Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: qY51Dg9ap7I76CzvrPQY80b7HH0jLCu/qprPMQPMiLw=
Subject key identifier: 07:A5:EC:AE:73:0B:AB:DA:A1:BF:CA:57:7B:5A:DC:A5:6B:92:B4:86
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 0198D65F05573508DD6295504A999F135119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 1067
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: NrTbneAxIK+YEOXyhPn7xnt1/e+QxR7W1bBuwVKL19w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:05:57:35:08:dd:62:95:50:4a:99:9f:13:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=07a5ecae730babdaa1bfca577b5adca56b92b486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:3c:f3:00:5d:ce:bd:fe:9b:a9:67:a8:17:
74:ac:b6:b5:82:8b:18:8c:3c:65:c8:42:8c:5a:7f:
cf:e5:66:2e:2a:56:54:1b:0b:47:9b:4c:ed:f5:f9:
b9:f6:b4:ad:1e:b9:02:28:76:7c:c6:9e:c4:50:1e:
1f:1c:07:55:47:8d:c0:b8:2d:99:06:54:04:45:10:
00:47:69:4b:f0:72:a7:88:9b:7a:f0:b3:d2:83:f0:
3d:c7:09:e4:8e:f9:b4:6f:98:af:1d:d4:8c:a3:bb:
fd:69:cd:37:e2:0a:d9:a5:7f:fe:75:57:bc:5b:66:
6e:df:91:e6:4f:f4:5f:48:81:09:b2:e0:d6:50:2c:
51:57:15:72:a6:2c:6e:47:55:ec:62:0a:12:01:8e:
e8:d6:06:69:fc:25:6a:50:f7:13:e3:39:d5:a8:bb:
4a:c2:04:5f:c0:6f:39:aa:05:c9:60:ba:77:db:6b:
78:66:03:27:ea:7e:d8:41:e1:b7:9d:de:82:02:a3:
17:df:4d:b8:ff:a3:b7:46:ea:be:62:10:5c:03:c9:
44:46:67:bf:d8:90:c9:44:94:79:d8:7d:ba:90:a5:
2f:6d:83:df:28:42:1c:83:35:df:84:bb:cf:8e:63:
ff:78:d7:d0:40:f2:55:49:67:18:1b:73:5d:12:b5:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:EC:AE:73:0B:AB:DA:A1:BF:CA:57:7B:5A:DC:A5:6B:92:B4:86
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:d6:b3:b2:7f:a9:68:7e:9d:02:1b:fc:d9:34:c7:3d:55:
64:d7:6e:86:c7:c3:34:85:7e:39:b3:eb:24:82:e4:e6:1f:33:
8b:24:41:3e:db:29:7c:ac:90:2e:1d:e4:6e:9d:71:14:f5:17:
76:92:e8:74:35:7b:31:8a:ef:30:fb:0a:87:f6:10:c5:53:12:
c1:2c:e9:e9:1e:a8:5d:9b:29:37:34:36:16:9c:9c:0c:8b:44:
86:6e:2b:2d:22:09:33:9b:fe:8e:f4:a8:19:95:ea:4a:92:b3:
97:bc:76:95:72:a3:5b:e4:c1:8e:c3:cb:c4:39:3f:27:24:3a:
5b:9a:b8:a3:97:7c:c7:90:3e:ea:e9:6d:05:6b:8a:0e:52:6f:
6e:9d:e8:20:f9:9e:b9:14:b1:73:0b:c6:8a:7a:79:84:60:67:
8a:db:cf:70:3c:da:34:d7:b0:46:e9:97:70:5d:f2:e0:98:e6:
e3:03:89:d4:19:98:d9:e5:75:b3:c3:c8:67:2f:04:27:a7:a4:
cf:12:cd:b2:64:cd:d7:b2:12:b0:76:69:9f:b5:3a:9d:fc:e7:
b5:87:90:b4:d8:81:77:f5:5f:7f:17:70:8b:0b:62:7c:19:7c:
2f:93:52:53:e0:da:b7:5a:a1:87:33:f1:bf:1b:3a:be:12:e3:
c2:5f:a8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwVXNQjdYpVQSpmfE1EZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MzdjY2NkNWNkYTAxODk1YjE4OWNjYTk1ZjI5NmI1Y2Iz
MGM3YzgwHhcNMjUwODIzMTAwMDA3WhcNMjUwODI0MTAwMDA3WjAzMTEwLwYDVQQD
EygwN2E1ZWNhZTczMGJhYmRhYTFiZmNhNTc3YjVhZGNhNTZiOTJiNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJw88wBdzr3+m6lnqBd0rLa1gosY
jDxlyEKMWn/P5WYuKlZUGwtHm0zt9fm59rStHrkCKHZ8xp7EUB4fHAdVR43AuC2Z
BlQERRAAR2lL8HKniJt68LPSg/A9xwnkjvm0b5ivHdSMo7v9ac034grZpX/+dVe8
W2Zu35HmT/RfSIEJsuDWUCxRVxVypixuR1XsYgoSAY7o1gZp/CVqUPcT4znVqLtK
wgRfwG85qgXJYLp322t4ZgMn6n7YQeG3nd6CAqMX3024/6O3Ruq+YhBcA8lERme/
2JDJRJR52H26kKUvbYPfKEIcgzXfhLvPjmP/eNfQQPJVSWcYG3NdErWGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAel7K5zC6vaob/KV3ta3KVrkrSGMB8GA1UdIwQY
MBaAFMY3zM1c2gGJWxicypXylrXLMMfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZTA1MWUtM2NmOC00NzYzLWIzY2Yt
YTc0NmE4MTIwZTliLzEveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xZTA1MWUtM2NmOC00NzYzLWIzY2YtYTc0NmE4MTIwZTli
LzEveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9jWs7J/
qWh+nQIb/Nk0xz1VZNduhsfDNIV+ObPrJILk5h8ziyRBPtspfKyQLh3kbp1xFPUX
dpLodDV7MYrvMPsKh/YQxVMSwSzp6R6oXZspNzQ2FpycDItEhm4rLSIJM5v+jvSo
GZXqSpKzl7x2lXKjW+TBjsPLxDk/JyQ6W5q4o5d8x5A+6ultBWuKDlJvbp3oIPme
uRSxcwvGinp5hGBnitvPcDzaNNewRumXcF3y4Jjm4wOJ1BmY2eV1s8PIZy8EJ6ek
zxLNsmTN17ISsHZpn7U6nfzntYeQtNiBd/VffxdwiwtifBl8L5NSU+Dat1qhhzPx
vxs6vhLjwl+oGw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:27 2025 by rpki-client