Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: MpWutJ2K0DQr1yqtYC2KzrY62f2ZBE/Mlcp62eFi5/U=
Subject key identifier: 08:54:57:7C:92:11:03:A9:AD:2B:97:59:7C:21:68:71:58:DE:7D:72
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0198D6602BB492574C35A99EAA2A1F345AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 3c26yJ5yaEuPDpaE2r1BZmEG5Y07IgJnZlVGaC1jL5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2b:b4:92:57:4c:35:a9:9e:aa:2a:1f:34:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=0854577c921103a9ad2b97597c21687158de7d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:a6:ac:7d:52:13:dd:a9:69:0a:d3:4d:87:
3f:cc:57:27:36:0e:4b:63:21:7e:9a:67:9c:2c:92:
1e:1c:23:c1:13:00:a1:d0:b2:e0:15:72:e7:31:8b:
df:b5:61:4f:26:bc:f7:32:56:18:57:f4:5f:79:24:
4d:eb:0c:4f:71:d9:50:dd:ad:1b:6f:88:a6:79:a8:
8b:0f:2f:ee:99:99:34:76:8d:73:11:6b:43:73:b8:
83:27:e3:61:b2:7c:02:88:9d:c3:ec:33:21:3f:76:
e5:bb:06:39:85:01:d4:1b:72:c3:83:a0:a5:66:dd:
34:84:a5:af:43:7a:64:89:24:9e:13:67:c3:6c:63:
e5:0a:eb:70:a7:08:e3:8d:e0:9d:9b:65:cc:a3:56:
d5:23:4d:25:99:00:f8:d1:28:3e:9e:19:58:9f:5c:
23:33:af:48:fa:c7:de:39:41:a9:6a:6c:58:a1:09:
ea:57:91:5c:2f:cb:b2:79:fc:87:94:45:27:f3:ba:
e0:57:e8:9e:1e:68:e8:7f:f0:5a:4a:f1:cd:94:ed:
6a:37:66:06:98:1b:8e:a4:b2:6c:4a:32:5e:e8:88:
7b:6a:45:50:37:58:92:70:e0:e9:91:e4:55:a7:9b:
28:a0:cb:71:c4:94:8c:2c:67:66:9f:b2:41:b7:9b:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:57:7C:92:11:03:A9:AD:2B:97:59:7C:21:68:71:58:DE:7D:72
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:4b:0c:44:ce:c7:26:16:da:e3:1b:28:64:a7:6a:57:eb:
ca:c7:3f:9b:56:f1:e3:b4:ce:f9:33:35:f4:32:a2:0e:25:fd:
15:ac:c0:7b:2e:12:cb:d3:77:08:4e:93:26:1c:2f:1c:ee:3f:
d3:12:16:9c:d4:0a:83:38:e2:d0:88:7d:c7:60:2d:2f:40:0c:
e8:54:56:bd:d1:30:8c:37:a4:19:5e:c6:f9:aa:10:87:23:0d:
11:ec:38:9a:b6:69:6c:8a:c2:3a:81:3d:ef:d1:dd:e0:e5:18:
92:8c:a0:35:42:bf:5c:0f:dc:b6:52:0e:6f:16:dc:64:5b:dd:
29:50:2b:41:d7:54:00:57:7a:34:66:05:93:a6:68:38:37:ab:
97:7a:3f:cb:6f:65:f1:26:81:5b:ed:ee:49:e4:61:9d:74:1c:
27:72:5a:55:36:db:d4:50:7e:a8:c8:ca:be:94:da:88:93:3a:
a8:c9:af:a8:a2:51:71:9d:be:9c:dc:6b:89:4c:de:5e:7a:b0:
32:49:07:1e:a1:fe:38:c7:97:3a:b6:12:43:a8:eb:e0:9e:78:
79:43:55:b4:bf:31:b1:52:11:89:f0:28:58:77:7d:a8:49:60:
6a:79:10:58:0c:0f:d9:8b:43:de:97:fd:b9:e0:50:ce:b3:57:
28:0e:68:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCu0kldMNameqiofNFriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl
NzE5M2QwHhcNMjUwODIzMTAwMTIzWhcNMjUwODI0MTAwMTIzWjAzMTEwLwYDVQQD
EygwODU0NTc3YzkyMTEwM2E5YWQyYjk3NTk3YzIxNjg3MTU4ZGU3ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3OmrH1SE92paQrTTYc/zFcnNg5L
YyF+mmecLJIeHCPBEwCh0LLgFXLnMYvftWFPJrz3MlYYV/RfeSRN6wxPcdlQ3a0b
b4imeaiLDy/umZk0do1zEWtDc7iDJ+NhsnwCiJ3D7DMhP3bluwY5hQHUG3LDg6Cl
Zt00hKWvQ3pkiSSeE2fDbGPlCutwpwjjjeCdm2XMo1bVI00lmQD40Sg+nhlYn1wj
M69I+sfeOUGpamxYoQnqV5FcL8uyefyHlEUn87rgV+ieHmjof/BaSvHNlO1qN2YG
mBuOpLJsSjJe6Ih7akVQN1iScODpkeRVp5sooMtxxJSMLGdmn7JBt5vtQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhUV3ySEQOprSuXWXwhaHFY3n1yMB8GA1UdIwQY
MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt
ZWJlMjMzMmNhZjFjLzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj
LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWABLDETO
xyYW2uMbKGSnalfrysc/m1bx47TO+TM19DKiDiX9FazAey4Sy9N3CE6TJhwvHO4/
0xIWnNQKgzji0Ih9x2AtL0AM6FRWvdEwjDekGV7G+aoQhyMNEew4mrZpbIrCOoE9
79Hd4OUYkoygNUK/XA/ctlIObxbcZFvdKVArQddUAFd6NGYFk6ZoODerl3o/y29l
8SaBW+3uSeRhnXQcJ3JaVTbb1FB+qMjKvpTaiJM6qMmvqKJRcZ2+nNxriUzeXnqw
MkkHHqH+OMeXOrYSQ6jr4J54eUNVtL8xsVIRifAoWHd9qElgankQWAwP2YtD3pf9
ueBQzrNXKA5oLQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:33 2025 by rpki-client