Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: +g/70fGvj6SE8TX1ILW7xtgpn6wZAIc8fHyvveUwcUU=
Subject key identifier: 0C:33:A4:E0:31:26:D0:68:E8:9A:E1:06:B4:8B:7A:76:5F:E4:F7:22
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 0199FCFD8EA6F890E7050B7FC7E73E013773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 06CD
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: Uz2MDJr/L/HORAhZHmYYZueY2inkBriMrVQ+sYtFicg=)
2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8e:a6:f8:90:e7:05:0b:7f:c7:e7:3e:01:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=0c33a4e03126d068e89ae106b48b7a765fe4f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:e2:a6:11:f5:39:72:a9:21:38:ac:44:ec:
09:48:76:5f:04:60:0d:e7:a6:fc:0f:f9:d1:df:00:
61:c8:14:9e:87:d3:be:3e:71:10:f7:b7:7a:0d:59:
f4:1d:44:54:8e:36:e3:e6:a7:19:9a:a1:43:52:8c:
f1:21:2e:21:1d:5f:22:d4:02:54:97:c6:f2:3a:da:
22:30:6c:e5:73:d2:c3:9e:29:37:1e:e5:95:49:99:
96:3a:7d:f2:39:e8:57:e9:27:4b:85:41:ed:eb:67:
24:a0:64:ca:25:d7:84:d9:d3:20:47:ed:74:3c:12:
09:49:d1:81:ef:fa:5b:b4:07:85:75:ef:ff:2d:af:
f6:ae:7a:9d:fe:2e:87:5d:f8:2e:d0:8d:cf:fd:d3:
0b:09:8d:66:9a:ea:66:f4:e2:fb:5b:3e:18:00:f2:
c6:43:84:b1:c7:ee:0c:a3:5f:52:10:e8:74:e2:23:
82:7e:c9:42:b3:06:d8:55:9e:21:44:84:30:1b:06:
ca:f4:50:1d:6e:65:e2:d1:57:35:26:85:e3:68:c2:
71:6f:60:ae:5b:14:d0:b8:2c:f2:eb:0e:c3:c6:61:
d5:e4:df:fc:bf:b4:ba:11:7d:5f:20:8e:a4:03:88:
b7:f2:0d:cb:94:7c:af:4a:9a:71:f1:10:76:d0:69:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:A4:E0:31:26:D0:68:E8:9A:E1:06:B4:8B:7A:76:5F:E4:F7:22
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:e1:50:cd:90:4e:c8:cf:5d:64:e3:87:f9:6d:25:c7:e3:
18:63:1f:19:b1:94:7d:31:21:fb:86:81:99:90:c8:40:91:23:
d7:21:5e:d0:c0:94:db:32:4a:b6:0a:18:5c:8f:7b:38:e2:d5:
b5:1e:92:c5:da:54:3e:58:32:2d:8e:c6:b2:9b:16:2a:a9:b0:
97:13:6d:e0:b0:bf:ae:cd:c4:f4:a3:3a:66:e1:7b:78:53:42:
67:00:29:17:c4:8f:fd:74:73:cb:39:d5:b7:dd:6b:9b:73:7f:
9d:70:04:57:39:0f:97:9e:21:55:6d:4e:b7:5b:56:92:d4:3d:
d2:97:b7:80:1a:58:16:70:db:9b:7f:1f:61:44:15:42:c3:51:
0a:41:cc:15:e3:f9:ad:3e:09:be:bc:62:3e:06:40:0f:2b:fb:
ac:2a:26:20:16:ed:d7:bf:ca:99:f5:7b:40:46:a1:ee:47:5f:
0e:7e:f0:2f:0d:5c:e0:f6:6b:4f:ae:7f:04:04:cd:42:b1:63:
28:ba:c8:e2:a9:01:f2:23:40:0a:27:81:c3:ca:5d:1b:b1:8e:
29:24:6a:f2:cc:18:3c:4f:87:7f:0e:7c:48:37:d8:5c:8b:24:
f0:61:04:82:3a:f6:cf:ef:50:92:c2:a4:73:ba:f8:04:e7:a5:
5e:fa:e6:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Y6m+JDnBQt/x+c+ATdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjUxMDE5MTUwMTM5WhcNMjUxMDIwMTUwMTM5WjAzMTEwLwYDVQQD
EygwYzMzYTRlMDMxMjZkMDY4ZTg5YWUxMDZiNDhiN2E3NjVmZTRmNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz/iphH1OXKpITisROwJSHZfBGAN
56b8D/nR3wBhyBSeh9O+PnEQ97d6DVn0HURUjjbj5qcZmqFDUozxIS4hHV8i1AJU
l8byOtoiMGzlc9LDnik3HuWVSZmWOn3yOehX6SdLhUHt62ckoGTKJdeE2dMgR+10
PBIJSdGB7/pbtAeFde//La/2rnqd/i6HXfgu0I3P/dMLCY1mmupm9OL7Wz4YAPLG
Q4Sxx+4Mo19SEOh04iOCfslCswbYVZ4hRIQwGwbK9FAdbmXi0Vc1JoXjaMJxb2Cu
WxTQuCzy6w7DxmHV5N/8v7S6EX1fII6kA4i38g3LlHyvSppx8RB20GkamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwzpOAxJtBo6JrhBrSLenZf5PciMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUfhUM2Q
TsjPXWTjh/ltJcfjGGMfGbGUfTEh+4aBmZDIQJEj1yFe0MCU2zJKtgoYXI97OOLV
tR6SxdpUPlgyLY7GspsWKqmwlxNt4LC/rs3E9KM6ZuF7eFNCZwApF8SP/XRzyznV
t91rm3N/nXAEVzkPl54hVW1Ot1tWktQ90pe3gBpYFnDbm38fYUQVQsNRCkHMFeP5
rT4JvrxiPgZADyv7rComIBbt17/KmfV7QEah7kdfDn7wLw1c4PZrT65/BATNQrFj
KLrI4qkB8iNACieBw8pdG7GOKSRq8swYPE+Hfw58SDfYXIsk8GEEgjr2z+9QksKk
c7r4BOelXvrmCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:43 2025 by rpki-client