Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: OJSaKray7B6tUcn0OpA+863c8uoENtqFjzflJ+HUFok=
Subject key identifier: 46:11:48:92:4D:1A:FA:A7:ED:11:F6:C9:1E:B4:A0:58:53:26:0E:97
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 0198D5838E372CBE96FB5B8EBE8E88C06D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 0634
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: oXdKVqBB71J8C3SMS1zflnS4bmCqDLeB07+bOgTdQa8=)
2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8e:37:2c:be:96:fb:5b:8e:be:8e:88:c0:6d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=461148924d1afaa7ed11f6c91eb4a05853260e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:2a:6d:b2:aa:64:5d:34:d1:44:60:5c:86:
0c:f7:61:d9:c4:6f:22:99:f1:08:7d:38:82:8d:74:
bf:8d:51:c4:02:67:31:27:fa:a2:0e:64:f3:8b:52:
4b:11:3a:35:66:ea:75:e2:5b:b8:2e:6b:31:08:ab:
50:d7:84:50:cb:49:3a:63:d0:a0:28:ea:07:a5:31:
7d:be:fa:78:25:c9:9b:7e:1c:a6:c4:7e:f5:c7:c5:
d2:1c:fa:ca:af:99:24:be:15:87:84:03:28:dd:44:
06:2e:9b:6f:e1:85:b9:13:f9:70:c4:cc:90:78:fa:
28:cf:eb:53:8e:c8:dd:0a:85:69:10:a5:b0:9d:23:
88:7b:67:f7:f6:aa:1b:e3:da:29:63:fd:13:e2:9e:
69:77:58:40:58:4d:b0:b3:bd:12:d5:a0:42:51:1b:
68:16:c6:6f:3f:f4:22:6f:d7:ca:7d:35:ce:3c:1d:
92:03:a0:81:c4:0f:d7:d7:54:94:5c:1e:e5:c2:9b:
91:0d:5e:b8:88:14:ae:78:2e:44:05:30:b2:1e:6d:
42:d8:1b:e4:58:da:17:8d:5d:1e:2c:fb:6c:be:06:
1b:ee:0b:e7:de:fd:c8:08:ca:4b:a4:79:8e:c0:b9:
be:0a:b5:98:4d:72:a9:6d:fe:1d:75:c0:49:1e:06:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:48:92:4D:1A:FA:A7:ED:11:F6:C9:1E:B4:A0:58:53:26:0E:97
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:26:1e:65:c8:ea:de:83:13:e5:83:5d:f8:d4:57:36:31:23:
9f:60:5f:3e:b2:a8:15:20:28:15:73:2f:bf:a7:a0:ff:38:59:
01:2c:ab:17:1f:97:a0:63:fa:3a:30:fc:9d:29:e4:0b:af:08:
0d:c2:48:50:ed:ed:8b:3f:34:64:5a:4d:fb:de:3b:13:62:61:
d8:4f:16:1a:92:e8:95:a0:6b:92:53:3d:ff:15:86:4d:c4:52:
c1:7a:f9:9e:a3:49:97:aa:fb:5c:f6:a5:e2:16:ee:dc:72:fe:
d4:e7:bb:05:27:21:92:0f:0f:5c:d2:f1:01:97:51:1e:91:17:
ce:72:27:59:26:1f:7c:4b:d0:ce:de:87:8f:6d:34:00:cd:87:
29:4b:fd:55:3d:7e:49:ec:5b:6e:c9:ea:fa:af:59:9e:1f:4f:
8f:97:85:9c:10:fd:ea:48:9f:9b:d3:e5:97:55:31:79:fa:be:
12:53:55:88:b4:af:77:3c:63:a8:5b:ee:d1:eb:85:6d:91:f4:
a5:5a:ee:53:b6:08:89:fd:87:f3:71:c9:ed:3b:ba:56:5a:65:
79:c0:df:59:82:c1:62:bb:ea:01:f9:d1:60:a3:42:25:8a:e5:
22:80:bb:ca:46:fb:54:6b:ad:cb:9a:c3:a9:29:cd:11:8b:54:
be:88:e4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg443LL6W+1uOvo6IwG2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjUwODIzMDYwMDI1WhcNMjUwODI0MDYwMDI1WjAzMTEwLwYDVQQD
Eyg0NjExNDg5MjRkMWFmYWE3ZWQxMWY2YzkxZWI0YTA1ODUzMjYwZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgysqbbKqZF000URgXIYM92HZxG8i
mfEIfTiCjXS/jVHEAmcxJ/qiDmTzi1JLETo1Zup14lu4LmsxCKtQ14RQy0k6Y9Cg
KOoHpTF9vvp4JcmbfhymxH71x8XSHPrKr5kkvhWHhAMo3UQGLptv4YW5E/lwxMyQ
ePooz+tTjsjdCoVpEKWwnSOIe2f39qob49opY/0T4p5pd1hAWE2ws70S1aBCURto
FsZvP/Qib9fKfTXOPB2SA6CBxA/X11SUXB7lwpuRDV64iBSueC5EBTCyHm1C2Bvk
WNoXjV0eLPtsvgYb7gvn3v3ICMpLpHmOwLm+CrWYTXKpbf4ddcBJHgakbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYRSJJNGvqn7RH2yR60oFhTJg6XMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriYeZcjq
3oMT5YNd+NRXNjEjn2BfPrKoFSAoFXMvv6eg/zhZASyrFx+XoGP6OjD8nSnkC68I
DcJIUO3tiz80ZFpN+947E2Jh2E8WGpLolaBrklM9/xWGTcRSwXr5nqNJl6r7XPal
4hbu3HL+1Oe7BSchkg8PXNLxAZdRHpEXznInWSYffEvQzt6Hj200AM2HKUv9VT1+
Sexbbsnq+q9Znh9Pj5eFnBD96kifm9Pll1Uxefq+ElNViLSvdzxjqFvu0euFbZH0
pVruU7YIif2H83HJ7Tu6VlplecDfWYLBYrvqAfnRYKNCJYrlIoC7ykb7VGuty5rD
qSnNEYtUvojkzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:11 2025 by rpki-client