Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: iuggQg4Kh0341jSkcvSrEwjcruB9SivsiEiDNUjlEnc=
Subject key identifier: 8F:DC:39:61:17:FC:E4:D2:0B:1A:36:41:F8:DE:3C:D9:50:FF:58:A9
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 0198D54E937950FFDCD1358839093828B92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 0806
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: 2fLW20jgua5Um/Vypylwe/zjk3wCgvydWzQ9UqOvw2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:93:79:50:ff:dc:d1:35:88:39:09:38:28:b9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=8fdc396117fce4d20b1a3641f8de3cd950ff58a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:f2:f0:e5:93:a3:23:cc:bc:18:37:a5:ca:
e8:d6:e7:51:8b:51:43:f9:5f:b7:3f:d2:17:09:1e:
cb:b1:81:0d:ea:a8:2e:78:5e:ec:ee:d7:31:65:11:
a1:7b:ce:f0:ef:63:48:3b:e3:6b:a8:cb:d5:60:f8:
bb:4c:64:94:28:cf:60:aa:02:64:75:a0:f0:3c:75:
21:f5:36:78:ce:c8:b1:03:25:34:3a:d2:1f:31:f4:
c7:57:4f:79:9c:10:de:f9:a2:e3:25:33:bb:89:fc:
86:d6:5e:4a:ac:fb:78:e1:f1:49:03:36:ad:3b:79:
06:86:ca:8a:54:14:5f:88:5d:85:2c:5f:db:fb:b1:
bd:ca:e8:5e:b3:1a:13:f8:fa:8e:7a:76:2d:ef:9c:
6d:0d:e6:6d:57:ed:a9:05:8a:ee:1a:f3:57:0b:05:
07:0f:3c:e5:70:3e:0a:82:cc:f0:f4:c0:db:70:3d:
a2:db:cb:a0:ac:eb:b2:69:e2:51:ad:80:28:f4:86:
56:a3:56:03:e0:07:fc:14:f8:b7:c5:c8:b9:fb:c6:
22:59:71:76:b5:a9:df:0a:7e:95:cb:11:60:35:69:
54:5d:7f:96:35:73:38:7a:4e:96:34:e8:3e:f9:0d:
de:99:75:ad:eb:0d:c7:ad:64:86:0e:c0:23:cd:25:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:39:61:17:FC:E4:D2:0B:1A:36:41:F8:DE:3C:D9:50:FF:58:A9
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:ca:9e:5a:ca:3a:28:a7:a6:23:55:05:e5:5d:25:f2:2d:
3d:52:7f:f5:fe:9e:b4:3e:c4:6c:6c:3e:a2:5b:45:bc:21:e8:
b6:bf:90:fd:40:11:53:32:74:ee:61:1f:fd:5a:cd:ce:f4:74:
11:21:87:48:05:36:11:c9:cb:a1:e8:3c:20:a4:9f:6a:7f:2d:
a8:0b:cd:f0:cb:39:84:0b:e4:fb:41:6e:cc:e4:88:fb:59:cd:
77:93:ba:26:24:d4:5a:2c:c1:fb:b8:ac:20:b0:2c:a8:fb:f7:
d5:74:17:0c:ce:71:2c:22:ae:20:d6:29:d3:30:84:dc:e6:4d:
20:d4:85:26:04:9b:b9:d0:d0:f1:51:c7:2c:63:c0:a1:38:9f:
19:25:76:d6:06:dc:45:52:be:a4:2b:28:19:d0:b7:22:8f:87:
87:17:31:3b:74:52:18:b4:1e:a5:13:d3:75:96:f5:4c:d2:72:
5c:f8:7c:5b:75:47:7a:86:31:91:8e:80:fe:72:ac:b0:06:02:
f1:a1:6b:1d:8c:64:f4:bb:5f:fd:d2:02:8b:13:06:fb:5b:ae:
cc:75:8f:17:01:30:b2:2e:e1:09:c9:e6:21:35:84:d1:f4:94:
99:19:03:16:14:66:58:b2:0a:2a:f2:28:72:40:ae:9b:a0:91:
f6:a1:a3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTpN5UP/c0TWIOQk4KLktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1
ZDQ5MWUwHhcNMjUwODIzMDUwMjMzWhcNMjUwODI0MDUwMjMzWjAzMTEwLwYDVQQD
Eyg4ZmRjMzk2MTE3ZmNlNGQyMGIxYTM2NDFmOGRlM2NkOTUwZmY1OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtePy8OWToyPMvBg3pcro1udRi1FD
+V+3P9IXCR7LsYEN6qgueF7s7tcxZRGhe87w72NIO+NrqMvVYPi7TGSUKM9gqgJk
daDwPHUh9TZ4zsixAyU0OtIfMfTHV095nBDe+aLjJTO7ifyG1l5KrPt44fFJAzat
O3kGhsqKVBRfiF2FLF/b+7G9yuhesxoT+PqOenYt75xtDeZtV+2pBYruGvNXCwUH
DzzlcD4Kgszw9MDbcD2i28ugrOuyaeJRrYAo9IZWo1YD4Af8FPi3xci5+8YiWXF2
tanfCn6VyxFgNWlUXX+WNXM4ek6WNOg++Q3emXWt6w3HrWSGDsAjzSWQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/cOWEX/OTSCxo2QfjePNlQ/1ipMB8GA1UdIwQY
MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt
YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw
LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1LKnlrK
OiinpiNVBeVdJfItPVJ/9f6etD7EbGw+oltFvCHotr+Q/UARUzJ07mEf/VrNzvR0
ESGHSAU2EcnLoeg8IKSfan8tqAvN8Ms5hAvk+0FuzOSI+1nNd5O6JiTUWizB+7is
ILAsqPv31XQXDM5xLCKuINYp0zCE3OZNINSFJgSbudDQ8VHHLGPAoTifGSV21gbc
RVK+pCsoGdC3Io+HhxcxO3RSGLQepRPTdZb1TNJyXPh8W3VHeoYxkY6A/nKssAYC
8aFrHYxk9Ltf/dICixMG+1uuzHWPFwEwsi7hCcnmITWE0fSUmRkDFhRmWLIKKvIo
ckCum6CR9qGjaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:19 2025 by rpki-client