Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: 5bgxD4jJKR7b2VFxAh90ludeJkHUcrtXw94ihh7pRVg=
Subject key identifier: 6C:27:DC:ED:25:56:7A:C0:3F:EA:30:6C:4F:DB:80:B4:64:2A:59:FC
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0198D54DC9DE9981BDB2D52944EE7EF98961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: 4/RVMarZrQX4L9Q1X7AO/ii2arw5u7bC7FNJJtw86cI=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c9:de:99:81:bd:b2:d5:29:44:ee:7e:f9:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=6c27dced25567ac03fea306c4fdb80b4642a59fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:d1:09:55:d3:f5:d4:48:6a:f7:42:44:0e:
0d:f1:9e:b3:23:7d:5b:cd:fb:03:77:32:c9:f7:f9:
0b:b6:01:60:cd:af:bf:c0:09:15:8c:84:4a:4b:ac:
aa:c4:87:ab:17:a1:aa:6c:00:51:06:15:c2:1b:31:
6a:71:35:41:8d:b0:81:b3:8d:a9:41:8a:2c:03:d5:
53:15:a9:84:64:86:90:5a:2e:fa:7c:09:6b:a5:ef:
14:13:67:d8:92:c4:ca:4f:3d:11:ea:3d:7f:f4:de:
72:04:bb:fb:d8:6a:5d:34:66:68:9d:68:a6:6a:08:
c6:cd:1c:65:7d:13:fa:2b:47:7e:60:c3:6d:c7:48:
7b:eb:e4:7b:a4:af:7c:38:22:f4:50:77:10:84:d4:
e8:fb:f0:39:ee:7e:3d:62:91:95:6f:8f:bb:f6:95:
d5:5d:55:79:aa:02:6d:46:1d:f2:76:f8:36:5e:47:
db:21:b8:73:fd:bf:00:8f:76:72:c2:bc:5f:e7:84:
ae:9e:9a:92:78:d2:27:c4:b5:18:e9:4e:b6:20:1f:
54:f4:18:2f:72:02:db:20:ca:ea:3c:a1:2d:a7:38:
9b:d5:d1:40:85:58:41:58:3d:a4:48:21:0c:ca:03:
11:89:9d:11:6e:a0:5a:d8:44:ea:bb:e9:3f:ab:31:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:DC:ED:25:56:7A:C0:3F:EA:30:6C:4F:DB:80:B4:64:2A:59:FC
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e6:9a:d7:8a:ac:5d:6b:84:02:86:25:a3:c3:ae:20:d9:99:
48:a5:1a:15:43:81:a8:f8:dd:de:a1:6b:91:7b:7b:a4:6e:43:
89:48:ab:54:fa:54:0c:20:01:2e:61:0a:03:60:94:2f:b1:41:
0f:f7:53:81:56:0a:7a:77:b1:8f:9b:3d:aa:c9:fb:1d:ed:01:
27:fd:5a:eb:5a:01:76:2b:4c:b6:98:77:ca:54:ca:2d:48:27:
5c:2d:c3:78:15:29:93:a3:ff:4c:3d:f8:fe:3b:e4:30:f2:0c:
7e:52:5d:e8:d3:e3:d2:da:65:3c:ef:23:f9:4f:bb:c7:85:e4:
14:36:66:b0:cc:77:92:01:2f:b9:28:01:3c:04:47:d9:bf:22:
48:0a:c2:60:23:d2:21:0c:55:06:e8:32:79:29:1f:10:2d:ce:
3d:b8:03:a3:1c:3a:56:ff:23:a1:99:63:e0:43:60:1e:b1:10:
22:e8:46:73:c8:1a:32:39:5d:16:72:56:e1:cc:f4:6e:93:1b:
6e:c5:cc:b7:a9:c4:f9:45:34:ec:03:76:a7:f8:ab:b8:e0:81:
b4:3c:b5:26:60:50:b1:40:7b:0c:00:82:6c:e6:8b:c5:ff:2f:
cd:17:c4:77:96:3b:83:b7:1c:42:1a:16:ca:67:79:cf:54:67:
0d:a6:90:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcnemYG9stUpRO5++YlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1
ZmJkMWMwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD
Eyg2YzI3ZGNlZDI1NTY3YWMwM2ZlYTMwNmM0ZmRiODBiNDY0MmE1OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z3RCVXT9dRIavdCRA4N8Z6zI31b
zfsDdzLJ9/kLtgFgza+/wAkVjIRKS6yqxIerF6GqbABRBhXCGzFqcTVBjbCBs42p
QYosA9VTFamEZIaQWi76fAlrpe8UE2fYksTKTz0R6j1/9N5yBLv72GpdNGZonWim
agjGzRxlfRP6K0d+YMNtx0h76+R7pK98OCL0UHcQhNTo+/A57n49YpGVb4+79pXV
XVV5qgJtRh3ydvg2XkfbIbhz/b8Aj3Zywrxf54SunpqSeNInxLUY6U62IB9U9Bgv
cgLbIMrqPKEtpzib1dFAhVhBWD2kSCEMygMRiZ0RbqBa2ETqu+k/qzF3VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwn3O0lVnrAP+owbE/bgLRkKln8MB8GA1UdIwQY
MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt
NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz
LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+aa14qs
XWuEAoYlo8OuINmZSKUaFUOBqPjd3qFrkXt7pG5DiUirVPpUDCABLmEKA2CUL7FB
D/dTgVYKenexj5s9qsn7He0BJ/1a61oBditMtph3ylTKLUgnXC3DeBUpk6P/TD34
/jvkMPIMflJd6NPj0tplPO8j+U+7x4XkFDZmsMx3kgEvuSgBPARH2b8iSArCYCPS
IQxVBugyeSkfEC3OPbgDoxw6Vv8joZlj4ENgHrEQIuhGc8gaMjldFnJW4cz0bpMb
bsXMt6nE+UU07AN2p/iruOCBtDy1JmBQsUB7DACCbOaLxf8vzRfEd5Y7g7ccQhoW
ymd5z1RnDaaQLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:39 2025 by rpki-client