Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: p91cZes9nD0bd2+2HHy7qLUgUtBOKfTfeTcEC02Njns=
Subject key identifier: C4:58:91:BB:F7:4E:56:39:DB:29:EE:CB:0E:04:38:0C:D0:EC:0A:20
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 0198D65FC145A1B458B97F935F7D6ED1121B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: j5bwYlkWr0zcXGAk0wPxW5n0Wqy2RuOZ7jVvGhMLPAM=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c1:45:a1:b4:58:b9:7f:93:5f:7d:6e:d1:12:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=c45891bbf74e5639db29eecb0e04380cd0ec0a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:e0:5b:69:2d:a3:8c:94:34:58:1b:10:d7:
15:c0:af:96:17:d0:af:51:30:11:54:be:90:3a:b6:
38:c4:9d:3a:d9:19:dd:dd:dd:ed:75:d8:b0:f0:76:
b3:3d:54:25:89:01:9c:09:4d:af:64:ce:c6:a5:92:
f5:50:d7:62:10:89:29:15:8f:92:9a:ff:f9:26:30:
ec:44:69:6c:47:70:e4:9f:fa:bb:98:0c:dc:92:77:
20:60:50:e6:4c:04:08:cf:38:28:3b:3d:4c:3a:7d:
89:5c:bc:3b:21:cb:aa:3f:e9:b8:2d:c5:1f:4e:cb:
41:8c:bc:df:d8:b0:2f:07:a2:15:b6:f5:df:7c:98:
90:f1:80:e6:d9:66:8e:2d:f2:34:e0:9e:42:19:f4:
43:8b:90:2f:8c:c2:ad:68:9d:28:68:a8:f2:7a:2a:
f4:6b:e7:28:4f:c3:07:cb:9a:38:20:58:fe:76:d0:
97:f3:57:80:47:a9:f1:fe:4e:60:de:4e:89:49:50:
c7:f9:69:b0:2d:ea:7f:f1:01:4c:d5:97:e6:f3:e7:
4a:68:04:42:7a:d6:5d:66:55:73:ef:4e:13:fd:a9:
c7:02:03:83:5f:be:96:7e:6b:bc:a8:e7:b7:5d:3c:
4e:8c:b2:d4:00:97:7e:f0:7a:85:77:67:c4:b3:0b:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:91:BB:F7:4E:56:39:DB:29:EE:CB:0E:04:38:0C:D0:EC:0A:20
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d3:4c:5a:84:ec:3a:a2:78:fa:a1:af:19:15:19:03:fb:81:
9f:4c:af:c8:be:a1:4c:45:d1:8b:af:77:2d:62:45:49:4d:ca:
2f:52:84:37:7f:4a:16:f6:57:e1:1d:16:71:50:82:34:9c:03:
87:e6:e4:37:53:a1:1e:00:68:92:b8:f5:8a:01:51:bb:30:d9:
80:4e:95:68:b1:27:15:5c:45:68:7d:34:27:73:e3:b5:31:79:
2c:5b:2f:fd:ad:27:bd:a4:a3:29:a2:94:e1:86:d0:04:64:01:
20:95:71:15:de:a1:d8:80:7b:9c:0a:f5:bb:8a:44:2e:57:50:
91:2a:e4:6c:cf:6e:04:e7:78:3b:e0:c5:71:45:5d:ee:da:77:
99:2d:9e:95:60:05:e1:ac:b6:e9:3c:8d:81:d6:af:cc:61:b4:
07:73:49:93:65:e6:a4:cb:08:2d:6e:7f:16:1a:ad:97:c4:61:
dc:6e:bb:ff:0c:ef:b4:b3:19:91:a1:c9:41:4d:9b:fb:5a:f3:
3d:05:b7:55:af:20:b7:70:ba:b1:bb:f8:c2:b8:48:ac:6b:c2:
9c:37:8f:ec:fb:36:d6:09:3a:ac:9d:f8:82:dd:b9:30:25:58:
04:c3:4b:d1:f1:29:1a:2e:50:e6:eb:df:fa:eb:2f:f1:8a:6f:
a0:c5:bf:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8FFobRYuX+TX31u0RIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGEwZGQyZjk2NGU4NjBmNmJhNGMxNzYxMTJhNWQ3MTJi
YTkzYWEwHhcNMjUwODIzMTAwMDU2WhcNMjUwODI0MTAwMDU2WjAzMTEwLwYDVQQD
EyhjNDU4OTFiYmY3NGU1NjM5ZGIyOWVlY2IwZTA0MzgwY2QwZWMwYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM/gW2kto4yUNFgbENcVwK+WF9Cv
UTARVL6QOrY4xJ062Rnd3d3tddiw8HazPVQliQGcCU2vZM7GpZL1UNdiEIkpFY+S
mv/5JjDsRGlsR3Dkn/q7mAzckncgYFDmTAQIzzgoOz1MOn2JXLw7IcuqP+m4LcUf
TstBjLzf2LAvB6IVtvXffJiQ8YDm2WaOLfI04J5CGfRDi5AvjMKtaJ0oaKjyeir0
a+coT8MHy5o4IFj+dtCX81eAR6nx/k5g3k6JSVDH+WmwLep/8QFM1Zfm8+dKaARC
etZdZlVz704T/anHAgODX76Wfmu8qOe3XTxOjLLUAJd+8HqFd2fEswtrTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRYkbv3TlY52ynuyw4EOAzQ7AogMB8GA1UdIwQY
MBaAFF8KDdL5ZOhg9rpMF2ESpdcSupOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2Mt
MTBiZWQyN2Q3NjZlLzEvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2MtMTBiZWQyN2Q3NjZl
LzEvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9NMWoTs
OqJ4+qGvGRUZA/uBn0yvyL6hTEXRi693LWJFSU3KL1KEN39KFvZX4R0WcVCCNJwD
h+bkN1OhHgBokrj1igFRuzDZgE6VaLEnFVxFaH00J3PjtTF5LFsv/a0nvaSjKaKU
4YbQBGQBIJVxFd6h2IB7nAr1u4pELldQkSrkbM9uBOd4O+DFcUVd7tp3mS2elWAF
4ay26TyNgdavzGG0B3NJk2XmpMsILW5/Fhqtl8Rh3G67/wzvtLMZkaHJQU2b+1rz
PQW3Va8gt3C6sbv4wrhIrGvCnDeP7Ps21gk6rJ34gt25MCVYBMNL0fEpGi5Q5uvf
+usv8YpvoMW/Ag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:00 2025 by rpki-client