Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: UOTbQ/2taR6QrykVWEKL1nogI0kBvFqNT2tuJzOiaug=
Subject key identifier: 0D:F5:C2:99:3A:28:DB:EA:9F:90:FC:43:F9:82:47:C8:E8:7D:4D:3B
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 0198D515BD97708BC8FE85BE2016739B6714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0643
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: tdxSSOLYoYYCqztoaJLq8nWUY9LHjOCAq7wjDeT46ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bd:97:70:8b:c8:fe:85:be:20:16:73:9b:67:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=0df5c2993a28dbea9f90fc43f98247c8e87d4d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:a1:f4:02:62:b0:9e:89:65:d6:de:a9:d3:
76:be:1d:ce:97:f1:42:5e:b4:71:9a:b6:1c:ff:e7:
07:54:d0:8f:76:58:04:7b:68:bc:e3:f4:62:7c:ec:
4b:68:f0:07:6f:07:4d:12:21:fb:a8:b7:09:90:14:
67:ab:ed:8a:c6:75:ca:5c:aa:9b:80:d4:c9:76:04:
88:7d:9d:9a:bf:96:e4:88:7e:2b:50:a1:34:84:e9:
97:74:bf:25:4c:98:80:b2:89:fa:0e:a3:8f:31:c1:
5b:88:c0:bc:63:a1:5b:78:89:7c:42:41:d1:2e:a4:
24:b7:44:ac:5b:54:aa:47:dd:55:bd:dd:e5:e3:d6:
64:03:23:ad:8e:06:41:50:19:ab:b5:cc:29:1d:06:
9b:fc:1f:0b:df:f6:10:0d:8a:e9:4c:0e:f9:87:2c:
1e:30:08:7c:db:76:18:df:07:4c:b0:68:c3:2a:4e:
f0:55:7e:16:50:4d:2e:ed:d8:ed:f9:da:25:84:83:
ce:b4:82:89:8a:7c:58:a0:62:dc:86:19:bb:05:60:
e2:c5:a3:f2:a3:ee:bb:cf:bd:c4:f1:c0:a3:85:2d:
d4:c2:0b:3b:ee:dc:3b:4d:cb:2e:ab:77:57:b5:69:
da:f8:c9:e8:d2:3b:4a:97:0f:e1:8b:1e:1a:1b:82:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:C2:99:3A:28:DB:EA:9F:90:FC:43:F9:82:47:C8:E8:7D:4D:3B
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c9:78:d1:e0:7d:5e:93:00:ed:0a:21:dc:93:17:03:a5:6d:
e3:ad:88:b4:d1:ca:2d:82:90:27:c7:98:7e:23:f7:39:6b:87:
7b:b4:a2:ef:6f:0e:f3:bb:06:9f:b9:df:77:43:83:49:3d:54:
c3:0a:c6:18:1c:f8:7e:f7:78:77:fe:68:01:70:72:af:f9:fa:
13:e5:3d:69:ef:24:38:e6:3b:ed:7c:50:2b:6f:51:bf:da:33:
3c:76:ea:49:cb:13:b2:78:34:fd:4c:1d:91:2f:1a:62:5a:ce:
7b:5b:5c:d2:75:5a:3d:55:e2:e0:d9:5b:58:9a:9d:af:de:fb:
a0:5a:c0:fb:c3:6a:a1:df:86:d6:53:62:c3:24:d4:34:b1:4e:
86:b2:33:95:47:dc:4f:15:05:59:da:3c:96:d6:ac:45:2a:65:
f2:a3:17:e2:91:f0:2c:89:e9:8a:ee:63:c0:14:83:05:86:4c:
99:44:c6:0a:d6:24:b9:75:6f:c9:85:bb:23:ec:75:73:bb:ec:
cb:ab:9b:d5:0c:0c:36:cf:f3:27:2a:ca:5c:1e:3b:49:27:99:
ca:47:23:c5:a4:1a:e5:d3:78:49:2e:98:c8:de:d3:cf:71:a3:
0c:37:aa:e4:c7:fe:81:c3:5a:47:07:be:f4:83:c7:48:1b:fa:
22:e9:0d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFb2XcIvI/oW+IBZzm2cUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTFjMzM5NTkxZWRmYzk2NjdhM2U3OTExOGRkMjNjNDAy
YmU4N2YwHhcNMjUwODIzMDQwMDI4WhcNMjUwODI0MDQwMDI4WjAzMTEwLwYDVQQD
EygwZGY1YzI5OTNhMjhkYmVhOWY5MGZjNDNmOTgyNDdjOGU4N2Q0ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ih9AJisJ6JZdbeqdN2vh3Ol/FC
XrRxmrYc/+cHVNCPdlgEe2i84/RifOxLaPAHbwdNEiH7qLcJkBRnq+2KxnXKXKqb
gNTJdgSIfZ2av5bkiH4rUKE0hOmXdL8lTJiAson6DqOPMcFbiMC8Y6FbeIl8QkHR
LqQkt0SsW1SqR91Vvd3l49ZkAyOtjgZBUBmrtcwpHQab/B8L3/YQDYrpTA75hywe
MAh823YY3wdMsGjDKk7wVX4WUE0u7djt+dolhIPOtIKJinxYoGLchhm7BWDixaPy
o+67z73E8cCjhS3Uwgs77tw7Tcsuq3dXtWna+Mno0jtKlw/hix4aG4JjswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA31wpk6KNvqn5D8Q/mCR8jofU07MB8GA1UdIwQY
MBaAFMQRwzlZHt/JZno+eRGN0jxAK+h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kMjMzNDQtYjI4MS00MmQyLWJjMzMt
ZWNiZjdmMTdmNjA0LzEveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kMjMzNDQtYjI4MS00MmQyLWJjMzMtZWNiZjdmMTdmNjA0
LzEveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsl40eB9
XpMA7Qoh3JMXA6Vt462ItNHKLYKQJ8eYfiP3OWuHe7Si728O87sGn7nfd0ODST1U
wwrGGBz4fvd4d/5oAXByr/n6E+U9ae8kOOY77XxQK29Rv9ozPHbqScsTsng0/Uwd
kS8aYlrOe1tc0nVaPVXi4NlbWJqdr977oFrA+8Nqod+G1lNiwyTUNLFOhrIzlUfc
TxUFWdo8ltasRSpl8qMX4pHwLInpiu5jwBSDBYZMmUTGCtYkuXVvyYW7I+x1c7vs
y6ub1QwMNs/zJyrKXB47SSeZykcjxaQa5dN4SS6YyN7Tz3GjDDeq5Mf+gcNaRwe+
9IPHSBv6IukNww==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:35 2025 by rpki-client