Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: mnpIqUNabESIvs1HE0teTJINT2FOmbpMr8WnHMmEcrM=
Subject key identifier: 41:13:26:F2:44:04:3C:B1:32:F0:66:D1:FF:59:98:DE:75:10:31:91
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 0198D660F9AC8817BBB2B57834B2788729F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 1045
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: A2IAa6AvQl+mk4YAFBtjpWPcYT/QqEa1ko6+VDdlJrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f9:ac:88:17:bb:b2:b5:78:34:b2:78:87:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=411326f244043cb132f066d1ff5998de75103191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:35:44:62:f4:39:17:6e:50:65:64:36:94:
ef:cf:03:f1:0b:b2:35:47:a2:0d:10:99:66:e5:9b:
87:c5:1b:f8:b9:05:0a:dd:ee:b5:e6:a5:68:f6:da:
77:02:ba:e7:99:07:07:c8:a1:22:3c:3f:1c:6e:71:
f7:7b:fd:1e:bb:5f:12:08:16:29:ca:d0:37:31:25:
8c:09:0d:35:50:a2:8d:b0:bf:4a:46:d2:3b:76:57:
aa:17:72:da:81:3e:d5:17:19:66:4e:d6:2c:89:3c:
25:22:6c:ec:38:e1:b3:a9:ef:60:e4:87:3b:b9:13:
b0:4e:51:63:e7:da:5e:ad:9e:5f:06:b7:72:e3:71:
7b:a6:a5:c1:73:f8:c2:e0:f5:f8:25:36:29:cb:83:
11:9f:b5:ed:1e:ff:01:85:bc:25:15:26:70:f0:bf:
89:3b:c4:32:c8:53:8f:f6:3d:f2:c3:61:0e:7e:dc:
77:6e:6e:a0:7a:3d:6f:30:11:98:b9:95:9b:84:b4:
4a:b0:d0:f0:b3:46:73:64:5b:ca:44:73:5e:c4:0c:
ef:24:11:24:80:38:9e:9a:26:65:61:e2:ef:87:1c:
ec:84:43:4d:95:88:21:e1:d0:1a:cd:ab:e6:b5:2d:
12:d2:fa:53:5e:70:8d:5f:db:db:9c:1f:6a:d8:45:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:26:F2:44:04:3C:B1:32:F0:66:D1:FF:59:98:DE:75:10:31:91
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1e:f5:a7:20:df:0e:51:78:9b:90:3e:3d:1e:36:01:a4:f7:
49:38:af:83:3d:2e:36:5f:28:42:7a:18:f9:02:66:fd:29:fb:
16:79:af:cc:21:e4:e2:fb:d8:36:5d:b5:81:ef:0d:c3:0c:65:
00:16:71:58:db:e7:7f:15:25:c8:f7:f4:1c:33:20:eb:57:17:
dd:96:4b:9e:ff:7c:f0:6d:9e:7e:e3:d0:0b:c2:ae:d1:99:07:
78:24:9b:5c:b1:d6:72:34:f3:80:33:7c:52:e4:00:5c:6a:b9:
8a:f7:dc:b0:6c:d5:98:55:1e:6e:66:80:fd:59:00:14:7f:ce:
6a:87:cb:e5:b2:83:95:b1:24:7f:10:54:b7:bd:3f:03:5d:86:
cf:06:2e:dc:12:8a:6b:54:99:10:23:bd:fb:eb:00:9b:78:f2:
35:a7:df:64:c8:5c:03:1f:eb:2c:24:01:65:cb:3f:19:f1:e2:
a4:7e:5a:1c:67:a3:18:c4:00:de:11:11:5e:aa:f2:51:c6:d3:
8d:6d:37:a8:28:af:dc:5f:24:f7:c4:82:62:3a:ba:3f:74:19:
90:4a:9e:ca:dc:5a:2b:78:9c:31:ee:34:4c:86:a3:5f:68:cb:
e5:51:2b:39:fe:89:3d:7f:2f:95:e6:56:39:aa:fe:4f:3e:67:
ed:20:fd:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPmsiBe7srV4NLJ4hyn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz
NGZkZDkwHhcNMjUwODIzMTAwMjE2WhcNMjUwODI0MTAwMjE2WjAzMTEwLwYDVQQD
Eyg0MTEzMjZmMjQ0MDQzY2IxMzJmMDY2ZDFmZjU5OThkZTc1MTAzMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlww1RGL0ORduUGVkNpTvzwPxC7I1
R6INEJlm5ZuHxRv4uQUK3e615qVo9tp3ArrnmQcHyKEiPD8cbnH3e/0eu18SCBYp
ytA3MSWMCQ01UKKNsL9KRtI7dleqF3LagT7VFxlmTtYsiTwlImzsOOGzqe9g5Ic7
uROwTlFj59perZ5fBrdy43F7pqXBc/jC4PX4JTYpy4MRn7XtHv8BhbwlFSZw8L+J
O8QyyFOP9j3yw2EOftx3bm6gej1vMBGYuZWbhLRKsNDws0ZzZFvKRHNexAzvJBEk
gDiemiZlYeLvhxzshENNlYgh4dAazavmtS0S0vpTXnCNX9vbnB9q2EXMOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEETJvJEBDyxMvBm0f9ZmN51EDGRMB8GA1UdIwQY
MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt
OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl
LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx71pyDf
DlF4m5A+PR42AaT3STivgz0uNl8oQnoY+QJm/Sn7FnmvzCHk4vvYNl21ge8Nwwxl
ABZxWNvnfxUlyPf0HDMg61cX3ZZLnv988G2efuPQC8Ku0ZkHeCSbXLHWcjTzgDN8
UuQAXGq5ivfcsGzVmFUebmaA/VkAFH/OaofL5bKDlbEkfxBUt70/A12GzwYu3BKK
a1SZECO9++sAm3jyNaffZMhcAx/rLCQBZcs/GfHipH5aHGejGMQA3hERXqryUcbT
jW03qCiv3F8k98SCYjq6P3QZkEqeytxaK3icMe40TIajX2jL5VErOf6JPX8vleZW
Oar+Tz5n7SD9tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:25 2025 by rpki-client