Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: fGuCZT85PV5eJ9FIaC+ti1kX5M3dklhYXjnuoJcQReY=
Subject key identifier: FA:50:82:AA:76:E2:46:FF:79:FC:D5:12:C4:B9:2D:6F:63:54:4F:AA
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 0198D998BEB99541B70B81B8588F646D4458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 1181
Signing time: Sun 24 Aug 2025 01:02:02 +0000
Manifest this update: Sun 24 Aug 2025 01:02:02 +0000
Manifest next update: Mon 25 Aug 2025 01:02:02 +0000
Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: VnVVaO1ENAeCoEyiZdMyatJd3B+3w9YfMmbTL11m3fQ=)
3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:be:b9:95:41:b7:0b:81:b8:58:8f:64:6d:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Aug 24 01:02:02 2025 GMT
Not After : Aug 25 01:02:02 2025 GMT
Subject: CN=fa5082aa76e246ff79fcd512c4b92d6f63544faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:ff:02:e1:f8:1e:54:62:f6:4a:e1:f1:0d:
0e:95:62:a5:49:2d:37:fc:b4:dc:b0:be:96:44:84:
87:8a:8f:9e:30:d0:d0:d9:c5:ab:4a:e0:2a:a6:7b:
7b:38:7d:f7:dd:0b:87:db:52:78:f0:c1:2a:29:7e:
6b:3d:2a:03:2d:92:42:59:c1:d1:de:23:35:b0:3b:
15:cc:86:ca:06:9a:a0:a7:8c:b2:d6:26:28:d1:c3:
50:3a:e9:a6:4d:6b:ba:f9:d1:2c:2b:8a:8e:b7:19:
74:29:fb:d0:9d:da:60:56:a9:e2:64:90:a0:1a:52:
9d:6c:92:80:15:0b:bf:f6:c7:5d:21:5a:59:13:d7:
15:71:a8:ab:c1:e3:54:a4:9e:73:c0:85:d4:98:92:
9d:52:dc:b8:51:54:fd:06:b9:e0:5a:da:07:94:38:
99:b5:49:1a:1d:9a:5b:e2:5a:2d:07:8c:d9:1a:d7:
a8:c4:92:cf:82:c6:d7:57:e5:8c:8e:49:cd:5a:99:
e3:cf:33:a6:a1:b4:2b:1f:8c:ec:ff:42:f7:ac:86:
d0:ff:a7:0e:dd:b8:f1:9f:7f:4d:de:44:31:96:42:
98:f3:58:1b:a4:47:61:9c:f6:97:df:ff:86:54:b3:
20:3a:f8:16:cb:18:7b:8e:80:a2:5a:05:08:c5:6e:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:82:AA:76:E2:46:FF:79:FC:D5:12:C4:B9:2D:6F:63:54:4F:AA
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:81:0d:89:43:e4:ef:be:83:93:05:8a:49:9a:3c:c2:8a:e9:
d4:9e:50:6a:11:51:6c:c2:47:3f:d1:5b:9f:a8:e4:52:a8:64:
95:fe:0f:fe:69:10:d6:a4:bd:7d:a3:63:93:42:cb:da:18:10:
28:af:e4:55:7e:ca:86:df:04:5d:36:a9:5d:f1:ac:4e:e6:20:
d3:7e:6c:97:69:9b:a9:a0:22:19:0e:db:60:4e:54:15:90:c5:
97:12:2c:43:1d:ab:4b:58:27:aa:0d:ac:76:f1:ad:ef:de:34:
cc:e2:a2:57:f5:2d:09:96:10:1e:bd:bf:6b:06:3c:78:fc:e5:
ba:bf:1f:7a:c3:eb:8f:1f:7a:00:e1:fd:48:1d:13:28:bb:05:
b7:26:8a:db:9e:eb:38:5f:6c:1b:2b:1d:cb:13:03:88:6c:d0:
64:ae:70:11:68:ac:10:46:d9:fa:ac:db:b5:1b:43:6b:ca:f1:
ff:81:bc:c7:4e:7a:b2:8e:83:d5:cf:8f:34:5f:17:f8:fb:8b:
87:16:61:ab:91:b7:e0:58:a3:95:50:0c:b0:31:b5:9f:19:cc:
23:93:ce:cc:de:34:34:a3:47:ae:e7:18:73:fc:9a:33:b4:54:
3d:cb:9f:a8:29:af:57:cc:33:74:3e:e1:28:4d:18:97:d3:50:
80:17:9b:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZmL65lUG3C4G4WI9kbURYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl
NWNmOTYwHhcNMjUwODI0MDEwMjAyWhcNMjUwODI1MDEwMjAyWjAzMTEwLwYDVQQD
EyhmYTUwODJhYTc2ZTI0NmZmNzlmY2Q1MTJjNGI5MmQ2ZjYzNTQ0ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc3/AuH4HlRi9krh8Q0OlWKlSS03
/LTcsL6WRISHio+eMNDQ2cWrSuAqpnt7OH333QuH21J48MEqKX5rPSoDLZJCWcHR
3iM1sDsVzIbKBpqgp4yy1iYo0cNQOummTWu6+dEsK4qOtxl0KfvQndpgVqniZJCg
GlKdbJKAFQu/9sddIVpZE9cVcairweNUpJ5zwIXUmJKdUty4UVT9BrngWtoHlDiZ
tUkaHZpb4lotB4zZGteoxJLPgsbXV+WMjknNWpnjzzOmobQrH4zs/0L3rIbQ/6cO
3bjxn39N3kQxlkKY81gbpEdhnPaX3/+GVLMgOvgWyxh7joCiWgUIxW7UkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpQgqp24kb/efzVEsS5LW9jVE+qMB8GA1UdIwQY
MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt
NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx
LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIENiUPk
776DkwWKSZo8worp1J5QahFRbMJHP9Fbn6jkUqhklf4P/mkQ1qS9faNjk0LL2hgQ
KK/kVX7Kht8EXTapXfGsTuYg035sl2mbqaAiGQ7bYE5UFZDFlxIsQx2rS1gnqg2s
dvGt7940zOKiV/UtCZYQHr2/awY8ePzlur8fesPrjx96AOH9SB0TKLsFtyaK257r
OF9sGysdyxMDiGzQZK5wEWisEEbZ+qzbtRtDa8rx/4G8x056so6D1c+PNF8X+PuL
hxZhq5G34FijlVAMsDG1nxnMI5POzN40NKNHrucYc/yaM7RUPcufqCmvV8wzdD7h
KE0Yl9NQgBebCg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:16:06 2025 by rpki-client