Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: v8/KKFo32zmv1MIk6UTz8vCdGwnp9SOvB1tPPzt6rDA=
Subject key identifier: 77:75:96:39:76:3F:05:71:14:E6:3D:6E:63:BD:0C:D8:B4:61:F4:A8
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 0198D65F08AD7EFD3CE4C9EF0819AE2C4874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 024B
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: QOBlyq5ZNtswh3+e0gXpl2oYv2jQDp9o2kHCgTXtOj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:08:ad:7e:fd:3c:e4:c9:ef:08:19:ae:2c:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=77759639763f057114e63d6e63bd0cd8b461f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:f0:38:51:9d:a9:8e:6a:27:a1:ea:97:32:
9d:86:6f:40:4b:2c:60:75:d2:5e:1c:b9:ad:86:54:
ae:5b:0d:ac:b6:d5:97:fd:b7:00:33:04:fe:5b:22:
5a:4c:87:34:94:31:95:a6:bb:33:68:8d:fa:00:03:
3c:ca:2e:07:27:55:a7:bc:43:ba:76:0a:ba:d1:2a:
b4:7e:4d:2e:c7:62:ea:16:c7:3c:24:da:a1:a1:f8:
bb:91:be:a9:c3:57:8c:ba:d6:3f:bf:85:d4:3a:57:
ad:6d:f6:dc:f0:1b:ee:f6:06:0f:af:81:4c:87:26:
56:4b:6e:c8:4b:1f:93:5f:32:26:a7:05:d1:d8:1c:
37:27:45:23:b0:49:9e:3b:b8:a0:49:69:e2:ff:99:
1d:6d:9f:d9:d4:d2:0f:f0:ff:8c:50:ea:a0:c3:6a:
fc:72:cd:15:e4:c6:60:7c:5d:f8:2e:28:b1:e2:48:
6c:a3:57:fd:22:08:12:e3:e2:7d:da:2b:12:d5:1b:
2f:86:2e:06:f1:bf:14:9b:79:45:0c:39:c6:b8:15:
22:7f:ee:ac:3e:1b:fe:46:b3:15:78:cb:b6:98:fe:
4a:63:c2:a5:61:09:29:79:f6:80:f4:52:c1:ef:35:
49:b1:a5:b1:01:dc:4b:3a:7c:b2:9c:75:3b:58:71:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:96:39:76:3F:05:71:14:E6:3D:6E:63:BD:0C:D8:B4:61:F4:A8
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e5:88:b1:e5:2a:71:a5:8d:e1:a2:fa:f4:0a:71:75:04:55:
1d:66:ab:fa:da:9d:be:22:58:be:43:30:5c:0d:88:25:37:7f:
fc:c5:3c:47:5a:b5:7d:ed:2e:4a:ad:0b:3f:6e:8c:5c:ba:cd:
cd:11:bf:26:59:e4:84:5c:23:f0:20:56:27:2c:29:0e:73:0d:
3b:6c:b3:f9:ac:0a:a4:43:bc:db:d5:83:13:07:85:18:0c:18:
d8:33:af:9c:9c:67:d9:cb:44:9e:df:9f:c7:45:36:78:31:62:
b8:36:9d:ce:33:e9:ec:c7:7a:11:85:8c:cf:eb:b1:53:e8:e1:
5b:e7:88:52:d5:2f:a3:2f:6c:56:fd:8b:c5:58:65:d8:5a:ac:
fd:1c:2b:e9:05:4d:1f:d8:ab:b4:91:b0:76:4d:29:95:8c:ef:
f5:f0:0c:be:98:a3:92:73:58:fc:97:a3:4d:e2:34:21:d1:6f:
93:79:10:7e:4f:14:72:5d:89:1d:ed:86:9f:4a:38:57:bb:27:
fe:f4:46:71:31:57:c2:e5:4f:1b:04:29:ee:fc:cf:86:30:a5:
d8:aa:1b:74:a9:e1:a7:46:7c:70:c7:35:ef:c2:80:a8:a6:da:
6b:73:09:7f:5e:54:bf:50:be:08:37:22:5e:d3:11:c5:ea:c8:
49:b7:6b:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwitfv085MnvCBmuLEh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi
N2MzZTUwHhcNMjUwODIzMTAwMDA5WhcNMjUwODI0MTAwMDA5WjAzMTEwLwYDVQQD
Eyg3Nzc1OTYzOTc2M2YwNTcxMTRlNjNkNmU2M2JkMGNkOGI0NjFmNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthjwOFGdqY5qJ6HqlzKdhm9ASyxg
ddJeHLmthlSuWw2sttWX/bcAMwT+WyJaTIc0lDGVprszaI36AAM8yi4HJ1WnvEO6
dgq60Sq0fk0ux2LqFsc8JNqhofi7kb6pw1eMutY/v4XUOletbfbc8Bvu9gYPr4FM
hyZWS27ISx+TXzImpwXR2Bw3J0UjsEmeO7igSWni/5kdbZ/Z1NIP8P+MUOqgw2r8
cs0V5MZgfF34Liix4khso1f9IggS4+J92isS1Rsvhi4G8b8Um3lFDDnGuBUif+6s
Phv+RrMVeMu2mP5KY8KlYQkpefaA9FLB7zVJsaWxAdxLOnyynHU7WHHCPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd1ljl2PwVxFOY9bmO9DNi0YfSoMB8GA1UdIwQY
MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt
Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz
LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeWIseUq
caWN4aL69ApxdQRVHWar+tqdviJYvkMwXA2IJTd//MU8R1q1fe0uSq0LP26MXLrN
zRG/JlnkhFwj8CBWJywpDnMNO2yz+awKpEO829WDEweFGAwY2DOvnJxn2ctEnt+f
x0U2eDFiuDadzjPp7Md6EYWMz+uxU+jhW+eIUtUvoy9sVv2LxVhl2Fqs/Rwr6QVN
H9irtJGwdk0plYzv9fAMvpijknNY/JejTeI0IdFvk3kQfk8Ucl2JHe2Gn0o4V7sn
/vRGcTFXwuVPGwQp7vzPhjCl2KobdKnhp0Z8cMc178KAqKbaa3MJf15Uv1C+CDci
XtMRxerISbdrRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:49 2025 by rpki-client