Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: teAYQT4FvRpO31+r9GRhsYK7VqDPU44aX2cz18Wh0UY=
Subject key identifier: BE:44:18:F3:B6:DC:26:9A:E3:12:F5:64:35:82:53:D6:C2:D9:99:24
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 0197B5C48F00B2CFBA76374D1980FC41752E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 09:00:46 +0000
Manifest this update: Sat 28 Jun 2025 09:00:46 +0000
Manifest next update: Sun 29 Jun 2025 09:00:46 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: upONo4r2HKje6TvSuZJ/AKl/PeojunU/u+dCIvKGeGk=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:8f:00:b2:cf:ba:76:37:4d:19:80:fc:41:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jun 28 09:00:46 2025 GMT
Not After : Jun 29 09:00:46 2025 GMT
Subject: CN=be4418f3b6dc269ae312f564358253d6c2d99924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:31:8b:9a:55:f3:f9:d9:ee:ca:bb:16:6f:
56:71:d7:bb:a5:15:d3:fa:76:ce:d8:42:0c:06:8b:
a3:53:29:ab:9b:94:ae:90:25:2a:d6:29:b8:ef:39:
c4:db:54:04:de:54:e7:f0:1a:76:e5:e9:23:51:d1:
65:da:4f:e0:b5:3e:f9:02:c9:13:16:9d:fb:46:e5:
6c:51:0e:26:50:b1:ee:e7:5c:2e:0c:72:62:62:ab:
5b:5f:ea:cf:91:36:9f:19:40:b1:42:11:d9:9e:8b:
7f:f4:b0:e8:4f:8c:fb:55:18:59:58:60:64:89:10:
0b:ba:7a:91:69:7f:01:6e:8f:e8:e8:85:4c:85:91:
06:7a:f7:3e:c6:0d:81:1c:13:74:af:31:59:e5:e6:
b0:12:62:9c:17:8e:60:bb:8f:58:26:f4:65:0f:07:
25:54:17:46:6d:f8:f8:14:31:59:f9:53:ea:1f:c2:
79:d0:63:57:dd:dd:17:cd:d0:cb:f9:29:a4:31:6e:
3e:26:46:a2:d3:46:aa:1b:c2:47:aa:59:27:14:8f:
b8:2e:e2:89:d8:4a:5a:6a:7d:6a:82:0b:01:c1:bf:
22:2b:c4:16:40:a7:6a:64:14:d8:9e:53:8e:45:89:
ac:a4:ee:32:f8:3e:cd:59:97:c4:13:a8:b2:fc:9d:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:44:18:F3:B6:DC:26:9A:E3:12:F5:64:35:82:53:D6:C2:D9:99:24
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:d8:7d:22:40:7e:0d:f8:df:05:f7:f5:a4:20:71:95:c8:
be:d8:e0:9d:1e:a9:8d:54:de:c9:cd:3c:9b:2f:29:cf:c0:85:
2b:79:86:46:ff:6c:7d:4a:f6:ee:bf:5e:39:e6:77:1d:59:cb:
bf:9a:00:ec:5a:4a:21:ea:4f:41:b0:8b:0c:4a:27:2a:62:32:
4f:d3:37:22:6b:d6:83:b2:bb:22:a2:4f:66:62:bb:ac:53:d4:
0a:65:e1:cc:3b:ab:18:a0:23:ce:54:a2:8a:f8:e7:18:55:14:
61:56:7b:51:06:dc:f0:dd:5b:18:87:01:52:1b:bf:ce:49:fa:
43:88:84:35:84:fb:54:3b:b1:a8:b0:a8:82:6d:72:ae:3f:b7:
f3:81:e3:8c:a5:d1:8a:35:1e:a8:44:7e:22:38:f8:dd:a5:5f:
89:85:d6:93:a8:17:50:7d:42:a9:1e:f2:7f:c6:d2:b9:cf:30:
03:fe:26:b5:a0:75:dd:b3:4f:78:07:01:c8:90:59:0d:c9:ba:
15:1c:95:4c:67:1d:0c:12:b2:70:82:ee:d8:c0:ae:a4:7b:f8:
b7:5a:76:d9:48:09:0b:a1:20:5a:ad:53:8f:4f:d8:5a:c2:5c:
5d:b2:aa:7a:a0:1b:b8:36:3f:54:7d:24:17:4a:8e:7e:4e:93:
2b:fa:a7:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xI8Ass+6djdNGYD8QXUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3
OGYwMDgwHhcNMjUwNjI4MDkwMDQ2WhcNMjUwNjI5MDkwMDQ2WjAzMTEwLwYDVQQD
EyhiZTQ0MThmM2I2ZGMyNjlhZTMxMmY1NjQzNTgyNTNkNmMyZDk5OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20kxi5pV8/nZ7sq7Fm9Wcde7pRXT
+nbO2EIMBoujUymrm5SukCUq1im47znE21QE3lTn8Bp25ekjUdFl2k/gtT75AskT
Fp37RuVsUQ4mULHu51wuDHJiYqtbX+rPkTafGUCxQhHZnot/9LDoT4z7VRhZWGBk
iRALunqRaX8Bbo/o6IVMhZEGevc+xg2BHBN0rzFZ5eawEmKcF45gu49YJvRlDwcl
VBdGbfj4FDFZ+VPqH8J50GNX3d0XzdDL+SmkMW4+Jkai00aqG8JHqlknFI+4LuKJ
2Epaan1qggsBwb8iK8QWQKdqZBTYnlOORYmspO4y+D7NWZfEE6iy/J0o4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5EGPO23Caa4xL1ZDWCU9bC2ZkkMB8GA1UdIwQY
MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt
MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm
LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhevYfSJA
fg343wX39aQgcZXIvtjgnR6pjVTeyc08my8pz8CFK3mGRv9sfUr27r9eOeZ3HVnL
v5oA7FpKIepPQbCLDEonKmIyT9M3ImvWg7K7IqJPZmK7rFPUCmXhzDurGKAjzlSi
ivjnGFUUYVZ7UQbc8N1bGIcBUhu/zkn6Q4iENYT7VDuxqLCogm1yrj+384HjjKXR
ijUeqER+Ijj43aVfiYXWk6gXUH1CqR7yf8bSuc8wA/4mtaB13bNPeAcByJBZDcm6
FRyVTGcdDBKycILu2MCupHv4t1p22UgJC6EgWq1Tj0/YWsJcXbKqeqAbuDY/VH0k
F0qOfk6TK/qnaw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:19 2025 by rpki-client