Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: UH2RbWvwMVyasTquomg8hGUVYfQ+KBfgPlrSA9+njGM=
Subject key identifier: 7E:BE:C0:8C:85:E8:E5:02:DD:E3:27:E0:54:B7:04:8F:25:E0:9A:01
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 0198D65FD35BA530BE932C412FA7BC4F6E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0DAF
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: t8KwZZypMqMsOqbxzUptTH1K0UTjgBmoieiR2tyNCNE=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d3:5b:a5:30:be:93:2c:41:2f:a7:bc:4f:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=7ebec08c85e8e502dde327e054b7048f25e09a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:3f:86:b4:c0:fb:e9:58:e2:ed:9c:6f:0d:
69:03:6f:2e:da:0a:e5:ee:c2:71:3e:0e:73:6d:db:
50:06:4b:bc:4c:85:d9:82:25:77:b5:72:4b:57:c1:
d7:54:ae:9b:a0:62:14:2e:89:39:cb:3c:9b:17:04:
c9:ba:49:bf:97:ac:4a:c8:62:dc:1f:3e:e7:4f:05:
32:c7:2f:36:50:4a:17:92:9f:fe:d2:1d:e9:0f:d3:
d4:6b:75:1a:bd:84:ad:10:65:88:3d:47:32:b4:0e:
49:77:2a:82:5a:13:49:c0:c4:81:92:58:86:4a:3f:
15:78:24:73:5e:f3:b0:b8:3f:db:b7:9e:ce:cb:1c:
29:05:a4:5c:ba:95:6d:98:47:90:9d:70:80:6a:32:
27:a4:f2:ce:38:87:57:31:cb:de:8a:fa:e6:ad:1b:
f5:e3:b2:f6:bb:31:8f:b4:e5:77:7b:b6:50:cc:5b:
f7:5a:3f:dc:9c:9d:6c:d0:1d:73:46:e1:78:68:51:
9f:9a:02:c1:24:dc:5d:3e:ec:c8:96:dc:8a:0b:e3:
d5:02:d6:31:96:00:49:37:22:2f:8f:f9:87:c3:8e:
d1:5f:03:9a:23:00:ff:a9:08:fa:88:63:14:a7:73:
fe:d9:88:5e:3d:b0:0a:d3:32:dc:7b:b3:b6:53:ac:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BE:C0:8C:85:E8:E5:02:DD:E3:27:E0:54:B7:04:8F:25:E0:9A:01
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0e:ab:8a:12:05:5f:e2:9a:b8:fe:a4:26:5f:f7:0f:ca:ca:
3b:87:1e:6b:2f:b4:0a:28:a9:d0:aa:85:5b:bc:2e:ea:c5:bf:
36:4d:81:42:0d:12:13:66:93:72:a0:6c:be:5c:93:b5:40:04:
d2:67:2e:4e:8d:e1:33:bc:29:ed:ee:3c:48:eb:d6:5c:e9:9a:
83:3a:7a:3b:85:00:e0:e2:17:ad:8f:03:b8:2d:4d:cf:7d:58:
30:32:cd:c4:7b:a6:b8:d1:b3:80:46:1d:6c:51:99:f2:5d:a3:
42:96:2d:48:8b:b0:5a:ea:c2:b2:7e:07:1e:aa:a7:cd:b6:db:
47:3d:de:6e:86:fa:b9:cc:00:0e:fe:84:62:c3:8e:0a:ae:11:
b7:f8:1e:ba:23:f8:1e:42:1a:dd:fe:db:28:5d:1a:aa:84:03:
c8:cf:f8:0b:29:55:9b:63:c8:2f:fe:f9:89:c0:6d:34:26:30:
a2:67:ef:77:45:fa:c8:db:80:36:e0:34:93:ec:fa:95:d6:ed:
dc:92:c3:8f:8c:89:ec:21:10:0b:a2:4e:4c:18:e3:38:f9:5c:
08:e5:cc:75:cc:6a:32:5a:bd:45:96:f3:e6:57:82:9b:9a:d4:
cc:3a:bd:76:a5:0a:1f:38:7a:61:1a:29:8a:8b:a5:0f:22:3f:
21:44:8a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9NbpTC+kyxBL6e8T25qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjUwODIzMTAwMTAwWhcNMjUwODI0MTAwMTAwWjAzMTEwLwYDVQQD
Eyg3ZWJlYzA4Yzg1ZThlNTAyZGRlMzI3ZTA1NGI3MDQ4ZjI1ZTA5YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ0/hrTA++lY4u2cbw1pA28u2grl
7sJxPg5zbdtQBku8TIXZgiV3tXJLV8HXVK6boGIULok5yzybFwTJukm/l6xKyGLc
Hz7nTwUyxy82UEoXkp/+0h3pD9PUa3UavYStEGWIPUcytA5JdyqCWhNJwMSBkliG
Sj8VeCRzXvOwuD/bt57OyxwpBaRcupVtmEeQnXCAajInpPLOOIdXMcveivrmrRv1
47L2uzGPtOV3e7ZQzFv3Wj/cnJ1s0B1zRuF4aFGfmgLBJNxdPuzIltyKC+PVAtYx
lgBJNyIvj/mHw47RXwOaIwD/qQj6iGMUp3P+2YhePbAK0zLce7O2U6yufwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6+wIyF6OUC3eMn4FS3BI8l4JoBMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ6rihIF
X+KauP6kJl/3D8rKO4ceay+0Ciip0KqFW7wu6sW/Nk2BQg0SE2aTcqBsvlyTtUAE
0mcuTo3hM7wp7e48SOvWXOmagzp6O4UA4OIXrY8DuC1Nz31YMDLNxHumuNGzgEYd
bFGZ8l2jQpYtSIuwWurCsn4HHqqnzbbbRz3ebob6ucwADv6EYsOOCq4Rt/geuiP4
HkIa3f7bKF0aqoQDyM/4CylVm2PIL/75icBtNCYwomfvd0X6yNuANuA0k+z6ldbt
3JLDj4yJ7CEQC6JOTBjjOPlcCOXMdcxqMlq9RZbz5leCm5rUzDq9dqUKHzh6YRop
ioulDyI/IUSK/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:36 2025 by rpki-client