Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json)
Hash identifier: 30F7P8pwVdiWNmAVm8g3MYN/fqnU4TevN69+NyGecZM=
Subject key identifier: 4E:A7:E8:46:F3:BB:E2:F8:F0:9F:28:29:2F:C8:08:DE:05:63:A5:8F
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial: 0198D54E9F97F4F4FBC42C9A03FEDC65D590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
Manifest number: 0DFE
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: eRuotpgZRh4QE9koBd5aQfrJzfoa/LL1D+/585EDPKA=)
2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9f:97:f4:f4:fb:c4:2c:9a:03:fe:dc:65:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=4ea7e846f3bbe2f8f09f28292fc808de0563a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:d7:51:a8:ba:2d:81:aa:01:0e:0d:25:3b:
59:bb:bd:cc:b4:40:6a:85:c5:7f:78:7a:d7:ad:ad:
a0:14:d9:95:80:b0:69:70:8f:c4:0c:81:f0:d7:f2:
41:e8:44:b2:43:ec:84:bc:3d:0d:1a:5c:fb:b8:ca:
21:55:28:5f:db:ec:05:0a:ca:a8:38:aa:4d:cd:7a:
2e:f2:6c:b8:40:16:a5:40:ab:a7:34:c5:a8:f1:0b:
14:ae:61:0a:27:99:90:ab:4e:9a:82:09:a5:49:cc:
51:3c:86:f1:a5:39:76:d4:a7:58:32:fe:f1:c8:43:
bb:1e:ee:83:f5:15:bf:50:02:8f:91:a0:d5:fb:61:
0c:ef:99:07:3c:99:3e:83:96:db:7e:2e:22:38:e8:
26:05:ba:77:4c:ac:7c:0d:9e:54:16:cc:62:97:e9:
94:7b:0f:dc:ee:c0:ca:33:7d:88:48:a2:ec:cf:1a:
a9:4c:29:5a:07:ca:ed:a6:b2:d2:5a:df:7d:62:1d:
45:0a:17:94:1e:3a:9b:06:15:5f:f0:0b:9f:e6:f7:
50:34:b9:4f:98:0a:59:fa:f4:1e:59:f3:33:3e:f3:
b5:8e:8e:0f:ad:0c:2d:14:7f:ee:eb:7e:76:10:74:
70:a9:fa:62:cd:fa:25:ca:c5:b9:fa:54:c1:24:16:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:E8:46:F3:BB:E2:F8:F0:9F:28:29:2F:C8:08:DE:05:63:A5:8F
X509v3 Authority Key Identifier:
keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:16:c9:3b:ac:db:6f:1b:f4:af:da:03:f5:f9:4d:73:c3:
94:0f:8e:d6:23:2c:80:3d:37:43:41:15:3d:d7:0c:ca:32:b0:
70:4f:74:24:99:ba:ed:79:10:f7:72:58:7d:9d:5b:bf:61:a1:
7e:b5:a2:ae:3b:75:69:01:1a:ec:f3:cd:a3:7b:d3:b6:59:3d:
05:44:da:95:59:ad:d2:ac:2b:d5:2c:3a:9c:23:bf:21:00:dd:
87:59:5f:f8:e8:da:e1:90:4a:6d:5c:67:69:ee:57:c3:a1:f4:
52:a7:79:d4:87:b7:90:33:56:ba:39:b0:24:f0:b9:d3:61:e4:
14:a4:85:0d:38:a0:42:9b:19:03:fd:8e:4a:1a:ec:b1:f2:97:
52:fb:af:d8:27:e1:4a:7a:31:35:b7:70:b2:84:a8:9c:87:04:
d0:7c:c5:9f:9f:29:fb:ce:b6:f0:5f:2b:fd:99:45:e0:ec:3a:
b5:87:65:29:7e:e6:05:fb:6c:eb:d7:84:37:cf:71:df:e1:9a:
90:0e:7b:5f:aa:21:03:f0:8e:00:83:fc:f8:8c:11:d9:fc:2e:
72:31:5a:99:8a:55:64:1e:46:1a:ab:45:6a:fc:97:3a:59:a1:
6f:da:cd:a1:cf:00:4f:22:ca:94:b5:83:70:ad:f4:2c:38:e9:
c0:6d:11:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTp+X9PT7xCyaA/7cZdWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2E3ODM1Mzc3YjllODQ5ZmU3YzMzZjlmY2E0NTcyZDkw
MjY3M2YwHhcNMjUwODIzMDUwMjM2WhcNMjUwODI0MDUwMjM2WjAzMTEwLwYDVQQD
Eyg0ZWE3ZTg0NmYzYmJlMmY4ZjA5ZjI4MjkyZmM4MDhkZTA1NjNhNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lTXUai6LYGqAQ4NJTtZu73MtEBq
hcV/eHrXra2gFNmVgLBpcI/EDIHw1/JB6ESyQ+yEvD0NGlz7uMohVShf2+wFCsqo
OKpNzXou8my4QBalQKunNMWo8QsUrmEKJ5mQq06aggmlScxRPIbxpTl21KdYMv7x
yEO7Hu6D9RW/UAKPkaDV+2EM75kHPJk+g5bbfi4iOOgmBbp3TKx8DZ5UFsxil+mU
ew/c7sDKM32ISKLszxqpTClaB8rtprLSWt99Yh1FCheUHjqbBhVf8Auf5vdQNLlP
mApZ+vQeWfMzPvO1jo4PrQwtFH/u6352EHRwqfpizfolysW5+lTBJBaPDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6n6Ebzu+L48J8oKS/ICN4FY6WPMB8GA1UdIwQY
MBaAFF46eDU3e56En+fDP5/KRXLZAmc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5Yjgt
MDU1YjFiMGU2MGY0LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5YjgtMDU1YjFiMGU2MGY0
LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOoWyTus
228b9K/aA/X5TXPDlA+O1iMsgD03Q0EVPdcMyjKwcE90JJm67XkQ93JYfZ1bv2Gh
frWirjt1aQEa7PPNo3vTtlk9BUTalVmt0qwr1Sw6nCO/IQDdh1lf+Oja4ZBKbVxn
ae5Xw6H0Uqd51Ie3kDNWujmwJPC502HkFKSFDTigQpsZA/2OShrssfKXUvuv2Cfh
SnoxNbdwsoSonIcE0HzFn58p+8628F8r/ZlF4Ow6tYdlKX7mBfts69eEN89x3+Ga
kA57X6ohA/COAIP8+IwR2fwucjFamYpVZB5GGqtFavyXOlmhb9rNoc8ATyLKlLWD
cK30LDjpwG0R9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:08 2025 by rpki-client