Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: 4tXgluj8VPSMzLMEZ+bUKoBdmojjME6ilbHCJ3tdulU=
Subject key identifier: D0:37:FA:3E:05:2D:BF:2D:6E:B1:16:93:66:7B:BC:D7:CA:CC:09:EA
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 0198D54E812B1B3564823207EB4EF0B099AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 10F6
Signing time: Sat 23 Aug 2025 05:02:28 +0000
Manifest this update: Sat 23 Aug 2025 05:02:28 +0000
Manifest next update: Sun 24 Aug 2025 05:02:28 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: p9U09xU3yXjesfbO1Al9sdqyJwquQ4N10uby/yM7BzQ=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:81:2b:1b:35:64:82:32:07:eb:4e:f0:b0:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Aug 23 05:02:28 2025 GMT
Not After : Aug 24 05:02:28 2025 GMT
Subject: CN=d037fa3e052dbf2d6eb11693667bbcd7cacc09ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:12:3e:90:36:72:8e:ef:a5:7f:42:23:ca:
f3:42:a2:2f:55:fa:a4:a2:56:ce:8f:1c:32:4a:33:
e0:ae:6b:19:f4:1e:f6:b4:d1:2c:3d:f0:41:58:da:
05:c9:29:57:a4:d2:47:f3:ae:60:0b:97:64:3f:d5:
df:b8:f2:24:81:34:a0:b5:ce:61:ed:b8:23:a7:0f:
f0:48:44:25:c4:58:e1:5a:c1:1f:ba:b0:ff:36:3a:
05:4b:f5:0c:da:c2:45:44:6d:97:b7:a8:9f:70:8f:
6c:b2:5a:69:b6:5d:7c:55:10:6a:6d:3b:2a:ce:b4:
e1:68:c3:fb:a4:70:3b:60:82:cf:4d:f5:d2:cb:b8:
8c:a8:26:9d:32:61:d1:37:eb:43:4a:a7:55:67:ca:
a6:62:d6:e5:4c:12:e7:be:2f:7e:7d:26:90:cf:e2:
92:4c:04:d6:d0:34:5e:1c:fe:02:a3:24:7c:1e:8f:
cb:98:f7:8d:a8:2f:fd:6f:ac:7f:c4:37:6c:f7:ae:
af:fa:14:ba:f1:46:29:57:2c:a4:d1:fa:bf:a7:15:
35:c0:ed:c3:25:20:70:99:b7:7a:48:f9:6d:ba:a9:
56:00:9c:61:a9:00:68:6d:e2:7c:f6:af:b0:31:87:
d9:b9:c3:98:55:65:eb:cf:f8:91:dc:2a:db:27:e4:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:FA:3E:05:2D:BF:2D:6E:B1:16:93:66:7B:BC:D7:CA:CC:09:EA
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:65:ff:ff:dd:ba:de:04:9b:bd:12:5a:86:20:a7:f6:c2:
4d:92:f5:4e:a1:88:69:15:23:11:6f:a7:3e:8a:ef:c5:bc:d2:
43:bc:40:ab:71:f0:4c:60:87:ce:bf:d5:04:63:40:da:38:4b:
1a:66:37:c9:e2:fe:3b:a2:b4:65:c3:b4:c3:60:53:ad:fb:eb:
57:31:96:0b:61:00:d1:49:0d:08:ef:ed:a5:c1:5e:7c:bb:b8:
62:69:8b:92:66:ce:a4:91:fe:0f:bc:55:f1:66:18:ee:8f:82:
26:96:b0:80:47:79:1e:4d:d1:e7:69:4e:81:e6:93:f5:9d:e1:
43:a5:ad:b1:09:91:5a:79:7e:79:b3:19:8e:39:27:3a:8d:4a:
65:3a:09:ed:07:6e:3e:6a:ee:b2:7f:2c:14:77:ff:22:c1:f2:
bf:47:16:53:f2:ba:28:26:9c:a0:35:88:94:c8:3a:ad:a4:f1:
4f:a9:4a:92:5f:72:37:24:ac:2a:16:cd:11:a7:96:54:2e:5a:
20:a8:d4:8e:0b:42:0d:9a:96:2d:24:3f:2d:88:70:0a:01:2c:
68:4d:0e:14:1b:92:12:a8:28:60:f3:b0:f8:17:26:97:d6:c5:
10:28:d7:bf:b9:af:ab:a6:62:bf:64:90:e9:ca:a9:40:96:32:
2d:43:e8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToErGzVkgjIH607wsJmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNzUyMDMxNTFkM2IyM2VjY2NiNjRmNTIwZmI0MjU0OTg2
MGNmZjAwHhcNMjUwODIzMDUwMjI4WhcNMjUwODI0MDUwMjI4WjAzMTEwLwYDVQQD
EyhkMDM3ZmEzZTA1MmRiZjJkNmViMTE2OTM2NjdiYmNkN2NhY2MwOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mwSPpA2co7vpX9CI8rzQqIvVfqk
olbOjxwySjPgrmsZ9B72tNEsPfBBWNoFySlXpNJH865gC5dkP9XfuPIkgTSgtc5h
7bgjpw/wSEQlxFjhWsEfurD/NjoFS/UM2sJFRG2Xt6ifcI9sslpptl18VRBqbTsq
zrThaMP7pHA7YILPTfXSy7iMqCadMmHRN+tDSqdVZ8qmYtblTBLnvi9+fSaQz+KS
TATW0DReHP4CoyR8Ho/LmPeNqC/9b6x/xDds966v+hS68UYpVyyk0fq/pxU1wO3D
JSBwmbd6SPltuqlWAJxhqQBobeJ89q+wMYfZucOYVWXrz/iR3CrbJ+Se7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA3+j4FLb8tbrEWk2Z7vNfKzAnqMB8GA1UdIwQY
MBaAFF91IDFR07I+zMtk9SD7QlSYYM/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgt
MDlkZDRjMjhiMWU0LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgtMDlkZDRjMjhiMWU0
LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuZl///d
ut4Em70SWoYgp/bCTZL1TqGIaRUjEW+nPorvxbzSQ7xAq3HwTGCHzr/VBGNA2jhL
GmY3yeL+O6K0ZcO0w2BTrfvrVzGWC2EA0UkNCO/tpcFefLu4YmmLkmbOpJH+D7xV
8WYY7o+CJpawgEd5Hk3R52lOgeaT9Z3hQ6WtsQmRWnl+ebMZjjknOo1KZToJ7Qdu
Pmrusn8sFHf/IsHyv0cWU/K6KCacoDWIlMg6raTxT6lKkl9yNySsKhbNEaeWVC5a
IKjUjgtCDZqWLSQ/LYhwCgEsaE0OFBuSEqgoYPOw+Bcml9bFECjXv7mvq6Ziv2SQ
6cqpQJYyLUPoQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:37 2025 by rpki-client