Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: +hwKUgkiFUR78kO5RsF1UUUw0MTwpm3HJSL8mmhttO0=
Subject key identifier: DE:44:8C:E3:73:9F:ED:50:93:8E:BE:C9:93:6C:0C:5F:AC:FD:B0:92
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 0198D6CD004BE34939B05F38013BCFFB5D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 0F80
Signing time: Sat 23 Aug 2025 12:00:15 +0000
Manifest this update: Sat 23 Aug 2025 12:00:15 +0000
Manifest next update: Sun 24 Aug 2025 12:00:15 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: Y1X25URHamFoTkaCS/rZGQrlaTdzuDrf57khsdc3ods=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:00:4b:e3:49:39:b0:5f:38:01:3b:cf:fb:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Aug 23 12:00:15 2025 GMT
Not After : Aug 24 12:00:15 2025 GMT
Subject: CN=de448ce3739fed50938ebec9936c0c5facfdb092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:4f:26:a4:36:fd:bc:11:b1:76:99:b5:cf:
9e:f2:d7:d4:46:9b:25:db:c9:32:5b:06:01:a5:57:
40:ed:11:08:d1:46:45:db:30:7b:6f:14:35:42:37:
06:04:5d:05:df:dd:c3:01:31:51:e1:a5:72:25:f2:
c7:9e:1f:5a:72:fd:db:aa:41:04:16:9d:92:4f:88:
f0:d1:4d:8c:10:40:01:4c:da:1a:f4:1a:06:ce:74:
7c:4c:c2:bd:78:8a:0b:8d:97:f0:83:47:58:ec:57:
08:fb:e8:88:1c:62:70:9d:fe:c5:6b:49:4c:2e:2b:
e1:bb:2c:eb:75:f4:f4:85:4b:1c:9a:18:9c:e1:ee:
d9:26:a5:31:08:56:bd:02:2e:b2:7f:c3:a6:14:b0:
34:46:6c:2b:0f:4d:cc:ef:df:76:c5:92:98:99:e3:
b5:4c:9e:65:6a:0b:48:ea:d2:aa:d1:5b:45:bb:e5:
61:be:e7:17:de:67:68:c6:27:48:f5:c5:12:c7:eb:
2c:2e:f7:63:a3:2f:fe:82:fa:fd:bb:52:da:d1:ec:
56:32:23:54:a9:4c:04:56:d7:e1:e9:30:79:8f:eb:
40:4c:8a:6b:30:1e:e3:55:5e:34:52:9c:9f:8e:ea:
ca:0d:9c:34:9b:a3:6c:86:f4:15:24:6c:da:ef:81:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:8C:E3:73:9F:ED:50:93:8E:BE:C9:93:6C:0C:5F:AC:FD:B0:92
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:71:66:f3:68:3d:82:79:c0:81:29:90:3f:b0:b4:ec:f9:
b4:b9:bd:42:cf:e1:d9:2f:ce:07:bd:da:70:68:0f:63:05:11:
1a:e0:3e:e4:97:76:40:b6:0a:e2:21:ea:ac:c4:f7:48:2f:fe:
62:ed:2d:ee:de:2f:90:8c:e6:6d:f0:04:58:07:07:32:28:cb:
02:4a:ee:66:b9:c8:77:5a:fe:28:eb:23:4b:3d:be:5d:f6:8a:
3c:48:bd:97:4a:ac:e8:ca:84:53:9e:50:90:85:73:d3:9a:fa:
4d:7d:2b:30:e6:35:34:09:24:e4:fc:25:cb:72:54:42:cc:da:
66:c5:d8:9a:8c:56:a1:f4:a8:58:0c:89:18:44:cc:4b:f5:89:
69:6b:c7:ae:08:ab:b3:a3:1a:99:e5:07:e5:8e:7e:8e:54:e5:
88:11:08:2c:81:b8:6e:0c:ad:29:f4:89:b0:63:1e:d4:29:6d:
9e:0f:2c:67:e5:17:65:e7:ec:c3:6d:82:cf:f3:17:aa:e9:cb:
6b:b9:6b:91:88:f8:07:a6:71:fb:52:79:09:40:ff:96:fb:6b:
83:32:8b:15:39:4a:d7:1a:a1:9c:e6:51:87:34:62:b9:bf:e8:
28:2d:40:86:b0:a2:38:be:91:2f:bf:68:98:f0:16:44:4e:a5:
23:6e:53:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzQBL40k5sF84ATvP+10ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NmY3NzJiZjNjNDY0MWE3MWJmN2Y0YmM0ZGUxMWM5M2Fk
ZGZlYTYwHhcNMjUwODIzMTIwMDE1WhcNMjUwODI0MTIwMDE1WjAzMTEwLwYDVQQD
EyhkZTQ0OGNlMzczOWZlZDUwOTM4ZWJlYzk5MzZjMGM1ZmFjZmRiMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv1PJqQ2/bwRsXaZtc+e8tfURpsl
28kyWwYBpVdA7REI0UZF2zB7bxQ1QjcGBF0F393DATFR4aVyJfLHnh9acv3bqkEE
Fp2ST4jw0U2MEEABTNoa9BoGznR8TMK9eIoLjZfwg0dY7FcI++iIHGJwnf7Fa0lM
LivhuyzrdfT0hUscmhic4e7ZJqUxCFa9Ai6yf8OmFLA0RmwrD03M7992xZKYmeO1
TJ5lagtI6tKq0VtFu+VhvucX3mdoxidI9cUSx+ssLvdjoy/+gvr9u1La0exWMiNU
qUwEVtfh6TB5j+tATIprMB7jVV40UpyfjurKDZw0m6NshvQVJGza74EElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5EjONzn+1Qk46+yZNsDF+s/bCSMB8GA1UdIwQY
MBaAFMVvdyvzxGQacb9/S8TeEck63f6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTct
N2VjYTIwNWZhZmNiLzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTctN2VjYTIwNWZhZmNi
LzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCFxZvNo
PYJ5wIEpkD+wtOz5tLm9Qs/h2S/OB73acGgPYwURGuA+5Jd2QLYK4iHqrMT3SC/+
Yu0t7t4vkIzmbfAEWAcHMijLAkruZrnId1r+KOsjSz2+XfaKPEi9l0qs6MqEU55Q
kIVz05r6TX0rMOY1NAkk5Pwly3JUQszaZsXYmoxWofSoWAyJGETMS/WJaWvHrgir
s6MameUH5Y5+jlTliBEILIG4bgytKfSJsGMe1Cltng8sZ+UXZefsw22Cz/MXqunL
a7lrkYj4B6Zx+1J5CUD/lvtrgzKLFTlK1xqhnOZRhzRiub/oKC1AhrCiOL6RL79o
mPAWRE6lI25ThQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:23 2025 by rpki-client