Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: YdC4LzOKSo2UeoH/QY2FUXm8SdN1FTwBkSOjKufxkAM=
Subject key identifier: DC:55:29:AC:C8:CB:BF:6B:68:BB:DC:F5:D2:62:85:22:53:72:63:95
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0198D515989C81872A49E1DCA51B208659C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: 6OUUff3rPw8e7PqzD1fZXkVre1o/IoOdz9zDSIgTWSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:98:9c:81:87:2a:49:e1:dc:a5:1b:20:86:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=dc5529acc8cbbf6b68bbdcf5d262852253726395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:38:39:b5:40:ff:58:e5:af:5a:f4:90:42:
33:cd:3a:5b:2d:c1:a7:99:57:a0:94:b6:0c:b7:ee:
64:04:4f:55:02:d7:2c:9b:b9:c4:94:42:3b:2e:de:
ab:44:ef:23:ff:40:ca:2d:3e:0c:47:55:06:82:24:
98:28:0e:84:99:2b:f3:0d:ff:65:ed:5d:d8:18:b8:
c2:a9:18:d3:e0:62:61:c6:85:dd:eb:39:05:6e:8c:
a3:cb:73:00:9f:53:aa:a5:28:54:a7:fc:44:93:03:
ab:78:a2:1e:08:d6:91:15:58:26:93:94:1f:60:22:
28:c0:b1:47:be:a2:3a:7d:23:b6:82:a6:a3:62:26:
3d:d5:66:6f:2d:af:cd:a4:bf:ed:2a:49:fb:06:78:
55:88:9c:81:92:5e:9c:52:1d:6b:c2:7b:ba:c8:c1:
24:83:b8:37:f1:38:6e:3a:8d:b9:44:85:a0:c0:c5:
66:b4:e2:d7:d4:92:95:28:88:e6:b0:7c:5f:e0:71:
f8:88:90:c9:21:29:3d:61:00:44:10:84:df:d3:21:
3b:9d:2f:06:6c:b3:af:11:74:a3:86:4a:f8:bd:17:
dc:0d:b0:57:7e:f9:de:71:7c:84:a8:4a:0e:2c:67:
3a:2d:9c:2f:e1:bd:58:56:89:a0:1b:47:56:7f:cf:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:55:29:AC:C8:CB:BF:6B:68:BB:DC:F5:D2:62:85:22:53:72:63:95
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:15:7c:63:0d:79:85:4b:dd:c3:fb:05:85:52:d5:3f:07:22:
0f:36:90:00:5d:a0:47:53:14:b5:77:0b:00:96:f4:f9:65:ab:
4c:b5:23:6e:d9:6d:c4:7c:70:2c:bc:25:c1:97:06:1c:84:00:
26:62:aa:0b:3a:84:da:a9:ab:70:38:88:0e:e0:25:5d:55:30:
0a:bb:cc:76:39:76:41:71:82:15:22:10:e7:56:6a:51:98:e6:
f0:31:d0:c5:9d:8c:35:7f:2a:89:b6:65:5c:a6:be:5e:1f:64:
4d:a8:1d:1d:69:a9:98:bd:99:27:0b:fe:bf:ee:a6:0f:b7:17:
03:81:e8:c6:d3:75:57:4d:03:ea:d5:69:6d:2f:57:0c:90:64:
83:c1:c4:e2:0d:73:d6:9d:13:77:77:a5:55:64:9d:92:ec:39:
a7:d6:62:be:57:9c:3b:c6:2b:77:fd:4d:86:3c:0f:8f:50:fe:
aa:de:fc:b0:6e:9f:46:4d:ef:2d:44:0b:5c:1a:5b:7a:f7:88:
48:9c:c2:09:6f:89:5c:46:95:03:bf:9f:c6:36:a4:0e:c7:65:
64:65:8f:9a:79:bd:5e:6b:77:a6:06:e7:38:3d:01:d8:b4:83:
85:c7:27:e8:af:08:1e:7f:80:a4:ef:51:88:47:ca:53:2d:44:
39:1a:3b:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZicgYcqSeHcpRsghlnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjc5MzllZDcwYzhhZWEzMWJlNDkzZTc4ZTg4ZjQ4NjFm
NTMxMjEwHhcNMjUwODIzMDQwMDE4WhcNMjUwODI0MDQwMDE4WjAzMTEwLwYDVQQD
EyhkYzU1MjlhY2M4Y2JiZjZiNjhiYmRjZjVkMjYyODUyMjUzNzI2Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0k4ObVA/1jlr1r0kEIzzTpbLcGn
mVeglLYMt+5kBE9VAtcsm7nElEI7Lt6rRO8j/0DKLT4MR1UGgiSYKA6EmSvzDf9l
7V3YGLjCqRjT4GJhxoXd6zkFboyjy3MAn1OqpShUp/xEkwOreKIeCNaRFVgmk5Qf
YCIowLFHvqI6fSO2gqajYiY91WZvLa/NpL/tKkn7BnhViJyBkl6cUh1rwnu6yMEk
g7g38ThuOo25RIWgwMVmtOLX1JKVKIjmsHxf4HH4iJDJISk9YQBEEITf0yE7nS8G
bLOvEXSjhkr4vRfcDbBXfvnecXyEqEoOLGc6LZwv4b1YVomgG0dWf8+yCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxVKazIy79raLvc9dJihSJTcmOVMB8GA1UdIwQY
MBaAFFy3k57XDIrqMb5JPnjoj0hh9TEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYt
MmVkYWZjNjBmMmRmLzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYtMmVkYWZjNjBmMmRm
LzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhV8Yw15
hUvdw/sFhVLVPwciDzaQAF2gR1MUtXcLAJb0+WWrTLUjbtltxHxwLLwlwZcGHIQA
JmKqCzqE2qmrcDiIDuAlXVUwCrvMdjl2QXGCFSIQ51ZqUZjm8DHQxZ2MNX8qibZl
XKa+Xh9kTagdHWmpmL2ZJwv+v+6mD7cXA4HoxtN1V00D6tVpbS9XDJBkg8HE4g1z
1p0Td3elVWSdkuw5p9ZivlecO8Yrd/1NhjwPj1D+qt78sG6fRk3vLUQLXBpbeveI
SJzCCW+JXEaVA7+fxjakDsdlZGWPmnm9Xmt3pgbnOD0B2LSDhccn6K8IHn+ApO9R
iEfKUy1EORo76g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:15 2025 by rpki-client