Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: iXEIgK71VqM+E6oSbsgJXe1HhYFmK2769VhYPlMXfN4=
Subject key identifier: 02:C2:FF:07:B6:B4:49:A6:F1:44:D1:C0:69:D0:D4:A0:9E:51:BB:62
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 0198D660FAB76295206343F8A2AB9F17CA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 126A
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: i3A2bvhv8AKgpT7Lsn++7Lm7kWBYbiqQwY5qmpkatJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fa:b7:62:95:20:63:43:f8:a2:ab:9f:17:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=02c2ff07b6b449a6f144d1c069d0d4a09e51bb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:06:d9:e0:40:6e:99:3d:c2:be:69:9d:5d:
f0:7b:a6:76:93:e4:25:47:2d:57:b7:43:de:d7:ca:
ee:4d:a2:6c:32:81:7c:ee:64:a0:af:20:7a:6d:9d:
69:29:e0:20:98:e4:98:ff:62:2f:e9:52:fe:43:10:
24:1c:d2:fe:7f:da:53:33:2e:35:f3:ed:bc:cc:44:
b2:57:bd:6d:b6:c6:7e:60:41:6e:3d:eb:7d:5a:49:
12:b8:53:76:89:08:fc:f9:db:e1:17:14:33:3d:e2:
46:4d:eb:94:66:07:ae:25:1c:b5:fe:a1:26:0f:8f:
bb:2d:4e:e5:8b:3a:e1:64:85:fb:17:da:78:3e:ed:
c7:1c:f9:d4:71:0d:ca:9a:2f:e3:7b:d6:51:eb:aa:
3d:ab:d2:fc:ad:c4:33:43:52:c7:0b:54:12:35:16:
e3:b5:a7:c8:39:f7:82:d8:ae:c5:c2:4e:2a:69:62:
ce:10:04:83:b6:b5:39:ca:e8:ae:b3:1c:ee:b6:bf:
bb:ad:ac:96:9b:1d:8e:6b:e3:d1:4a:db:dd:ac:a5:
9b:49:d4:33:cf:bb:4d:8f:30:29:03:58:70:f0:af:
e3:36:19:6e:6c:07:ac:93:08:8e:f3:19:f3:07:59:
34:a8:6b:d2:bc:ad:8b:9a:06:ad:18:b5:77:0d:a2:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:FF:07:B6:B4:49:A6:F1:44:D1:C0:69:D0:D4:A0:9E:51:BB:62
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:6a:4c:83:9f:ba:5b:05:65:5d:b2:3c:a2:22:ae:d6:6e:
7c:1f:4b:b7:6e:02:15:de:b7:e1:2e:47:bb:87:ca:76:6e:7f:
06:7d:67:c7:fb:6e:0c:9c:56:ed:0a:14:c6:41:24:e4:ab:a5:
55:1e:23:fd:c9:4e:c7:0e:1e:55:52:df:66:d9:1b:18:a5:94:
5a:ae:c8:0f:0e:9d:99:4c:58:72:68:b7:7c:1d:4b:cb:eb:36:
e5:02:df:00:40:54:8a:e7:e9:21:f1:7e:2e:65:f0:0c:ad:5f:
5e:2a:dc:b3:da:cf:96:b7:43:2b:ff:64:54:15:c7:5c:0b:3e:
26:f9:27:fa:7b:11:08:bf:3a:6b:7b:9c:aa:49:89:18:09:e2:
b5:87:1e:8d:10:b0:e2:31:87:9d:08:b2:42:ad:a1:9b:9f:a4:
dd:14:9f:8b:0d:13:41:76:87:6b:25:ff:2f:09:0a:46:9e:5f:
a3:e2:fc:00:db:36:39:31:66:3b:e0:e1:1c:16:25:fb:2e:18:
06:28:38:7d:37:ab:93:aa:ac:6a:44:15:cf:2f:91:b0:b2:fb:
87:b5:29:38:d9:c3:0a:21:05:67:3e:b4:38:e5:ee:40:0f:52:
ea:6e:ac:55:26:db:df:9c:93:20:65:43:08:e0:e8:59:9b:ba:
95:b5:29:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPq3YpUgY0P4oqufF8qHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjE1MmI2YTBkMDA0NjI3ZDI4NWQ4NzlhYTgzZTU4NDYx
YWIyZGYwHhcNMjUwODIzMTAwMjE2WhcNMjUwODI0MTAwMjE2WjAzMTEwLwYDVQQD
EygwMmMyZmYwN2I2YjQ0OWE2ZjE0NGQxYzA2OWQwZDRhMDllNTFiYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8MG2eBAbpk9wr5pnV3we6Z2k+Ql
Ry1Xt0Pe18ruTaJsMoF87mSgryB6bZ1pKeAgmOSY/2Iv6VL+QxAkHNL+f9pTMy41
8+28zESyV71ttsZ+YEFuPet9WkkSuFN2iQj8+dvhFxQzPeJGTeuUZgeuJRy1/qEm
D4+7LU7lizrhZIX7F9p4Pu3HHPnUcQ3Kmi/je9ZR66o9q9L8rcQzQ1LHC1QSNRbj
tafIOfeC2K7Fwk4qaWLOEASDtrU5yuiusxzutr+7rayWmx2Oa+PRStvdrKWbSdQz
z7tNjzApA1hw8K/jNhlubAeskwiO8xnzB1k0qGvSvK2LmgatGLV3DaJyTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALC/we2tEmm8UTRwGnQ1KCeUbtiMB8GA1UdIwQY
MBaAFMXxUrag0ARifShdh5qoPlhGGrLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYt
NzM3ZTc4Yzg3MDEyLzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYtNzM3ZTc4Yzg3MDEy
LzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbBqTIOf
ulsFZV2yPKIirtZufB9Lt24CFd634S5Hu4fKdm5/Bn1nx/tuDJxW7QoUxkEk5Kul
VR4j/clOxw4eVVLfZtkbGKWUWq7IDw6dmUxYcmi3fB1Ly+s25QLfAEBUiufpIfF+
LmXwDK1fXircs9rPlrdDK/9kVBXHXAs+Jvkn+nsRCL86a3ucqkmJGAnitYcejRCw
4jGHnQiyQq2hm5+k3RSfiw0TQXaHayX/LwkKRp5fo+L8ANs2OTFmO+DhHBYl+y4Y
Big4fTerk6qsakQVzy+RsLL7h7UpONnDCiEFZz60OOXuQA9S6m6sVSbb35yTIGVD
CODoWZu6lbUpBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:56 2025 by rpki-client