Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: qNeQng/qORfz+du0DHdAWx2TOt7FdcLyOCY9/7X9QAQ=
Subject key identifier: A6:A1:E5:26:CF:78:8C:43:E6:7C:10:D4:E6:CB:0F:94:D1:87:EF:FB
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 0198D697ED3C901AE857D8ED3C75D0A63FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 153B
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: ydFEmbd53+gbK2OuDiLFdUAXDDS6VGUdlI0/QSSYeP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ed:3c:90:1a:e8:57:d8:ed:3c:75:d0:a6:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=a6a1e526cf788c43e67c10d4e6cb0f94d187effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:d6:da:07:4d:33:69:21:6b:d4:41:84:ea:
a0:3d:5b:90:c6:c5:9c:91:cc:b7:b9:fd:48:b8:4f:
dd:da:bb:8a:26:2c:32:3c:d3:32:01:77:d3:57:c2:
3b:a0:59:6c:77:20:14:bb:f5:98:f3:ba:fa:c2:f9:
95:fd:39:f4:36:d1:73:f5:b0:a1:8d:d8:93:58:97:
13:84:b4:c4:ea:00:d0:f4:dc:0f:48:6d:ba:8a:17:
a3:85:44:5d:3e:de:91:3c:28:ae:84:9a:ae:e9:d2:
19:b9:73:c9:08:3d:e4:c4:a7:f4:cd:f3:87:ba:00:
69:0e:72:93:2d:9c:93:e2:00:10:e5:e7:6d:5a:30:
98:59:d8:15:bf:c3:22:21:f7:15:4d:77:fe:ff:8a:
40:d8:db:e2:3f:b4:2b:c1:0a:58:5c:7b:98:59:c0:
76:62:4d:16:2d:82:54:b0:2d:10:86:9a:6c:a0:29:
75:af:ac:ed:8a:9b:1c:8a:02:f7:c9:b9:2f:57:12:
1a:3a:c6:0e:89:5b:e5:0c:ad:c2:e4:0e:90:5e:4a:
3d:44:3f:cc:ac:3a:07:06:7c:5b:40:72:9e:00:f6:
4d:6f:bb:dc:24:71:56:c6:85:0d:5a:1c:43:69:64:
c5:3d:e6:cf:26:43:60:45:ca:55:78:54:66:26:04:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:E5:26:CF:78:8C:43:E6:7C:10:D4:E6:CB:0F:94:D1:87:EF:FB
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:5d:82:32:ba:c0:49:2d:45:a7:e8:5e:28:d7:a7:f2:8a:
a3:3a:56:fc:35:05:37:19:2b:65:4c:05:4f:3a:82:7b:07:dd:
4c:e8:12:7d:3a:45:17:07:fb:7c:f2:45:38:34:57:f2:ec:76:
29:b3:19:6c:8e:7a:6c:be:d4:74:82:be:fa:f8:50:a2:e2:cc:
12:53:93:03:ec:1a:de:0b:44:99:eb:87:49:d9:b5:94:c0:7e:
01:0a:36:c6:e8:00:6a:27:c4:66:2c:50:91:ba:73:2b:af:4c:
38:41:1a:33:48:42:0f:ab:7c:0d:4e:c5:80:27:96:9b:9d:23:
0c:44:8a:68:5b:90:b4:a5:3d:a6:03:8e:b1:9b:8c:9c:45:91:
37:25:b6:d9:1b:3c:62:30:6e:f2:81:84:0a:1d:4f:d0:8a:71:
f9:cc:f7:19:e6:15:7d:4b:51:79:75:40:37:00:8c:9b:cb:51:
fb:95:2d:c4:7d:07:32:3c:82:60:c0:e3:7c:13:7c:d1:6d:20:
c9:1b:ad:e3:77:02:a5:92:37:9c:34:c2:33:10:ee:42:ab:f5:
32:e4:8b:34:b1:94:a1:01:85:22:d7:df:e9:db:71:0a:50:af:
58:44:72:6b:49:10:07:7d:f6:88:7d:07:ab:43:68:c2:8e:03:
9c:8f:a6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl+08kBroV9jtPHXQpj/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjUwODIzMTEwMjE3WhcNMjUwODI0MTEwMjE3WjAzMTEwLwYDVQQD
EyhhNmExZTUyNmNmNzg4YzQzZTY3YzEwZDRlNmNiMGY5NGQxODdlZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJHW2gdNM2kha9RBhOqgPVuQxsWc
kcy3uf1IuE/d2ruKJiwyPNMyAXfTV8I7oFlsdyAUu/WY87r6wvmV/Tn0NtFz9bCh
jdiTWJcThLTE6gDQ9NwPSG26ihejhURdPt6RPCiuhJqu6dIZuXPJCD3kxKf0zfOH
ugBpDnKTLZyT4gAQ5edtWjCYWdgVv8MiIfcVTXf+/4pA2NviP7QrwQpYXHuYWcB2
Yk0WLYJUsC0QhppsoCl1r6ztipscigL3ybkvVxIaOsYOiVvlDK3C5A6QXko9RD/M
rDoHBnxbQHKeAPZNb7vcJHFWxoUNWhxDaWTFPebPJkNgRcpVeFRmJgSQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKah5SbPeIxD5nwQ1ObLD5TRh+/7MB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAithdgjK6
wEktRafoXijXp/KKozpW/DUFNxkrZUwFTzqCewfdTOgSfTpFFwf7fPJFODRX8ux2
KbMZbI56bL7UdIK++vhQouLMElOTA+wa3gtEmeuHSdm1lMB+AQo2xugAaifEZixQ
kbpzK69MOEEaM0hCD6t8DU7FgCeWm50jDESKaFuQtKU9pgOOsZuMnEWRNyW22Rs8
YjBu8oGECh1P0Ipx+cz3GeYVfUtReXVANwCMm8tR+5UtxH0HMjyCYMDjfBN80W0g
yRut43cCpZI3nDTCMxDuQqv1MuSLNLGUoQGFItff6dtxClCvWERya0kQB332iH0H
q0Nowo4DnI+mQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:58 2025 by rpki-client