
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: fpcZEnQbU9stZq8q+437r/s0g9q9Uv8VgwvgIlHcN+U=
Subject key identifier: 5F:43:5F:17:87:9E:47:8B:1D:77:F7:4F:4A:63:A7:3D:8D:09:40:55
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0198D69821FB98C35F78ABF05571834AB829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 11EF
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 5HatUS2X7tHvTxgr7amR/X55imZXNU0C5wcpFBE2kfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:21:fb:98:c3:5f:78:ab:f0:55:71:83:4a:b8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=5f435f17879e478b1d77f74f4a63a73d8d094055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:88:e5:79:77:04:c0:b4:66:28:3c:49:f2:
a9:d0:fc:d8:5a:73:24:22:b1:e5:14:55:88:02:3f:
d5:c2:9a:b3:2a:d5:35:12:8e:04:41:30:b3:15:ff:
e0:90:ee:b7:fa:22:ac:d4:1c:67:8e:6d:fe:81:b6:
7d:63:98:ce:91:9e:c4:4b:22:06:90:6c:79:c2:10:
96:9a:fd:47:3f:95:72:7b:b7:58:72:0f:df:06:6b:
8c:e7:62:88:71:2c:32:6b:a7:90:bd:38:74:56:1f:
d4:0e:10:f5:c6:31:3b:9c:cd:07:8f:b6:0c:cb:69:
57:49:14:7d:2f:38:20:37:84:89:b8:0b:ba:c0:da:
32:f0:33:b2:02:54:07:92:15:8b:ed:06:9c:59:94:
74:0c:48:70:e6:24:95:4f:0d:e3:ca:9a:59:2e:fb:
2b:98:b7:00:16:74:a2:51:3e:80:4b:fc:ab:19:0a:
bf:32:e3:cb:e3:3e:a1:f6:ea:c6:d9:3e:22:5e:59:
e6:6d:75:3a:d9:fe:9f:b1:aa:bd:6b:a6:06:5d:9b:
bb:2b:5b:7a:9e:ff:5a:72:26:05:fa:fb:90:34:c3:
72:1c:49:3c:c8:1c:03:f3:ac:50:2e:1e:8a:ac:6e:
58:33:ca:84:d4:af:5e:fe:b3:75:be:fa:c1:6b:b5:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:5F:17:87:9E:47:8B:1D:77:F7:4F:4A:63:A7:3D:8D:09:40:55
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dc:b8:5a:04:92:54:95:e2:58:c8:32:59:d4:d1:d3:d1:dc:
30:d2:6d:0f:6d:06:e0:5f:14:0c:0d:88:31:fe:11:a2:1c:30:
07:c7:c5:1e:26:f9:8f:6b:62:6f:5a:25:3d:a1:b3:8b:18:c4:
06:39:b1:cb:1b:d8:cc:bf:14:3f:b3:4d:4c:f9:df:2a:33:bf:
be:0f:de:3c:ef:75:f2:ef:ee:27:d2:d0:e1:55:60:ad:f2:39:
68:28:99:cc:28:78:6a:ff:51:c6:78:45:8c:9a:76:f9:f4:15:
ed:5b:ba:b5:e4:2d:ed:3d:26:08:41:64:dc:bf:e6:7a:99:7e:
28:9c:26:66:36:05:75:10:e5:5f:50:38:57:7c:37:45:ba:41:
a8:44:ca:0e:fb:95:54:75:86:a6:8e:50:74:a3:bd:1a:01:42:
a5:e1:7f:f3:12:68:0a:d2:29:ab:60:6f:30:6f:45:ce:f8:da:
9e:ec:15:06:fb:75:37:1e:a0:fc:d7:ea:c2:ea:72:d5:9e:61:
5e:5f:77:a7:61:28:f1:0d:b8:dc:a4:68:da:08:e0:7c:b9:6a:
d6:a9:dc:2e:dd:86:37:98:6f:7e:c7:5e:95:d3:65:4e:65:18:
ae:77:84:b9:05:dc:db:30:6f:27:f8:71:76:8a:68:90:ad:98:
7c:ab:ab:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCH7mMNfeKvwVXGDSrgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjUwODIzMTEwMjMxWhcNMjUwODI0MTEwMjMxWjAzMTEwLwYDVQQD
Eyg1ZjQzNWYxNzg3OWU0NzhiMWQ3N2Y3NGY0YTYzYTczZDhkMDk0MDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHOI5Xl3BMC0Zig8SfKp0PzYWnMk
IrHlFFWIAj/VwpqzKtU1Eo4EQTCzFf/gkO63+iKs1Bxnjm3+gbZ9Y5jOkZ7ESyIG
kGx5whCWmv1HP5Vye7dYcg/fBmuM52KIcSwya6eQvTh0Vh/UDhD1xjE7nM0Hj7YM
y2lXSRR9LzggN4SJuAu6wNoy8DOyAlQHkhWL7QacWZR0DEhw5iSVTw3jyppZLvsr
mLcAFnSiUT6AS/yrGQq/MuPL4z6h9urG2T4iXlnmbXU62f6fsaq9a6YGXZu7K1t6
nv9aciYF+vuQNMNyHEk8yBwD86xQLh6KrG5YM8qE1K9e/rN1vvrBa7V6lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9DXxeHnkeLHXf3T0pjpz2NCUBVMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9y4WgSS
VJXiWMgyWdTR09HcMNJtD20G4F8UDA2IMf4RohwwB8fFHib5j2tib1olPaGzixjE
BjmxyxvYzL8UP7NNTPnfKjO/vg/ePO918u/uJ9LQ4VVgrfI5aCiZzCh4av9RxnhF
jJp2+fQV7Vu6teQt7T0mCEFk3L/mepl+KJwmZjYFdRDlX1A4V3w3RbpBqETKDvuV
VHWGpo5QdKO9GgFCpeF/8xJoCtIpq2BvMG9FzvjanuwVBvt1Nx6g/Nfqwupy1Z5h
Xl93p2Eo8Q243KRo2gjgfLlq1qncLt2GN5hvfsdeldNlTmUYrneEuQXc2zBvJ/hx
dopokK2YfKurJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:23 2025 by rpki-client