
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: liQfTVVAmQJx4JDf5lI4frsDu2gLly4SI3FZnz5PLVM=
Subject key identifier: C2:65:44:4B:C3:42:52:60:F0:4B:BA:65:83:F5:BC:91:71:0A:7C:EB
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 0198D5F144730E6150A6DAD16E236376726E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 0EA8
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: P2NRYwvD64-ChL8WHsL3n2VNc0o.roa (hash: ieevRAfzDccOVGuN3ZGz3jBO2k67pRtiKtsN5CR5hf4=)
2: WePWXi4BVJvCbK70G_Bl8LvCy1A.roa (hash: KcxOlT86bPrqOuZYUTgExqyOPNUmMSnB0pr0K4kluRk=)
3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: OzUyhogA6HjDMEkYqEePtm1T4DMmnhKBC1yyKKmGErs=)
4: ZN7LHZSqu6VYidqfpIPOfCxL2L4.roa (hash: HOkUkg1LrwSaHvSseUfJQzAJzpgcTNuaZCYPqCnldN0=)
5: fm5A4Lmh3Dyoqm8phCUbdJ-SJ50.roa (hash: y1l9jzGOcVZ0GENozcALgbMdp6ZfPx8sRn42vZfb0eg=)
6: mOQsXh6W-nguYweUEP-GggtQ8co.roa (hash: BRX6qGv8sEq7HbLRmf+hKda82RdBa8GI6j+263A+qA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:44:73:0e:61:50:a6:da:d1:6e:23:63:76:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=c265444bc3425260f04bba6583f5bc91710a7ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:6a:c9:d5:44:02:90:c3:7f:4f:59:0c:d9:
07:15:07:d3:09:ec:12:43:cd:8d:6d:20:b4:86:cf:
80:00:a3:36:af:f0:d6:f6:85:13:70:be:3f:48:4f:
f8:18:ee:74:b6:3e:8d:18:ac:db:62:61:71:7a:5a:
d4:77:27:76:1f:f4:a4:64:23:98:c5:ab:e6:f9:02:
a0:b8:03:17:3f:6d:0b:e7:c6:cf:77:dc:61:b5:7a:
79:37:0f:b4:55:bb:34:ed:e9:7d:3b:b2:fd:38:c1:
9b:76:e7:64:03:bc:ef:1c:b3:a3:20:b7:78:0a:b6:
82:0d:e9:13:c4:93:49:78:d4:fe:23:2d:b8:1c:8e:
7c:da:f3:4f:2d:ef:c8:29:7e:bd:a5:c6:34:c2:75:
02:44:45:d4:35:8b:e6:75:42:e3:e4:6d:25:e7:1c:
88:f4:82:93:6c:60:63:78:b8:5a:7b:77:eb:8d:68:
17:e8:7d:7b:1e:f9:db:19:9f:60:72:60:ab:e1:e6:
8e:e7:e7:c4:2e:9d:c6:26:48:84:82:ca:6d:3f:38:
70:00:20:60:09:b9:8f:47:76:35:2c:c6:7e:d9:62:
22:07:10:5b:8e:77:e5:a6:22:64:85:15:77:49:36:
73:39:f9:7a:dd:ec:85:52:4e:01:1e:0a:9a:d1:be:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:44:4B:C3:42:52:60:F0:4B:BA:65:83:F5:BC:91:71:0A:7C:EB
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fc:3f:d3:1b:f8:56:99:87:64:a6:05:17:b5:7d:ff:2e:bf:
2f:11:a1:86:4f:92:28:8a:81:2b:4d:ad:45:03:52:94:7b:fa:
5c:12:7b:cd:13:0a:b3:fb:cf:02:54:be:79:91:e6:16:48:a5:
29:c4:33:b5:e2:9a:d7:10:38:44:b0:c1:08:19:13:71:8e:44:
6b:99:22:88:33:2b:62:b8:3a:28:f8:19:a5:0e:dd:08:3f:5a:
14:fa:fc:bd:68:da:d1:e4:79:45:2e:7b:99:cd:3b:12:72:c5:
91:8a:ed:1a:6c:a4:7b:da:e3:28:d9:a5:2d:80:00:f6:4f:ec:
c5:c4:c7:40:fc:ca:b3:dc:74:79:a9:66:d4:e8:1b:1a:17:b3:
f6:fe:6e:12:2b:c7:86:41:95:6c:da:d9:d1:45:a2:e2:c7:1c:
ce:58:6f:20:63:8c:75:72:ed:87:66:5c:33:39:fa:fc:bc:7a:
52:89:b2:2b:8a:e8:74:d9:85:8e:73:a3:b1:5a:7b:28:58:bb:
a0:23:11:ce:52:18:57:81:41:15:1b:99:23:b5:bf:cc:d3:1b:
bb:ed:95:c5:64:24:9a:a8:54:64:8e:ab:98:d0:84:69:0c:2d:
94:1c:3b:09:6d:02:ee:32:f5:69:cf:6e:4e:e2:97:a6:d7:5f:
43:c5:46:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8URzDmFQptrRbiNjdnJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw
OTkxYmUwHhcNMjUwODIzMDgwMDE1WhcNMjUwODI0MDgwMDE1WjAzMTEwLwYDVQQD
EyhjMjY1NDQ0YmMzNDI1MjYwZjA0YmJhNjU4M2Y1YmM5MTcxMGE3Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n5qydVEApDDf09ZDNkHFQfTCewS
Q82NbSC0hs+AAKM2r/DW9oUTcL4/SE/4GO50tj6NGKzbYmFxelrUdyd2H/SkZCOY
xavm+QKguAMXP20L58bPd9xhtXp5Nw+0Vbs07el9O7L9OMGbdudkA7zvHLOjILd4
CraCDekTxJNJeNT+Iy24HI582vNPLe/IKX69pcY0wnUCREXUNYvmdULj5G0l5xyI
9IKTbGBjeLhae3frjWgX6H17HvnbGZ9gcmCr4eaO5+fELp3GJkiEgsptPzhwACBg
CbmPR3Y1LMZ+2WIiBxBbjnflpiJkhRV3STZzOfl63eyFUk4BHgqa0b7F6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJlREvDQlJg8Eu6ZYP1vJFxCnzrMB8GA1UdIwQY
MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt
NzVkOWNlNWI4ZDljLzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj
LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvw/0xv4
VpmHZKYFF7V9/y6/LxGhhk+SKIqBK02tRQNSlHv6XBJ7zRMKs/vPAlS+eZHmFkil
KcQzteKa1xA4RLDBCBkTcY5Ea5kiiDMrYrg6KPgZpQ7dCD9aFPr8vWja0eR5RS57
mc07EnLFkYrtGmyke9rjKNmlLYAA9k/sxcTHQPzKs9x0ealm1OgbGhez9v5uEivH
hkGVbNrZ0UWi4scczlhvIGOMdXLth2ZcMzn6/Lx6UomyK4rodNmFjnOjsVp7KFi7
oCMRzlIYV4FBFRuZI7W/zNMbu+2VxWQkmqhUZI6rmNCEaQwtlBw7CW0C7jL1ac9u
TuKXptdfQ8VGZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:40 2025 by rpki-client