:58:
56:28:d0:3b:08:db:6b:81:a8:9a:cf:76:1e:0a:ff:79:93:bc:
e6:79:0c:16:4e:61:4c:78:65:2c:ae:cf:23:d1:72:0d:ee:b9:
d6:e4:d5:e8:87:38:c6:cf:ef:c2:e6:a5:42:71:a5:e6:84:8b:
2a:3e:b4:c9:e5:da:56:6b:52:3f:4b:42:93:44:99:ac:7c:98:
02:18:ec:dd:12:d0:b4:47:88:ea:90:84:88:64:7f:e9:fa:af:
8a:98:43:0f:1b:dd:b8:f6:c4:73:63:5d:57:19:85:d6:1c:93:
b1:2b:33:dd:23:f5:ea:bb:bf:6b:0e:f4:72:53:8b:6a:22:d5:
1c:29:24:c2:fc:6d:e3:48:f8:ff:98:3b:47:1e:1e:93:48:0d:
c4:c9:72:82:66:4d:be:b0:fb:b5:bd:f0:85:53:c6:02:55:d8:
fd:ad:d0:86:a5:39:ad:9d:22:41:3d:99:fc:ad:93:f7:ce:00:
f0:5a:0a:8e:46:ab:b6:bd:84:fb:92:38:96:bc:ed:26:98:3c:
43:02:8b:85:de:40:d0:8b:c6:27:36:eb:6f:31:8f:2d:31:18:
51:af:5d:f8:f3:ac:5e:1c:8f:90:7a:f2:0a:47:50:67:02:7e:
7a:19:d5:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3suRMJUfW4TmiVN+S7x9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTc2OGUyNmZmNGY5YTJhOGE1NmRhNGRjYjdlMWVjMGMy
ZTRhOTMwHhcNMjUwNjI4MTgwMDQzWhcNMjUwNjI5MTgwMDQzWjAzMTEwLwYDVQQD
EyhlNzJiYmVkMjMzZjgwZmI3ZjVhODZhYWQ3YzQ5NjU5NDAxMDFmMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+H9Zh4CmeGud2FL2Sz51SypSLJV
/i79di3fxtcfFfSrIv4wDEsRP5cBbG6i8Q0/d5caIVWk3NPk4UJGHCE5qAF4FUep
DPbsVTR2SNZu9NQZdMGU3k0TkM17MiIpl8MCW7R/f3FUDi87ybFFMMkRj4NLtDp3
/KEYYNtqicZnOyri1kfx52lU7KCwuDnrLH880P/WJCfpzan9NSx8cjk3skRUeNsa
s7WKP5pToRdqqq78dJAqkr5U1LQiekBfegsazLL1+nrHakf2cpUboDwqexHgUM/8
9WppypbQIVVW/ZQKiUFG0geRRIVKBMP50Yze34IMN7agIadZrUy6br97vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcrvtIz+A+39ahqrXxJZZQBAfItMB8GA1UdIwQY
MBaAFF8XaOJv9PmiqKVtpNy34ewMLkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgt
MWUwMzY3YzA3ZDQ2LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgtMWUwMzY3YzA3ZDQ2
LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX60GBB4w
+WwhCVgr7FeXXTtYVijQOwjba4Goms92Hgr/eZO85nkMFk5hTHhlLK7PI9FyDe65
1uTV6Ic4xs/vwualQnGl5oSLKj60yeXaVmtSP0tCk0SZrHyYAhjs3RLQtEeI6pCE
iGR/6fqviphDDxvduPbEc2NdVxmF1hyTsSsz3SP16ru/aw70clOLaiLVHCkkwvxt
40j4/5g7Rx4ek0gNxMlygmZNvrD7tb3whVPGAlXY/a3QhqU5rZ0iQT2Z/K2T984A
8FoKjkartr2E+5I4lrztJpg8QwKLhd5A0IvGJzbrbzGPLTEYUa9d+POsXhyPkHry
CkdQZwJ+ehnV0w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:34:21 2025 by rpki-client