Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: xpC+4JmcNzt+yDYbdb5UWaH/GNUZrKoUJHPJijejTmQ=
Subject key identifier: F6:5B:4E:D7:B5:5D:1E:FC:EC:19:14:C6:F4:7D:7F:0F:F9:2C:DA:58
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 0198D73BCA1ED765D828D5AF6161CFCCFA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:01:16 +0000
Manifest this update: Sat 23 Aug 2025 14:01:16 +0000
Manifest next update: Sun 24 Aug 2025 14:01:16 +0000
Files and hashes: 1: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: zuz8oLqne2kyz8BFUrE22UQ9jsHJunNSVnWepU18bFs=)
2: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
3: oUkdx3aM2sWDa8gVcmp9BXY3y6Y.roa (hash: cnOYmJAa+uOx0J484NL29cWeGahwzJ9b+N/udhFQRhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:ca:1e:d7:65:d8:28:d5:af:61:61:cf:cc:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Aug 23 14:01:16 2025 GMT
Not After : Aug 24 14:01:16 2025 GMT
Subject: CN=f65b4ed7b55d1efcec1914c6f47d7f0ff92cda58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:2f:b1:88:5d:95:e8:33:2e:e8:a0:f5:8d:
25:36:7c:66:96:72:06:0a:d2:25:b3:98:aa:6f:77:
a7:95:de:3d:8e:30:ee:60:19:bf:d7:60:38:48:6e:
ad:2b:e6:66:8a:3a:29:e5:53:46:f7:81:d5:6f:df:
83:3f:61:d6:cf:6e:f2:5d:fb:95:95:a5:ea:1a:ba:
03:ae:32:00:8b:19:9c:dd:34:93:c3:79:68:09:d8:
aa:d0:b4:a2:9a:02:a7:96:a4:ee:92:f6:21:8a:2e:
38:d5:6f:dc:66:23:6c:e8:03:78:88:63:4a:ae:bb:
5b:4f:f9:fa:0b:9e:a4:75:36:d9:8d:1f:fd:8f:8b:
cd:3b:f1:13:26:77:fe:33:7c:84:d0:f7:a8:4e:6c:
e6:05:c8:e6:bb:ed:ec:c3:6e:6a:be:a9:7a:59:ac:
31:08:0b:50:5b:c0:a0:7b:a8:b4:6a:4e:10:0b:bd:
b1:dc:0a:f7:6c:06:e0:ab:17:50:0a:ae:1f:70:1e:
2c:35:4f:9c:8f:b5:f6:6f:cf:3b:f9:6a:04:a8:19:
6e:24:b6:81:82:ab:24:d4:14:12:6a:81:01:86:59:
25:9b:23:6a:16:7b:11:09:41:4f:bb:9c:9b:5a:59:
1d:d2:4a:97:2c:a0:9d:b1:d2:4a:fa:34:b3:9e:17:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:4E:D7:B5:5D:1E:FC:EC:19:14:C6:F4:7D:7F:0F:F9:2C:DA:58
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:07:bc:4e:ab:cf:10:da:d4:2b:eb:b7:87:50:2a:0e:27:e3:
f4:b3:9a:e0:77:4f:ae:09:f1:47:89:bd:95:77:b8:09:c7:a2:
3e:5b:d1:86:b7:49:43:c6:c3:57:d2:88:63:9f:07:e3:5b:da:
77:96:7b:f9:33:b8:32:12:d1:c8:79:ba:c4:bb:ec:95:2a:39:
6b:76:7a:6e:1f:35:f0:3a:61:aa:c1:40:6f:8c:ae:86:9d:08:
f0:2f:c9:e9:6a:80:5b:4b:d0:2e:b9:ae:7a:05:8f:e0:0b:b0:
84:e7:bc:04:8e:e7:50:8f:64:95:0f:27:fb:ec:60:dc:9c:c3:
0b:4e:87:7d:1a:9d:51:37:3f:ad:f6:44:cc:16:89:ef:9b:85:
51:05:bf:06:d0:dd:aa:4d:fc:aa:ae:78:4d:fc:46:a1:76:5f:
5a:ab:bb:4b:64:96:d6:79:f5:df:86:b1:94:4d:fe:48:5f:7a:
0a:8a:d5:ad:81:83:47:8f:db:ff:5b:27:71:15:19:85:38:41:
f0:e6:f9:a8:63:97:e0:65:3c:0f:23:dd:56:ee:0a:96:2a:6a:
06:86:19:9d:3d:75:17:86:c4:35:c8:13:c7:e3:06:f8:2f:85:
8d:07:9a:69:ed:c8:5f:aa:51:3d:ff:01:d7:d2:c1:96:44:5f:
93:7c:6e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO8oe12XYKNWvYWHPzPoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjUwODIzMTQwMTE2WhcNMjUwODI0MTQwMTE2WjAzMTEwLwYDVQQD
EyhmNjViNGVkN2I1NWQxZWZjZWMxOTE0YzZmNDdkN2YwZmY5MmNkYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPkvsYhdlegzLuig9Y0lNnxmlnIG
CtIls5iqb3enld49jjDuYBm/12A4SG6tK+Zmijop5VNG94HVb9+DP2HWz27yXfuV
laXqGroDrjIAixmc3TSTw3loCdiq0LSimgKnlqTukvYhii441W/cZiNs6AN4iGNK
rrtbT/n6C56kdTbZjR/9j4vNO/ETJnf+M3yE0PeoTmzmBcjmu+3sw25qvql6Wawx
CAtQW8Cge6i0ak4QC72x3Ar3bAbgqxdQCq4fcB4sNU+cj7X2b887+WoEqBluJLaB
gqsk1BQSaoEBhlklmyNqFnsRCUFPu5ybWlkd0kqXLKCdsdJK+jSznhcvmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZbTte1XR787BkUxvR9fw/5LNpYMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAe8TqvP
ENrUK+u3h1AqDifj9LOa4HdPrgnxR4m9lXe4CceiPlvRhrdJQ8bDV9KIY58H41va
d5Z7+TO4MhLRyHm6xLvslSo5a3Z6bh818DphqsFAb4yuhp0I8C/J6WqAW0vQLrmu
egWP4AuwhOe8BI7nUI9klQ8n++xg3JzDC06HfRqdUTc/rfZEzBaJ75uFUQW/BtDd
qk38qq54TfxGoXZfWqu7S2SW1nn134axlE3+SF96CorVrYGDR4/b/1sncRUZhThB
8Ob5qGOX4GU8DyPdVu4KlipqBoYZnT11F4bENcgTx+MG+C+FjQeaae3IX6pRPf8B
19LBlkRfk3xuRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:29 2025 by rpki-client