Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier: fWRXOvAhB/ng/dwMoSBJ5KlWXRv/4NnDVV1dQJ9gqLY=
Subject key identifier: 5E:B4:A2:E0:D1:BC:23:7D:64:DF:BC:56:34:D4:19:51:FE:F3:47:A9
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial: 0198D54E673E2ADFA5EDB1F44C3F8E4A3389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number: 0A2F
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: Mh19AowDSaRkf11y/NAB3dGA5H+k7YqMPb0fGCe6V2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:67:3e:2a:df:a5:ed:b1:f4:4c:3f:8e:4a:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=5eb4a2e0d1bc237d64dfbc5634d41951fef347a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:62:99:3a:53:f1:0e:74:53:06:b6:cb:5b:
bf:8b:08:48:0f:bb:34:d2:af:65:ab:35:fd:20:0d:
14:7f:dc:f2:8e:d6:86:c4:1b:3f:63:ce:4f:e2:18:
d5:3c:21:38:45:69:e3:6a:7d:c0:63:91:63:6c:cc:
d8:6a:6c:4e:ae:e6:40:aa:10:c6:a8:11:ed:2c:ca:
96:b2:05:a6:48:3f:f1:03:db:c3:5c:52:ad:73:53:
1a:72:c0:a8:1e:3d:79:d5:fb:a6:f5:d2:d2:45:5e:
1e:dd:45:ea:10:ca:33:a5:ea:4d:66:2c:15:59:25:
84:a2:a7:c1:1b:c3:49:7e:32:77:56:70:98:64:b8:
53:fb:79:e3:52:5a:61:bc:d3:f9:be:44:a2:f6:c6:
09:ee:04:2b:a6:91:c5:a6:62:f7:7c:43:ea:25:04:
10:21:1f:b8:e0:88:16:64:6b:52:f9:92:4f:aa:7d:
68:db:40:a5:a7:ad:aa:e1:bd:8a:49:d8:1d:93:11:
9e:de:ac:05:b9:56:6e:e5:01:bb:35:75:7a:b1:08:
84:1b:e1:82:21:c6:bc:82:bc:b4:f8:c2:16:28:1b:
d2:12:a8:67:a6:2c:30:2a:b8:bc:b5:ab:9a:50:d7:
a5:c6:bb:f6:9c:d0:8d:f8:dd:7f:02:21:7b:eb:c6:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B4:A2:E0:D1:BC:23:7D:64:DF:BC:56:34:D4:19:51:FE:F3:47:A9
X509v3 Authority Key Identifier:
keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:02:0e:ad:8c:85:88:15:77:98:0e:a5:f8:81:6c:85:83:
ea:8c:5a:cc:7c:51:eb:24:3d:27:41:0d:4b:cb:d2:2b:00:26:
08:26:c4:84:c8:5a:6b:17:0f:9d:39:8c:f8:84:af:f6:5a:ba:
2c:fc:27:f6:6e:8d:ba:f9:59:cb:b2:0d:fb:c5:2f:c6:ce:64:
ea:3e:58:52:ab:3c:ef:78:93:3e:fd:aa:6c:54:70:2e:d6:76:
84:35:db:dd:a9:10:fa:77:e2:65:7d:4c:b9:31:cf:6b:cc:2f:
4e:07:7d:30:e0:60:61:7c:8e:95:fa:2f:6a:1c:94:8c:c3:e4:
72:a5:de:97:16:c3:46:fe:29:e0:56:18:1e:84:a3:89:c4:37:
ed:ab:23:b0:f4:79:d3:cf:b5:3b:e0:34:ae:9e:c3:0a:63:4c:
6d:a7:73:0c:13:be:fa:25:6d:11:cd:a2:e0:39:fe:4b:60:62:
97:30:16:a1:60:80:13:2f:28:a1:12:3f:35:3d:7e:d8:dd:15:
c2:18:cb:ba:c0:2a:ec:10:dc:61:c5:fd:94:77:78:82:65:8b:
53:ce:b2:21:84:44:b3:79:6d:9c:fd:31:08:0c:dd:7c:c0:21:
2c:a4:b9:83:f2:f5:fb:88:88:f3:29:5b:41:77:dc:fe:f8:5e:
2e:a9:2b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmc+Kt+l7bH0TD+OSjOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTM4ZTI2YjI5ODRiMmZhMTYxYWFjMDdiMDRiZGI4NTBh
YWRkMTYwHhcNMjUwODIzMDUwMjIxWhcNMjUwODI0MDUwMjIxWjAzMTEwLwYDVQQD
Eyg1ZWI0YTJlMGQxYmMyMzdkNjRkZmJjNTYzNGQ0MTk1MWZlZjM0N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYpimTpT8Q50Uwa2y1u/iwhID7s0
0q9lqzX9IA0Uf9zyjtaGxBs/Y85P4hjVPCE4RWnjan3AY5FjbMzYamxOruZAqhDG
qBHtLMqWsgWmSD/xA9vDXFKtc1MacsCoHj151fum9dLSRV4e3UXqEMozpepNZiwV
WSWEoqfBG8NJfjJ3VnCYZLhT+3njUlphvNP5vkSi9sYJ7gQrppHFpmL3fEPqJQQQ
IR+44IgWZGtS+ZJPqn1o20Clp62q4b2KSdgdkxGe3qwFuVZu5QG7NXV6sQiEG+GC
Ica8gry0+MIWKBvSEqhnpiwwKri8tauaUNelxrv2nNCN+N1/AiF768ZymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF60ouDRvCN9ZN+8VjTUGVH+80epMB8GA1UdIwQY
MBaAFF2TjiaymEsvoWGqwHsEvbhQqt0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEt
NmVjN2RiZTI3YmIzLzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEtNmVjN2RiZTI3YmIz
LzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKegCDq2M
hYgVd5gOpfiBbIWD6oxazHxR6yQ9J0ENS8vSKwAmCCbEhMhaaxcPnTmM+ISv9lq6
LPwn9m6NuvlZy7IN+8Uvxs5k6j5YUqs873iTPv2qbFRwLtZ2hDXb3akQ+nfiZX1M
uTHPa8wvTgd9MOBgYXyOlfovahyUjMPkcqXelxbDRv4p4FYYHoSjicQ37asjsPR5
08+1O+A0rp7DCmNMbadzDBO++iVtEc2i4Dn+S2BilzAWoWCAEy8ooRI/NT1+2N0V
whjLusAq7BDcYcX9lHd4gmWLU86yIYREs3ltnP0xCAzdfMAhLKS5g/L1+4iI8ylb
QXfc/vheLqkrtw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:18 2025 by rpki-client