Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: 42do84GT22F+ImtBqLffhm+hgu62I3SgEhBhQJLIkXs=
Subject key identifier: A9:55:F7:B2:D5:19:CE:C5:66:73:CA:CB:98:4B:27:9F:D1:B5:84:04
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0198D5839A684EFED84D2419C5416B588E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 06EC
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: F2SVKVcanJZE8sDvGUWohsPpPxGyrZSLMhlcwzKHx4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9a:68:4e:fe:d8:4d:24:19:c5:41:6b:58:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=a955f7b2d519cec56673cacb984b279fd1b58404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:a3:83:e6:ae:4d:97:ad:1f:30:a2:ad:9d:
34:44:9c:1c:35:45:03:61:f1:e1:7b:01:86:d0:ee:
0e:f2:3a:e3:05:47:19:62:67:1f:13:0b:c2:6e:6a:
dd:5f:6d:ef:22:ff:57:1f:90:e6:88:b3:a7:0e:0c:
63:bd:37:70:10:2c:18:b2:7a:d1:9f:f8:73:1e:e3:
97:25:ae:ae:2d:d9:36:2f:c5:33:57:41:fb:83:98:
d3:8d:35:c3:7c:1e:d9:5c:5c:12:40:2b:52:93:37:
96:cf:c9:bd:74:82:93:a9:61:1c:b1:bf:96:8e:05:
a1:ce:92:f9:32:a4:57:dc:35:04:40:8b:c2:30:6d:
ed:b9:46:10:4f:d8:ec:0a:69:f8:7a:7f:f0:b3:df:
e2:66:c9:39:8b:8d:0d:37:b1:2f:2d:e9:9f:f2:bd:
f0:11:d3:21:13:78:8d:09:97:66:c5:c7:d7:3c:4d:
4d:f4:f3:19:2f:1f:36:69:78:d5:b2:f1:96:ec:53:
3a:16:33:3f:02:4a:ec:54:fc:34:df:46:76:59:d8:
06:a9:a1:11:e9:9a:f7:a1:12:71:45:14:70:1e:f1:
95:6e:a0:3b:6b:97:bc:54:5d:d9:92:fd:20:94:f5:
f1:a4:ec:9f:34:07:22:d6:b3:a5:8e:51:1e:5c:36:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:F7:B2:D5:19:CE:C5:66:73:CA:CB:98:4B:27:9F:D1:B5:84:04
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3b:3b:39:6f:12:f5:b5:16:6c:d3:72:ab:10:7e:19:f1:ca:
4f:85:cb:0b:0c:0b:46:24:fa:b6:e3:10:0d:3e:18:56:7c:33:
15:57:76:ac:6e:a2:88:e3:9c:5d:09:da:b3:93:15:5f:b9:01:
23:b4:d6:22:21:03:6c:11:90:c8:ff:2c:20:8a:3e:6a:70:a5:
8c:65:42:11:86:83:56:9e:1e:7a:d2:4c:2a:09:18:a6:d4:37:
3e:7c:cc:d6:78:7a:e7:b8:be:09:e0:dd:5c:aa:cf:e1:fe:47:
d2:02:dc:93:0d:08:dc:35:f9:46:67:5c:b0:02:d9:a6:bd:73:
17:96:3b:17:8b:36:71:70:91:42:e7:04:e4:ae:15:10:c8:84:
f6:71:b6:9b:76:e7:94:3f:b2:d8:42:4b:e8:8a:6c:d2:73:62:
ca:70:e9:11:28:08:4a:55:23:dc:c0:80:01:5a:4e:6f:cd:5f:
e5:a4:d3:03:20:f0:bd:6d:05:37:b4:18:d4:68:aa:77:b9:d4:
d6:f7:f4:5c:2b:96:e4:9c:5c:ce:82:88:cb:3f:6c:28:dc:ce:
6b:db:4a:d7:ed:c0:f9:c4:36:aa:39:ac:8d:12:20:40:e3:93:
3e:7d:1e:c3:c4:30:af:ff:0f:4e:6d:f6:0a:4c:b0:93:b9:ad:
3f:16:7c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5poTv7YTSQZxUFrWI6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0
MjY1ZjEwHhcNMjUwODIzMDYwMDI4WhcNMjUwODI0MDYwMDI4WjAzMTEwLwYDVQQD
EyhhOTU1ZjdiMmQ1MTljZWM1NjY3M2NhY2I5ODRiMjc5ZmQxYjU4NDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI2jg+auTZetHzCirZ00RJwcNUUD
YfHhewGG0O4O8jrjBUcZYmcfEwvCbmrdX23vIv9XH5DmiLOnDgxjvTdwECwYsnrR
n/hzHuOXJa6uLdk2L8UzV0H7g5jTjTXDfB7ZXFwSQCtSkzeWz8m9dIKTqWEcsb+W
jgWhzpL5MqRX3DUEQIvCMG3tuUYQT9jsCmn4en/ws9/iZsk5i40NN7EvLemf8r3w
EdMhE3iNCZdmxcfXPE1N9PMZLx82aXjVsvGW7FM6FjM/AkrsVPw030Z2WdgGqaER
6Zr3oRJxRRRwHvGVbqA7a5e8VF3Zkv0glPXxpOyfNAci1rOljlEeXDYxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlV97LVGc7FZnPKy5hLJ5/RtYQEMB8GA1UdIwQY
MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt
OWZmNWMxYTNiMGUwLzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw
LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDs7OW8S
9bUWbNNyqxB+GfHKT4XLCwwLRiT6tuMQDT4YVnwzFVd2rG6iiOOcXQnas5MVX7kB
I7TWIiEDbBGQyP8sIIo+anCljGVCEYaDVp4eetJMKgkYptQ3PnzM1nh657i+CeDd
XKrP4f5H0gLckw0I3DX5RmdcsALZpr1zF5Y7F4s2cXCRQucE5K4VEMiE9nG2m3bn
lD+y2EJL6Ips0nNiynDpESgISlUj3MCAAVpOb81f5aTTAyDwvW0FN7QY1Giqd7nU
1vf0XCuW5JxczoKIyz9sKNzOa9tK1+3A+cQ2qjmsjRIgQOOTPn0ew8Qwr/8PTm32
Ckywk7mtPxZ8ow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:37 2025 by rpki-client