Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: LeZE/DYyBY+oYqkGK0efVXt4CdUXukidWTlXaDKP/hA=
Subject key identifier: 04:0B:0C:1E:31:14:08:EB:C2:F9:9C:8D:C6:15:A1:21:77:99:CB:AD
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 0198D960A5B7BE13DCA304E25B64D81E709D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0A71
Signing time: Sun 24 Aug 2025 00:00:46 +0000
Manifest this update: Sun 24 Aug 2025 00:00:46 +0000
Manifest next update: Mon 25 Aug 2025 00:00:46 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: ecINbtg6f/wdOcyzmHevtMVFFVnENRAOfFpfc0ydew4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:a5:b7:be:13:dc:a3:04:e2:5b:64:d8:1e:70:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Aug 24 00:00:46 2025 GMT
Not After : Aug 25 00:00:46 2025 GMT
Subject: CN=040b0c1e311408ebc2f99c8dc615a1217799cbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:61:ad:93:3e:bd:23:27:55:fa:fa:81:e5:
8a:c9:0b:a9:2e:c5:8a:75:1c:67:2c:b0:1d:68:9f:
db:a1:ff:45:85:42:39:8b:0c:2e:e4:57:59:d5:e6:
77:b7:97:bb:ca:1a:50:8f:e9:70:9f:e8:50:2d:64:
18:f8:b5:e9:7a:d7:62:63:db:5d:21:de:57:a1:b9:
a7:e6:b4:18:33:56:0f:55:b5:c1:66:74:1b:e8:2f:
90:a7:fa:89:45:bd:82:5b:d8:7d:78:d3:36:cd:4d:
29:ec:c2:53:b3:45:91:7f:eb:d5:f3:82:e9:0d:67:
f2:97:75:f3:78:e0:37:53:61:79:7c:6c:2e:60:9b:
80:bc:99:3c:de:cf:4c:c9:50:81:93:f7:e0:a6:25:
10:0a:51:2e:73:18:c7:4a:e4:76:2f:ec:52:bc:ef:
b9:1a:d5:72:31:8e:fa:8e:05:d6:42:8f:13:2d:5f:
18:16:97:59:5f:54:8e:9e:33:69:cf:56:5f:cf:2a:
0b:c2:fe:3b:6c:09:73:8e:74:a0:a0:b7:4c:41:96:
de:f4:37:96:1d:c3:db:da:75:8f:de:6b:14:14:d3:
59:7d:08:2a:ae:55:24:1a:cd:05:12:ed:b3:82:c4:
ba:2a:bc:45:b4:7e:66:30:ce:9b:f9:40:e7:a7:64:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:0C:1E:31:14:08:EB:C2:F9:9C:8D:C6:15:A1:21:77:99:CB:AD
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:74:8b:b3:3f:eb:b8:52:a1:7c:ef:ae:8c:f8:3b:d3:45:
b0:f6:72:b2:c4:cc:ed:e0:e1:ca:4f:0d:6a:c3:a2:ba:d6:3c:
25:1b:70:58:c9:d6:32:b1:71:78:35:5f:04:65:26:3d:d7:6b:
44:25:28:34:79:e7:ab:98:d0:b2:05:60:4f:8a:64:0b:93:c3:
e7:25:5b:ab:98:f7:5b:c3:5a:01:9f:18:b2:bd:2f:bd:52:71:
f3:9a:8b:1b:f8:72:76:09:9c:30:a8:30:23:be:0f:67:90:28:
a4:1a:15:ca:41:d9:ca:6e:e6:95:d6:85:f7:e5:cf:83:19:61:
e9:db:2e:32:0c:c4:18:7a:3c:e3:58:dc:2f:73:78:ba:91:37:
5d:76:c1:8c:e5:ef:b3:98:c2:e1:15:f6:eb:a4:51:8c:fb:2c:
fe:e8:48:dc:72:8e:4c:06:8c:9e:fd:4d:96:ea:9f:22:6f:4d:
48:67:3f:e3:fd:06:6b:1f:ca:8d:1a:58:d6:cd:8b:0a:93:18:
b3:bc:66:92:6c:fd:56:3c:a9:1b:b6:b8:28:dd:54:2f:02:56:
52:04:02:0f:02:c3:e0:a3:27:48:bd:f6:12:5b:bb:02:30:0b:
a4:e6:4a:ef:9f:6e:db:2f:93:5b:2b:8d:05:6e:4a:ae:98:eb:
8d:13:e8:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYKW3vhPcowTiW2TYHnCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjUwODI0MDAwMDQ2WhcNMjUwODI1MDAwMDQ2WjAzMTEwLwYDVQQD
EygwNDBiMGMxZTMxMTQwOGViYzJmOTljOGRjNjE1YTEyMTc3OTljYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPphrZM+vSMnVfr6geWKyQupLsWK
dRxnLLAdaJ/bof9FhUI5iwwu5FdZ1eZ3t5e7yhpQj+lwn+hQLWQY+LXpetdiY9td
Id5Xobmn5rQYM1YPVbXBZnQb6C+Qp/qJRb2CW9h9eNM2zU0p7MJTs0WRf+vV84Lp
DWfyl3XzeOA3U2F5fGwuYJuAvJk83s9MyVCBk/fgpiUQClEucxjHSuR2L+xSvO+5
GtVyMY76jgXWQo8TLV8YFpdZX1SOnjNpz1ZfzyoLwv47bAlzjnSgoLdMQZbe9DeW
HcPb2nWP3msUFNNZfQgqrlUkGs0FEu2zgsS6KrxFtH5mMM6b+UDnp2TyTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQLDB4xFAjrwvmcjcYVoSF3mcutMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5d0i7M/
67hSoXzvroz4O9NFsPZyssTM7eDhyk8NasOiutY8JRtwWMnWMrFxeDVfBGUmPddr
RCUoNHnnq5jQsgVgT4pkC5PD5yVbq5j3W8NaAZ8Ysr0vvVJx85qLG/hydgmcMKgw
I74PZ5AopBoVykHZym7mldaF9+XPgxlh6dsuMgzEGHo841jcL3N4upE3XXbBjOXv
s5jC4RX266RRjPss/uhI3HKOTAaMnv1NluqfIm9NSGc/4/0Gax/KjRpY1s2LCpMY
s7xmkmz9VjypG7a4KN1ULwJWUgQCDwLD4KMnSL32Elu7AjALpOZK759u2y+TWyuN
BW5KrpjrjRPoHw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:31:50 2025 by rpki-client