Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: xaEFjG0ZJkLBiuZ0EZpUnL4/OTC5aiAslWPctmvdpyY=
Subject key identifier: F1:0F:C3:22:AA:AB:D3:E9:53:88:22:8F:E1:C1:72:8C:B9:A6:26:25
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 0198D4E004789FD312436EC2A1239C9745E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 1512
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: PHCm8oJa9J7Z/zC9fpoFpw1bAHfyJid8M921zDqz1R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:04:78:9f:d3:12:43:6e:c2:a1:23:9c:97:45:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=f10fc322aaabd3e95388228fe1c1728cb9a62625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:7a:53:4f:bd:49:7e:58:33:df:9b:da:9c:
cd:1a:50:7b:61:ae:57:9c:e1:10:e0:34:c4:35:f5:
07:4a:ef:24:3f:c5:17:a6:bd:0e:95:0a:cd:2d:45:
4f:18:b9:91:25:be:78:7c:ca:05:d2:73:24:f3:3c:
1d:8f:fc:03:86:4b:29:ee:f9:72:ce:82:a1:ca:db:
f9:5f:37:3d:60:14:92:fe:f5:00:5d:cd:b4:fd:3d:
01:2d:b9:74:b2:8e:14:67:2d:c4:76:ce:ab:61:89:
70:f4:54:79:9b:21:f9:89:d7:dd:d1:38:32:46:70:
8f:21:79:21:b2:b3:82:95:b8:09:97:7d:3e:2b:8d:
2a:2b:2e:9f:af:13:5f:e8:1c:e2:f5:3f:f2:4e:8f:
60:25:64:81:c5:09:b7:68:d3:ac:97:e9:ec:e6:11:
59:96:9d:e0:d4:d2:69:ef:00:72:0d:b4:69:c5:fe:
97:6f:48:08:c1:f9:ba:43:3c:ea:aa:6d:2e:74:19:
9e:b9:b0:f1:e3:88:85:da:e4:cf:a3:23:07:4f:08:
35:46:bb:af:46:9d:c2:c9:f2:bd:d1:3a:cf:b1:38:
8c:63:56:75:8e:16:61:bd:0c:16:81:a0:b7:14:65:
a8:bb:4f:4b:6b:ba:4e:07:b2:ed:d4:ac:69:ec:2b:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:C3:22:AA:AB:D3:E9:53:88:22:8F:E1:C1:72:8C:B9:A6:26:25
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:eb:b3:17:91:60:74:c7:70:eb:40:64:2c:0b:e1:9c:fc:5e:
ad:2c:38:f6:9e:89:d2:7b:f5:50:2a:e0:da:89:d7:83:c7:4b:
bc:c1:2e:a7:52:ea:1f:61:f3:95:af:c7:f9:49:4b:6d:17:62:
2e:ca:68:8d:aa:f3:9f:fb:32:7e:66:bc:17:8f:7b:ff:95:3d:
eb:65:62:e0:e2:73:15:b6:13:39:08:8a:cc:0c:d4:40:d7:61:
48:36:c2:92:16:65:0e:e3:77:33:2b:a9:50:68:08:72:a7:2d:
6a:eb:b0:2b:f9:58:d0:af:1d:92:68:48:85:75:5a:ef:9f:f5:
19:b9:61:36:1c:e5:a7:10:99:d6:28:03:d3:2d:87:99:17:56:
59:60:b3:8a:47:e3:54:86:63:1b:fd:dd:9f:60:7c:c0:26:04:
57:cd:18:5d:33:e6:55:0b:9f:b3:c6:f1:09:dd:6c:32:c7:af:
19:95:94:1a:3b:35:d1:02:53:03:ed:81:3d:f1:2c:0b:64:f9:
f7:c6:4f:8c:68:98:84:2e:1e:1f:0d:8b:3b:5e:be:3f:27:f3:
70:ef:89:d9:f0:f9:13:c1:dd:41:d3:78:ac:ad:64:18:95:53:
66:9d:be:b3:a1:d0:15:df:df:fd:c3:74:9a:11:58:70:9b:42:
ce:4c:75:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4AR4n9MSQ27CoSOcl0XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1
NmMxYmYwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD
EyhmMTBmYzMyMmFhYWJkM2U5NTM4ODIyOGZlMWMxNzI4Y2I5YTYyNjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAril6U0+9SX5YM9+b2pzNGlB7Ya5X
nOEQ4DTENfUHSu8kP8UXpr0OlQrNLUVPGLmRJb54fMoF0nMk8zwdj/wDhksp7vly
zoKhytv5Xzc9YBSS/vUAXc20/T0BLbl0so4UZy3Eds6rYYlw9FR5myH5idfd0Tgy
RnCPIXkhsrOClbgJl30+K40qKy6frxNf6Bzi9T/yTo9gJWSBxQm3aNOsl+ns5hFZ
lp3g1NJp7wByDbRpxf6Xb0gIwfm6Qzzqqm0udBmeubDx44iF2uTPoyMHTwg1Rruv
Rp3CyfK90TrPsTiMY1Z1jhZhvQwWgaC3FGWou09La7pOB7Lt1Kxp7CvKqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEPwyKqq9PpU4gij+HBcoy5piYlMB8GA1UdIwQY
MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt
YjU5NzI3MDliYjAyLzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy
LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuuzF5Fg
dMdw60BkLAvhnPxerSw49p6J0nv1UCrg2onXg8dLvMEup1LqH2Hzla/H+UlLbRdi
Lspojarzn/syfma8F497/5U962Vi4OJzFbYTOQiKzAzUQNdhSDbCkhZlDuN3Myup
UGgIcqctauuwK/lY0K8dkmhIhXVa75/1GblhNhzlpxCZ1igD0y2HmRdWWWCzikfj
VIZjG/3dn2B8wCYEV80YXTPmVQufs8bxCd1sMsevGZWUGjs10QJTA+2BPfEsC2T5
98ZPjGiYhC4eHw2LO16+PyfzcO+J2fD5E8HdQdN4rK1kGJVTZp2+s6HQFd/f/cN0
mhFYcJtCzkx1Jw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:09 2025 by rpki-client