Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
File: XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json)
Hash identifier: Ch9xExW6cIrCvVMkVoEEY9gXgSa64D0nu4/NdX2MwV4=
Subject key identifier: CC:E6:A0:8C:2A:4A:12:82:35:9D:4B:9D:29:44:D6:37:43:32:58:25
Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Certificate issuer: /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Certificate serial: 0198D73BB31010CC89943074AF20D289EA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
Manifest number: 0137
Signing time: Sat 23 Aug 2025 14:01:10 +0000
Manifest this update: Sat 23 Aug 2025 14:01:10 +0000
Manifest next update: Sun 24 Aug 2025 14:01:10 +0000
Files and hashes: 1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: ielH2/MstIwRWlRH95glZYiXALffkDTUboByad70E/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:b3:10:10:cc:89:94:30:74:af:20:d2:89:ea:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Validity
Not Before: Aug 23 14:01:10 2025 GMT
Not After : Aug 24 14:01:10 2025 GMT
Subject: CN=cce6a08c2a4a1282359d4b9d2944d63743325825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:51:8a:47:ea:b4:34:dd:88:40:bd:05:64:
b8:59:41:57:01:a2:79:38:d7:1e:5f:62:a9:d9:f8:
4a:50:4b:70:7c:88:67:85:b7:5a:a4:0c:61:68:7a:
7b:76:13:cb:b0:75:0e:76:86:8a:4a:0e:36:bf:5b:
0d:82:93:8b:a9:c5:c5:c3:a4:2c:2d:6f:8b:85:ca:
2e:c4:68:4d:7d:68:ba:85:1f:32:8e:da:d9:76:ad:
58:91:a3:aa:67:25:d8:f3:e0:be:1e:ab:56:4c:44:
83:53:3d:09:55:16:28:92:e7:57:78:84:59:1d:4c:
f5:3c:5f:f6:16:62:18:ba:8c:c9:77:19:d1:66:ad:
05:14:7a:87:70:56:0a:2e:17:41:e0:2b:a6:fd:fd:
49:ca:68:15:fa:2b:93:77:06:2b:f5:4c:e5:3f:84:
35:0d:78:9e:02:f6:0d:2e:a3:0d:26:97:0d:ad:be:
62:e8:17:a2:cb:a8:e2:51:c7:4e:29:3f:cb:47:0d:
0b:ed:26:76:e6:e1:4a:d5:f2:54:c6:f5:af:04:51:
4c:0b:ea:5b:db:df:6c:17:19:ab:5b:9d:72:6c:31:
fd:72:ba:f8:d9:d4:86:f1:79:a5:6a:5c:78:06:1e:
2e:67:c0:c3:91:61:46:62:4a:e5:1b:a6:63:8e:b4:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:A0:8C:2A:4A:12:82:35:9D:4B:9D:29:44:D6:37:43:32:58:25
X509v3 Authority Key Identifier:
keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9c:69:6a:91:46:6b:4e:f0:e1:86:2d:bc:ce:a6:c5:ba:b7:
b2:47:1b:dc:e7:4b:94:34:ec:4a:16:cb:eb:f8:8f:e7:6b:85:
23:49:68:99:3f:26:95:75:2f:77:90:a1:40:2e:34:9f:df:59:
f6:85:89:ee:1c:cc:a5:6c:26:1d:b3:21:5c:32:65:1b:21:8b:
02:ae:0d:c9:cc:61:9c:1b:d3:fd:98:12:93:69:04:04:64:f5:
b0:43:0c:75:ea:fa:91:2f:8c:8b:7a:2f:a0:90:4c:73:6a:a5:
ce:b7:d9:9d:9d:61:c5:83:5b:3f:0d:dd:7e:0a:70:f7:af:e8:
a4:cc:25:f5:4e:ef:8f:85:86:65:58:0e:18:47:57:61:3b:8e:
ad:fa:2b:d7:58:7b:6e:e1:2c:e6:27:e6:32:53:42:57:6f:df:
ad:58:4e:aa:da:85:e5:4b:0a:1e:b2:b4:41:4b:eb:33:a3:c5:
9d:7b:ee:1e:d4:71:05:bc:90:ed:e8:49:15:11:0d:90:b0:e7:
33:7e:c8:fc:e4:ed:bc:39:39:15:3d:3b:4c:2b:cb:97:f1:cc:
bb:0b:b3:de:2b:9f:6f:ca:70:aa:ad:85:f8:83:2f:f2:4c:0f:
01:1f:dc:30:c5:45:23:d9:eb:53:f5:a3:a9:cf:a9:73:b6:99:
11:34:be:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO7MQEMyJlDB0ryDSieoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZWU3YWJhZGMxY2Q1MzY0N2UyYjIwYjc2MGQ1YTVjN2Fi
MWE3Y2MwHhcNMjUwODIzMTQwMTEwWhcNMjUwODI0MTQwMTEwWjAzMTEwLwYDVQQD
EyhjY2U2YTA4YzJhNGExMjgyMzU5ZDRiOWQyOTQ0ZDYzNzQzMzI1ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58hRikfqtDTdiEC9BWS4WUFXAaJ5
ONceX2Kp2fhKUEtwfIhnhbdapAxhaHp7dhPLsHUOdoaKSg42v1sNgpOLqcXFw6Qs
LW+LhcouxGhNfWi6hR8yjtrZdq1YkaOqZyXY8+C+HqtWTESDUz0JVRYokudXeIRZ
HUz1PF/2FmIYuozJdxnRZq0FFHqHcFYKLhdB4Cum/f1JymgV+iuTdwYr9UzlP4Q1
DXieAvYNLqMNJpcNrb5i6Beiy6jiUcdOKT/LRw0L7SZ25uFK1fJUxvWvBFFMC+pb
299sFxmrW51ybDH9crr42dSG8Xmlalx4Bh4uZ8DDkWFGYkrlG6ZjjrTfzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzmoIwqShKCNZ1LnSlE1jdDMlglMB8GA1UdIwQY
MBaAFFzuerrcHNU2R+KyC3YNWlx6safMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE81NnV0d2MxVFpINHJJTGRnMWFYSHF4cDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81MGMyMDUtMjE4OS00NzM0LTk2NDgt
NDg2YThjZGRkYmU4LzEvWE81NnV0d2MxVFpINHJJTGRnMWFYSHF4cDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81MGMyMDUtMjE4OS00NzM0LTk2NDgtNDg2YThjZGRkYmU4
LzEvWE81NnV0d2MxVFpINHJJTGRnMWFYSHF4cDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZxpapFG
a07w4YYtvM6mxbq3skcb3OdLlDTsShbL6/iP52uFI0lomT8mlXUvd5ChQC40n99Z
9oWJ7hzMpWwmHbMhXDJlGyGLAq4NycxhnBvT/ZgSk2kEBGT1sEMMder6kS+Mi3ov
oJBMc2qlzrfZnZ1hxYNbPw3dfgpw96/opMwl9U7vj4WGZVgOGEdXYTuOrfor11h7
buEs5ifmMlNCV2/frVhOqtqF5UsKHrK0QUvrM6PFnXvuHtRxBbyQ7ehJFRENkLDn
M37I/OTtvDk5FT07TCvLl/HMuwuz3iufb8pwqq2F+IMv8kwPAR/cMMVFI9nrU/Wj
qc+pc7aZETS+hA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:57 2025 by rpki-client