Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File: XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier: K//JmGCqYDDLFApw878gnJkL0N/p0bMq0RlaJymI5zk=
Subject key identifier: C9:22:F5:EA:52:E6:CD:75:B3:0B:F9:3A:F9:4E:FF:91:76:88:FF:55
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer: /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial: 0198D66066905C5A3A346D02C67719E60DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number: 0B56
Signing time: Sat 23 Aug 2025 10:01:38 +0000
Manifest this update: Sat 23 Aug 2025 10:01:38 +0000
Manifest next update: Sun 24 Aug 2025 10:01:38 +0000
Files and hashes: 1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: w3KZawK2RnKtaOSfvSaKu05M8uc+mS+hQQkh2g7FNEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:66:90:5c:5a:3a:34:6d:02:c6:77:19:e6:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Validity
Not Before: Aug 23 10:01:38 2025 GMT
Not After : Aug 24 10:01:38 2025 GMT
Subject: CN=c922f5ea52e6cd75b30bf93af94eff917688ff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:c6:a8:2a:af:a8:60:cf:8b:e4:2f:46:f3:
09:f9:25:15:6e:4a:8f:7b:ee:ee:c7:81:de:ce:e7:
e4:8e:01:1c:26:7c:3d:09:85:21:8c:6e:d8:45:27:
99:0c:30:0a:74:95:22:a3:8a:d2:3a:73:e9:1d:f6:
aa:99:54:fd:9d:ca:56:79:c0:6d:8c:85:e2:93:d8:
92:44:10:9f:02:20:17:da:08:71:b7:f0:f2:be:df:
37:d1:6c:88:f4:3d:ec:55:6c:15:bd:ff:f3:77:45:
32:74:fa:73:79:e3:e2:c4:74:c1:ff:e3:5f:6a:b9:
7b:39:97:12:75:90:dc:7d:f7:8e:28:7e:89:6b:6d:
96:c5:6a:a5:2b:b5:b6:f0:50:97:8c:0d:f9:cf:bf:
63:58:39:ca:de:0a:23:8d:78:64:fb:d8:25:8f:75:
eb:a8:93:af:5c:ec:1e:2a:61:ef:cf:29:4c:73:84:
ae:20:d1:5b:f4:fb:9a:4c:61:b6:b5:e0:9b:7a:0a:
00:5c:1f:8c:aa:c7:85:0a:d4:b3:df:85:4d:5f:65:
e7:04:ce:47:12:60:d0:a7:58:12:78:ea:11:a0:50:
1f:da:2d:60:b2:72:4e:da:40:c5:1e:c5:1e:23:50:
9a:9e:f6:5d:75:a2:3e:60:93:9f:9c:55:60:de:3f:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:22:F5:EA:52:E6:CD:75:B3:0B:F9:3A:F9:4E:FF:91:76:88:FF:55
X509v3 Authority Key Identifier:
keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:a4:42:ab:c2:51:93:d8:02:79:67:fb:ab:c8:b4:e8:83:
24:52:74:be:6f:66:e1:4e:5f:01:f6:3e:3f:5a:ae:89:84:37:
d4:b9:71:53:1e:cf:23:f7:5f:99:88:f8:57:07:59:54:f7:89:
60:aa:7f:9e:fb:0b:cf:c0:44:84:b8:d9:09:50:a3:a7:30:c5:
98:da:63:d4:43:d8:93:db:a4:bc:79:04:88:d0:18:4e:56:e3:
b9:3c:3f:92:dc:db:b1:83:36:5f:92:a8:93:da:6b:a8:b8:fb:
c6:46:c5:76:37:9f:d8:16:42:44:75:fc:41:15:c4:88:a3:74:
97:df:85:3b:38:77:34:9f:07:91:79:05:2d:ef:7e:65:95:56:
81:15:cd:a2:8c:2d:e7:8f:25:bd:69:87:72:f7:d1:39:3c:9d:
8f:3d:8c:b5:a5:ca:f1:af:37:4f:4f:54:0a:7b:ef:ce:b1:8e:
0e:2d:78:c5:5a:dd:1e:35:d3:f5:33:20:e4:56:5c:21:e2:b9:
fd:ba:77:fa:aa:e8:83:95:b1:56:e5:54:55:e4:0a:e5:be:fe:
16:52:27:0f:13:ca:17:30:87:14:4d:1a:fa:23:8c:20:f6:e9:
10:ac:60:35:11:a8:e5:37:bb:5e:e0:17:86:e6:0e:64:8a:62:
67:07:6f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGaQXFo6NG0CxncZ5g3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTY5YzkxZDQ1MzM5NmJmYTE2NmYwNTFiZjhmMDZjMDNh
MDg1Y2IwHhcNMjUwODIzMTAwMTM4WhcNMjUwODI0MTAwMTM4WjAzMTEwLwYDVQQD
EyhjOTIyZjVlYTUyZTZjZDc1YjMwYmY5M2FmOTRlZmY5MTc2ODhmZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+HGqCqvqGDPi+QvRvMJ+SUVbkqP
e+7ux4HezufkjgEcJnw9CYUhjG7YRSeZDDAKdJUio4rSOnPpHfaqmVT9ncpWecBt
jIXik9iSRBCfAiAX2ghxt/Dyvt830WyI9D3sVWwVvf/zd0UydPpzeePixHTB/+Nf
arl7OZcSdZDcffeOKH6Ja22WxWqlK7W28FCXjA35z79jWDnK3gojjXhk+9glj3Xr
qJOvXOweKmHvzylMc4SuINFb9PuaTGG2teCbegoAXB+MqseFCtSz34VNX2XnBM5H
EmDQp1gSeOoRoFAf2i1gsnJO2kDFHsUeI1CanvZddaI+YJOfnFVg3j940QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMki9epS5s11swv5OvlO/5F2iP9VMB8GA1UdIwQY
MBaAFFzmnJHUUzlr+hZvBRv48GwDoIXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQt
YTU5N2VlNjM3ZGI0LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQtYTU5N2VlNjM3ZGI0
LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBOkQqvC
UZPYAnln+6vItOiDJFJ0vm9m4U5fAfY+P1quiYQ31LlxUx7PI/dfmYj4VwdZVPeJ
YKp/nvsLz8BEhLjZCVCjpzDFmNpj1EPYk9ukvHkEiNAYTlbjuTw/ktzbsYM2X5Ko
k9prqLj7xkbFdjef2BZCRHX8QRXEiKN0l9+FOzh3NJ8HkXkFLe9+ZZVWgRXNoowt
548lvWmHcvfROTydjz2MtaXK8a83T09UCnvvzrGODi14xVrdHjXT9TMg5FZcIeK5
/bp3+qrog5WxVuVUVeQK5b7+FlInDxPKFzCHFE0a+iOMIPbpEKxgNRGo5Te7XuAX
huYOZIpiZwdvSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:45 2025 by rpki-client