Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: xs5SYbc4+1LkSMVvP3SzYOCEjB1h98P0MYihrzAp09w=
Subject key identifier: D2:01:90:63:57:29:30:AA:74:3A:3F:87:2C:27:50:97:F3:19:B5:01
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0198D515A8667EEDB773C11CA15247FB6A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: 2ZAOpwfNKlYQZBa1C9NV+6xEnvVxasdmI7aLkU51pI0=)
2: yPiwl9qBas0_CWwr3HhvXq6bAGE.roa (hash: yb05fvQGJfFhNZnnjkljRSCUExMNOud+I+YEv/Cdk1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a8:66:7e:ed:b7:73:c1:1c:a1:52:47:fb:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=d2019063572930aa743a3f872c275097f319b501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:ac:79:06:49:44:08:71:9a:d0:95:ee:e2:
2a:fb:c3:32:77:20:19:4e:f6:49:39:b8:41:da:fe:
88:16:48:f5:b7:76:e4:3e:84:b4:8a:b4:1e:38:bd:
ee:6b:6c:0e:c5:89:fa:49:15:3b:e7:da:b2:75:40:
59:8d:b8:92:69:07:0a:c8:f9:58:51:af:76:7b:1c:
14:7b:43:09:a7:b1:ef:ce:8a:85:13:09:89:96:db:
64:0d:32:03:19:c3:4f:5b:ab:85:86:8d:4f:4f:3e:
72:f5:30:35:be:b6:e9:e6:21:22:9c:4a:2a:82:52:
c0:98:01:15:f2:93:48:06:8c:f7:38:e7:f7:93:b8:
d7:51:b4:0b:54:bb:27:7e:9d:85:9a:96:3d:bc:02:
78:a3:d5:b1:6d:4a:8c:1a:34:28:d3:05:e1:35:86:
9e:1e:04:59:ff:22:0e:86:f4:0e:97:9f:00:99:99:
92:82:ed:90:60:6c:8c:99:f4:d3:34:70:7d:2a:96:
73:9e:c9:de:b1:8e:44:7b:4b:8d:37:e9:3c:97:71:
c3:08:12:b9:9b:b3:18:69:53:82:34:51:85:09:82:
29:e0:93:eb:c8:11:b5:6d:77:cd:c7:17:82:80:5c:
9b:8d:39:31:bc:13:5f:71:3d:48:c3:4c:1e:46:81:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:90:63:57:29:30:AA:74:3A:3F:87:2C:27:50:97:F3:19:B5:01
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4e:ce:ea:17:da:d2:51:13:e3:fc:c3:c5:cd:41:63:f2:bf:
3c:11:3f:fb:46:e3:19:00:4e:8c:86:74:87:79:30:f0:6c:45:
99:7a:29:63:05:d9:7e:e0:89:c3:a1:1b:40:fc:87:9b:d5:69:
99:08:c1:0b:5e:4f:ae:ee:26:ed:98:31:16:ea:82:95:ae:0f:
f7:ea:16:ce:41:f6:9d:9f:0a:5b:27:1c:78:6a:3e:fe:8b:31:
e5:03:a1:3c:8a:fd:fa:32:76:ef:55:22:ea:23:57:f4:3a:e9:
5f:7e:26:9a:1b:78:1c:7b:c5:bf:4e:c4:a8:c0:2c:14:b4:95:
8a:20:90:b8:d9:df:aa:c0:17:19:3c:69:d2:04:28:28:9c:0d:
8e:51:85:7f:fb:ec:ba:fb:1a:13:72:15:60:78:7d:99:96:54:
1a:ce:0f:48:25:58:10:73:86:28:76:33:4c:23:f1:7d:d9:b4:
b6:35:ec:c1:11:62:d2:f8:08:6a:b0:30:18:42:9e:e2:0e:39:
e7:b0:f5:11:e0:b5:7a:93:8e:b4:37:2c:02:32:57:e1:ae:49:
43:a9:ac:52:b8:f8:07:7b:aa:6f:8e:38:12:fd:e3:7d:f3:e2:
49:e8:bc:f9:df:65:ed:8e:ee:09:24:13:32:41:15:bc:16:29:
27:85:24:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFahmfu23c8EcoVJH+2qbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjUwODIzMDQwMDIzWhcNMjUwODI0MDQwMDIzWjAzMTEwLwYDVQQD
EyhkMjAxOTA2MzU3MjkzMGFhNzQzYTNmODcyYzI3NTA5N2YzMTliNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFiseQZJRAhxmtCV7uIq+8MydyAZ
TvZJObhB2v6IFkj1t3bkPoS0irQeOL3ua2wOxYn6SRU759qydUBZjbiSaQcKyPlY
Ua92exwUe0MJp7HvzoqFEwmJlttkDTIDGcNPW6uFho1PTz5y9TA1vrbp5iEinEoq
glLAmAEV8pNIBoz3OOf3k7jXUbQLVLsnfp2FmpY9vAJ4o9WxbUqMGjQo0wXhNYae
HgRZ/yIOhvQOl58AmZmSgu2QYGyMmfTTNHB9KpZznsnesY5Ee0uNN+k8l3HDCBK5
m7MYaVOCNFGFCYIp4JPryBG1bXfNxxeCgFybjTkxvBNfcT1Iw0weRoEl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIBkGNXKTCqdDo/hywnUJfzGbUBMB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE7O6hfa
0lET4/zDxc1BY/K/PBE/+0bjGQBOjIZ0h3kw8GxFmXopYwXZfuCJw6EbQPyHm9Vp
mQjBC15Pru4m7ZgxFuqCla4P9+oWzkH2nZ8KWycceGo+/osx5QOhPIr9+jJ271Ui
6iNX9DrpX34mmht4HHvFv07EqMAsFLSViiCQuNnfqsAXGTxp0gQoKJwNjlGFf/vs
uvsaE3IVYHh9mZZUGs4PSCVYEHOGKHYzTCPxfdm0tjXswRFi0vgIarAwGEKe4g45
57D1EeC1epOOtDcsAjJX4a5JQ6msUrj4B3uqb444Ev3jffPiSei8+d9l7Y7uCSQT
MkEVvBYpJ4UkOQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:39 2025 by rpki-client