Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: HzcntX050O0QUXk50PbZCjgrx59vyRfLSci6KI8w2fU=
Subject key identifier: A3:B2:15:43:ED:FC:A2:1A:B3:75:5E:7D:5C:59:C4:C4:BA:DE:F9:17
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 0198D4A81747A0B1D466D94F7F2EA0F02490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 0216
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: 6u4z9BJXz8o1Slif+5DDXPqGHCxsKg90SOo/WurE3Kg=)
2: cPxWboLauOt1xiX1g5_qcFfMwuQ.roa (hash: F49rFgzhVx+26sTntZUKS3aBxcYFzjzC7SoWYW83au0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:17:47:a0:b1:d4:66:d9:4f:7f:2e:a0:f0:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=a3b21543edfca21ab3755e7d5c59c4c4badef917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:b6:54:8e:2e:c1:76:23:46:9e:1d:8b:1e:
4d:0e:30:f2:fd:b4:50:b8:0f:8f:b6:19:76:8f:1c:
19:22:d7:92:28:67:b8:4e:22:e6:b0:2b:2e:22:06:
27:cc:41:45:cf:e7:a3:44:21:d6:e1:de:c4:4a:ad:
07:fc:43:c1:3e:a1:98:78:a7:eb:9f:fc:bd:9d:83:
04:9d:e5:93:c3:a3:53:72:e2:87:38:65:da:c0:61:
b0:79:15:77:10:9c:e0:b6:b6:a8:5d:86:d5:bc:73:
2b:53:76:df:ba:09:55:eb:59:af:26:e4:8d:cf:45:
4d:c7:50:24:9f:e5:22:94:8d:07:1a:5c:de:a1:e2:
6f:a4:56:3d:19:42:fa:85:b9:c5:a9:a1:3a:1c:38:
78:52:ab:e0:f8:58:46:ae:37:ea:1e:4a:92:7b:c5:
a7:3b:52:21:b3:51:25:e1:ad:f3:fe:ea:4b:c0:9a:
97:b5:53:87:6c:8a:2c:ac:ba:88:d3:29:a4:80:61:
ad:cc:bf:00:d9:54:92:52:26:f2:d1:40:a4:50:17:
e8:a7:68:84:3a:1a:2d:20:6c:18:03:ab:87:dd:fa:
91:8a:59:52:62:e8:b4:09:d1:fa:35:34:c5:b7:7a:
04:f7:86:3e:f4:bb:52:94:cf:56:3b:01:55:76:9b:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:15:43:ED:FC:A2:1A:B3:75:5E:7D:5C:59:C4:C4:BA:DE:F9:17
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2e:dd:d7:ae:05:36:44:2a:2d:1d:1b:69:a1:92:5e:20:ad:
cd:eb:5d:7e:52:bf:34:eb:6d:5a:3a:32:cd:ff:ff:5d:2c:43:
d6:e2:dc:e7:7c:b2:ef:97:9a:9d:5b:bf:dc:26:94:ac:7d:dd:
b3:50:52:a5:9c:80:26:5a:bf:ce:f0:1c:44:2c:7d:0f:fa:1e:
72:78:43:13:41:b3:3f:fb:bb:53:09:b6:b9:da:5d:20:39:11:
eb:e3:bf:77:17:15:b8:81:ca:df:ac:fd:00:00:6d:c4:87:db:
bf:d4:d5:70:bf:25:c4:a2:b8:b2:dd:c9:27:c0:bc:37:d5:3b:
4a:bb:9b:91:c8:52:12:b6:71:b0:d2:ac:c0:3c:39:11:9d:92:
67:cb:55:9a:0a:fb:0f:51:8e:00:04:9d:b2:ce:fe:18:89:28:
3a:72:67:2f:58:47:02:e1:25:93:b0:94:48:4b:27:d6:87:7f:
79:63:7b:e6:b8:eb:36:63:9e:f5:40:a8:7d:bf:16:b9:35:7a:
1b:5e:85:1d:09:39:9a:0a:85:15:f5:38:c7:3b:3b:6a:33:ad:
22:37:05:0c:1d:29:32:28:04:ad:51:b6:a0:60:24:c6:4e:1a:
f8:ae:ed:3d:4d:1e:36:78:0b:8e:c5:e4:0c:ad:f3:23:c1:7f:
5d:99:f5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBdHoLHUZtlPfy6g8CSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw
YmZjOTEwHhcNMjUwODIzMDIwMDQyWhcNMjUwODI0MDIwMDQyWjAzMTEwLwYDVQQD
EyhhM2IyMTU0M2VkZmNhMjFhYjM3NTVlN2Q1YzU5YzRjNGJhZGVmOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RS2VI4uwXYjRp4dix5NDjDy/bRQ
uA+Pthl2jxwZIteSKGe4TiLmsCsuIgYnzEFFz+ejRCHW4d7ESq0H/EPBPqGYeKfr
n/y9nYMEneWTw6NTcuKHOGXawGGweRV3EJzgtraoXYbVvHMrU3bfuglV61mvJuSN
z0VNx1Akn+UilI0HGlzeoeJvpFY9GUL6hbnFqaE6HDh4Uqvg+FhGrjfqHkqSe8Wn
O1Ihs1El4a3z/upLwJqXtVOHbIosrLqI0ymkgGGtzL8A2VSSUiby0UCkUBfop2iE
OhotIGwYA6uH3fqRillSYui0CdH6NTTFt3oE94Y+9LtSlM9WOwFVdpvdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOyFUPt/KIas3VefVxZxMS63vkXMB8GA1UdIwQY
MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt
MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi
LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC7d164F
NkQqLR0baaGSXiCtzetdflK/NOttWjoyzf//XSxD1uLc53yy75eanVu/3CaUrH3d
s1BSpZyAJlq/zvAcRCx9D/oecnhDE0GzP/u7Uwm2udpdIDkR6+O/dxcVuIHK36z9
AABtxIfbv9TVcL8lxKK4st3JJ8C8N9U7SrubkchSErZxsNKswDw5EZ2SZ8tVmgr7
D1GOAASdss7+GIkoOnJnL1hHAuElk7CUSEsn1od/eWN75rjrNmOe9UCofb8WuTV6
G16FHQk5mgqFFfU4xzs7ajOtIjcFDB0pMigErVG2oGAkxk4a+K7tPU0eNngLjsXk
DK3zI8F/XZn16g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:21 2025 by rpki-client