Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
File: xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json)
Hash identifier: UUPyAV+3FbuSp+3xw/qkFDwRT5w9bU+SaqiQfqehxuQ=
Subject key identifier: 38:E1:3E:61:7D:67:A5:29:3E:D3:27:93:E0:A4:00:5E:EF:FE:BD:C5
Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
Certificate issuer: /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Certificate serial: 0198D58352DF0D68A9C9C90F35EC13E6FF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: TDQUBA084lFaPWhIWeybm/pNuode7ZOdacZbGnyxx+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:52:df:0d:68:a9:c9:c9:0f:35:ec:13:e6:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=38e13e617d67a5293ed32793e0a4005eeffebdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:f2:e8:db:eb:e0:22:1d:25:43:42:b7:7e:
a6:72:d6:9a:00:c3:44:db:0c:04:3a:8e:f4:7e:9e:
e4:0c:bd:77:90:9d:66:30:43:09:82:b0:42:06:37:
7b:db:bc:d8:7f:ac:9f:54:42:19:9b:ac:ff:8d:1a:
a5:83:0f:da:5e:cf:92:e7:29:89:6f:90:9c:c6:40:
9f:cd:d2:04:6b:ea:04:2d:25:d8:e1:1d:70:49:61:
60:89:f0:02:03:e9:1e:7b:7d:5f:70:a6:25:c0:49:
ae:e4:b3:42:ba:a8:b0:29:4b:fc:ce:1e:34:db:fc:
8b:b0:f2:1d:76:3c:c3:18:da:8e:fc:ea:0a:f7:57:
73:6a:e1:bf:e4:89:57:90:7a:b7:b3:e8:3c:98:89:
ea:53:fb:f1:a6:f7:cb:33:a8:a0:5d:c9:81:5f:72:
f5:b8:0c:48:d1:3f:15:78:c2:3a:2f:0d:f3:aa:a7:
14:b6:ad:b9:b6:cb:28:fa:0a:66:b7:35:40:6e:c1:
1d:69:ef:77:39:a8:b0:5e:70:2a:a4:dc:cd:61:d2:
3e:e5:07:29:12:2b:ef:de:59:4c:03:72:ed:e5:14:
62:76:85:25:86:6c:8f:bb:71:09:49:0f:19:58:e0:
bb:3f:f4:d8:32:8c:d9:ff:ed:ae:08:d9:5a:eb:c3:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:3E:61:7D:67:A5:29:3E:D3:27:93:E0:A4:00:5E:EF:FE:BD:C5
X509v3 Authority Key Identifier:
keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:63:be:3e:1a:3d:99:4e:a1:51:22:dc:b7:03:2f:77:17:
d7:ad:4d:38:29:1f:7c:33:1a:cd:f2:d7:35:3c:ef:eb:c9:0f:
67:73:d7:22:56:26:54:d4:01:10:23:21:fe:e1:2a:e8:ff:af:
22:fc:b9:8d:dd:3c:5f:98:b0:73:7c:88:f1:45:db:5e:67:36:
5f:40:2b:c3:15:11:67:88:c1:d2:d0:bf:ee:30:20:60:5b:86:
6d:ae:65:f3:dd:38:f1:cf:4a:40:8d:9e:43:d2:1f:b8:de:19:
6e:6a:e1:41:f9:28:f2:d0:7e:f8:87:ee:42:1d:eb:14:53:c9:
55:bf:b6:5b:cf:4a:6e:e4:bd:96:aa:f6:b2:dc:10:18:e5:2c:
fc:0b:30:33:c7:b9:2e:74:d2:cd:e6:76:b2:56:2a:2e:68:b0:
1c:37:fa:b2:83:fa:55:4c:38:8e:04:bc:f4:83:c5:1e:86:ad:
2f:ca:6a:07:b1:ba:cc:14:78:01:ad:19:22:46:24:75:af:6b:
0c:df:a3:c2:cf:6a:3d:5a:14:0a:29:3d:ff:db:3c:4e:ca:36:
a4:4b:f1:b3:e8:21:2e:aa:40:ee:82:4a:f6:ac:a5:cc:ab:95:
3f:fa:a0:01:93:e8:48:70:8c:d3:eb:44:c9:9f:fb:fe:50:1f:
71:c5:60:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1LfDWipyckPNewT5v9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YmM2OWQ0MmEzYjE1ZTNjZWNiOTFjNzcyYmE2NDMzYzUx
MWJlOTkwHhcNMjUwODIzMDYwMDEwWhcNMjUwODI0MDYwMDEwWjAzMTEwLwYDVQQD
EygzOGUxM2U2MTdkNjdhNTI5M2VkMzI3OTNlMGE0MDA1ZWVmZmViZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLy6Nvr4CIdJUNCt36mctaaAMNE
2wwEOo70fp7kDL13kJ1mMEMJgrBCBjd727zYf6yfVEIZm6z/jRqlgw/aXs+S5ymJ
b5CcxkCfzdIEa+oELSXY4R1wSWFgifACA+kee31fcKYlwEmu5LNCuqiwKUv8zh40
2/yLsPIddjzDGNqO/OoK91dzauG/5IlXkHq3s+g8mInqU/vxpvfLM6igXcmBX3L1
uAxI0T8VeMI6Lw3zqqcUtq25tsso+gpmtzVAbsEdae93OaiwXnAqpNzNYdI+5Qcp
Eivv3llMA3Lt5RRidoUlhmyPu3EJSQ8ZWOC7P/TYMozZ/+2uCNla68PKxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjhPmF9Z6UpPtMnk+CkAF7v/r3FMB8GA1UdIwQY
MBaAFMS8adQqOxXjzsuRx3K6ZDPFEb6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEx4cDFDbzdGZVBPeTVISGNycGtNOFVSdnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kOGMyMWItZmUzNi00YTJlLWFjMmUt
ZDE3Zjk4MTE0MDcwLzEveEx4cDFDbzdGZVBPeTVISGNycGtNOFVSdnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kOGMyMWItZmUzNi00YTJlLWFjMmUtZDE3Zjk4MTE0MDcw
LzEveEx4cDFDbzdGZVBPeTVISGNycGtNOFVSdnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUZjvj4a
PZlOoVEi3LcDL3cX161NOCkffDMazfLXNTzv68kPZ3PXIlYmVNQBECMh/uEq6P+v
Ivy5jd08X5iwc3yI8UXbXmc2X0ArwxURZ4jB0tC/7jAgYFuGba5l89048c9KQI2e
Q9IfuN4ZbmrhQfko8tB++IfuQh3rFFPJVb+2W89KbuS9lqr2stwQGOUs/AswM8e5
LnTSzeZ2slYqLmiwHDf6soP6VUw4jgS89IPFHoatL8pqB7G6zBR4Aa0ZIkYkda9r
DN+jws9qPVoUCik9/9s8Tso2pEvxs+ghLqpA7oJK9qylzKuVP/qgAZPoSHCM0+tE
yZ/7/lAfccVgHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:33 2025 by rpki-client