Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: dX/guQOlhOA6KTF1baCjMgml9QbghStGnLwT4cB3fOA=
Subject key identifier: FF:76:89:7E:DD:F0:70:DF:A4:5C:21:04:87:5A:61:BA:7E:0A:CA:AD
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 0198D5BBA9FCA0D431CDD97F8BA5F7C42A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: Xln98lHgvCWu+A2fYabQAW3XTs9I5UDR6eBnF4y5Nt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:fc:a0:d4:31:cd:d9:7f:8b:a5:f7:c4:2a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=ff76897eddf070dfa45c2104875a61ba7e0acaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:32:94:05:9d:8f:fa:e2:40:77:d6:b6:2e:
67:44:a4:48:9c:08:a0:d9:64:d1:21:82:e0:d9:7b:
21:07:83:39:d7:75:f2:9f:a4:b8:80:98:03:ae:1a:
67:eb:a0:03:89:18:e3:25:f1:a2:81:f0:fe:77:5e:
3f:fa:17:52:0e:e3:90:33:d6:75:78:95:9f:44:82:
23:f4:f7:fb:59:51:e9:74:c2:af:b9:1b:9f:ec:8c:
4f:9b:e6:00:29:fb:2b:e4:b3:4f:9c:c8:83:fa:80:
67:77:57:38:60:5d:4b:15:cc:75:0e:0e:d1:b8:fd:
85:49:cd:1e:2e:a4:be:07:68:a6:c3:b6:00:ac:55:
e8:60:ad:39:f9:ad:48:49:37:8d:a5:3b:25:7b:d5:
99:35:c6:fc:4c:bb:28:de:26:e0:17:1b:7e:cc:d1:
b7:db:2f:70:a4:90:69:05:40:3a:a5:07:f0:f6:16:
4d:87:84:75:5a:1e:a0:a6:7e:5d:91:3d:8a:66:0e:
e4:81:ae:63:38:8d:13:9e:6d:62:a5:70:a1:61:42:
d5:c2:52:ef:ce:f8:49:6c:eb:ee:66:90:8a:50:0c:
33:a6:1d:29:a2:ef:7b:60:8d:93:83:e9:b6:ce:83:
ff:5b:12:a6:b6:3b:e7:33:ac:07:1a:c1:68:b9:ac:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:89:7E:DD:F0:70:DF:A4:5C:21:04:87:5A:61:BA:7E:0A:CA:AD
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:ff:2b:99:91:af:d7:ab:6a:f8:78:b8:da:bf:3c:da:5b:
f0:d7:d8:10:79:51:a5:74:10:32:bf:24:1e:26:2c:bc:24:95:
28:14:72:1a:0c:b9:12:23:71:51:fb:cb:04:68:83:b1:47:6d:
29:27:12:c7:8b:d8:fe:9a:29:0b:ac:ef:49:18:ef:32:7e:b2:
58:d5:6a:72:02:18:da:74:b6:86:96:43:4b:b5:55:99:b9:1e:
db:1c:05:1a:19:68:e0:da:e6:88:2c:af:3d:1f:92:09:5e:89:
23:4d:32:f5:73:cc:2a:f9:32:0b:09:18:85:59:7d:5c:63:3e:
25:2e:1c:59:58:6a:e8:1d:8b:e6:f0:da:2e:5d:2d:51:1f:2e:
54:13:ff:b8:42:e1:78:fd:fe:c2:8a:16:95:59:58:43:c1:57:
22:f7:08:74:c4:41:92:4f:fe:9a:a4:95:ae:dd:c4:09:1a:92:
93:d4:d3:e0:9d:1c:06:74:4e:8e:d9:c4:47:28:c5:c2:7f:dd:
5f:99:bc:0a:fe:ef:d6:f7:67:6c:0f:f4:3b:dc:5f:bb:6b:c5:
e1:c8:67:a1:a1:96:fb:bd:af:4e:f3:55:d9:5d:38:bd:92:cf:
bc:ff:1e:92:18:05:76:0e:fb:b7:86:2f:02:6a:e3:13:84:b6:
ec:11:7b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6n8oNQxzdl/i6X3xCpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0
MmJjY2EwHhcNMjUwODIzMDcwMTQyWhcNMjUwODI0MDcwMTQyWjAzMTEwLwYDVQQD
EyhmZjc2ODk3ZWRkZjA3MGRmYTQ1YzIxMDQ4NzVhNjFiYTdlMGFjYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0YylAWdj/riQHfWti5nRKRInAig
2WTRIYLg2XshB4M513Xyn6S4gJgDrhpn66ADiRjjJfGigfD+d14/+hdSDuOQM9Z1
eJWfRIIj9Pf7WVHpdMKvuRuf7IxPm+YAKfsr5LNPnMiD+oBnd1c4YF1LFcx1Dg7R
uP2FSc0eLqS+B2imw7YArFXoYK05+a1ISTeNpTsle9WZNcb8TLso3ibgFxt+zNG3
2y9wpJBpBUA6pQfw9hZNh4R1Wh6gpn5dkT2KZg7kga5jOI0Tnm1ipXChYULVwlLv
zvhJbOvuZpCKUAwzph0pou97YI2Tg+m2zoP/WxKmtjvnM6wHGsFouaxsawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP92iX7d8HDfpFwhBIdaYbp+CsqtMB8GA1UdIwQY
MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt
OWFjMWE3ZTRjNDA2LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2
LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqP/K5mR
r9eravh4uNq/PNpb8NfYEHlRpXQQMr8kHiYsvCSVKBRyGgy5EiNxUfvLBGiDsUdt
KScSx4vY/popC6zvSRjvMn6yWNVqcgIY2nS2hpZDS7VVmbke2xwFGhlo4NrmiCyv
PR+SCV6JI00y9XPMKvkyCwkYhVl9XGM+JS4cWVhq6B2L5vDaLl0tUR8uVBP/uELh
eP3+wooWlVlYQ8FXIvcIdMRBkk/+mqSVrt3ECRqSk9TT4J0cBnROjtnERyjFwn/d
X5m8Cv7v1vdnbA/0O9xfu2vF4chnoaGW+72vTvNV2V04vZLPvP8ekhgFdg77t4Yv
AmrjE4S27BF7Xg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:17 2025 by rpki-client