Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: BMNpR+sNLCjFVhPOQIMv/4bFF70zHRQu7Jf+eNjj7IM=
Subject key identifier: 1F:45:2E:DB:34:6C:27:1E:12:CD:AE:B7:35:E5:AC:FA:A0:30:FE:DA
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0197CFBBA669490AC75D74495D7D46F23748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0601
Signing time: Thu 03 Jul 2025 10:01:10 +0000
Manifest this update: Thu 03 Jul 2025 10:01:10 +0000
Manifest next update: Fri 04 Jul 2025 10:01:10 +0000
Files and hashes: 1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: e+KLS52swn6UhUiNU7wKdmiCOb1naOZ8XhbAZjanthE=)
3: tCB14kGV6U2NGcyfByN7-DomVJ8.roa (hash: UZ1VDBkhzAvTXI924h/1409nf6LFWjypU3ljSY/BZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bb:a6:69:49:0a:c7:5d:74:49:5d:7d:46:f2:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jul 3 10:01:10 2025 GMT
Not After : Jul 4 10:01:10 2025 GMT
Subject: CN=1f452edb346c271e12cdaeb735e5acfaa030feda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:68:b4:ee:0c:2c:e5:e2:96:87:a4:a5:15:
05:74:aa:4a:be:8d:27:04:86:bf:3c:82:a5:86:8e:
c9:13:42:80:5d:b0:93:c7:d5:8c:96:86:69:08:eb:
e3:42:f4:49:d0:9f:67:6e:0c:2a:12:d3:e5:35:25:
d5:10:a2:9f:98:0b:66:10:6a:4d:e0:03:98:26:fa:
7f:b7:ca:35:a3:75:db:06:36:0f:79:79:94:41:37:
b8:6a:ec:d7:aa:19:fa:81:bc:39:d1:55:6d:af:48:
7f:18:3f:b8:4d:f8:e4:90:bf:31:0a:95:fe:14:ab:
2e:6d:93:69:0b:62:d1:47:e2:24:bd:87:f8:31:49:
0d:2d:b2:f2:ed:9d:2d:46:5d:1b:d9:21:f3:7d:3f:
6f:7d:c1:18:b4:13:8a:9d:7d:81:18:35:b5:bf:82:
90:76:02:a5:8b:21:13:db:91:e2:e6:da:ae:33:bd:
4b:42:ae:d0:5c:6f:cb:42:3e:eb:e8:d3:97:2d:07:
04:a6:cf:16:6e:9f:8f:8f:f3:8d:c6:52:46:bb:f6:
a1:cd:cb:4e:60:e1:6e:c8:c3:db:f4:e0:cd:32:57:
5b:4b:67:98:15:a3:e6:19:01:72:ea:3a:15:ac:4d:
97:5b:52:d7:96:82:0c:81:ca:5e:d1:1d:b9:ab:70:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:45:2E:DB:34:6C:27:1E:12:CD:AE:B7:35:E5:AC:FA:A0:30:FE:DA
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:7c:c8:cc:ed:87:8d:ac:2c:69:9f:c1:a9:a8:16:60:18:
10:1f:3b:27:f6:da:ec:cc:35:f0:96:12:ba:0d:1a:73:db:a9:
d7:7d:1f:fb:94:96:b2:2f:76:3e:68:98:ce:1d:16:25:4a:58:
3b:7b:93:22:03:65:b1:1c:b8:08:8e:be:a4:ca:2b:77:64:f4:
42:b3:94:68:56:cb:73:a5:06:5f:37:41:e4:b7:0f:b0:de:af:
70:9d:34:da:c1:41:cb:68:2a:c6:d4:78:1d:aa:88:49:7a:99:
e1:87:4e:a8:f9:c6:8c:8a:9d:6b:95:2a:02:a9:9f:0b:4e:ac:
e4:b2:83:f0:3a:68:9e:c8:93:91:9a:b1:5e:f9:85:ed:ee:cf:
7a:2e:75:40:85:7e:57:0d:e1:43:f0:7d:62:2d:7a:58:6d:8e:
82:39:52:ea:36:d8:b1:1d:77:c4:80:02:50:96:90:e9:94:9f:
af:a8:9d:4e:3f:39:6d:2a:4d:78:39:39:55:1b:85:64:61:28:
82:3a:43:10:d8:7a:cc:3c:92:db:73:77:b4:39:48:08:fe:a5:
3d:0f:7b:0d:17:aa:70:5b:89:6c:58:ad:a0:52:3e:cc:19:27:
8b:53:44:d3:66:ec:32:9b:6e:02:7a:8b:d1:3c:c7:1c:89:13:
31:ee:2b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPu6ZpSQrHXXRJXX1G8jdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjUwNzAzMTAwMTEwWhcNMjUwNzA0MTAwMTEwWjAzMTEwLwYDVQQD
EygxZjQ1MmVkYjM0NmMyNzFlMTJjZGFlYjczNWU1YWNmYWEwMzBmZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0potO4MLOXiloekpRUFdKpKvo0n
BIa/PIKlho7JE0KAXbCTx9WMloZpCOvjQvRJ0J9nbgwqEtPlNSXVEKKfmAtmEGpN
4AOYJvp/t8o1o3XbBjYPeXmUQTe4auzXqhn6gbw50VVtr0h/GD+4TfjkkL8xCpX+
FKsubZNpC2LRR+IkvYf4MUkNLbLy7Z0tRl0b2SHzfT9vfcEYtBOKnX2BGDW1v4KQ
dgKliyET25Hi5tquM71LQq7QXG/LQj7r6NOXLQcEps8Wbp+Pj/ONxlJGu/ahzctO
YOFuyMPb9ODNMldbS2eYFaPmGQFy6joVrE2XW1LXloIMgcpe0R25q3CimwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9FLts0bCceEs2utzXlrPqgMP7aMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmh8yMzt
h42sLGmfwamoFmAYEB87J/ba7Mw18JYSug0ac9up130f+5SWsi92PmiYzh0WJUpY
O3uTIgNlsRy4CI6+pMord2T0QrOUaFbLc6UGXzdB5LcPsN6vcJ002sFBy2gqxtR4
HaqISXqZ4YdOqPnGjIqda5UqAqmfC06s5LKD8DponsiTkZqxXvmF7e7Pei51QIV+
Vw3hQ/B9Yi16WG2OgjlS6jbYsR13xIACUJaQ6ZSfr6idTj85bSpNeDk5VRuFZGEo
gjpDENh6zDyS23N3tDlICP6lPQ97DReqcFuJbFitoFI+zBkni1NE02bsMptuAnqL
0TzHHIkTMe4rDQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 17:19:18 2025 by rpki-client