Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: c5TBBrVizgno/5HmCkCZL4waSgpVyZchVcQSLQiacbg=
Subject key identifier: 4F:8A:A2:93:59:5F:9E:98:7C:65:30:86:4E:48:25:57:2F:F4:C0:DC
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 0198D4A8206F0858CD52899F391764B7B777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: zmr6R8J+/WfSH12A5g0FZspdTjdMKEO1dEJtuQgxwow=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:6f:08:58:cd:52:89:9f:39:17:64:b7:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=4f8aa293595f9e987c6530864e4825572ff4c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:27:d4:ef:66:2a:fb:3a:b2:99:90:1d:ca:
c8:0a:2c:1c:80:44:d2:9f:4c:20:56:e9:78:76:f3:
3b:b0:53:01:85:1b:dc:42:bf:88:02:85:ef:72:bb:
a7:37:96:5d:c8:bb:cc:c0:8c:fa:44:c2:a2:f3:b8:
ec:ce:25:6a:3d:e6:d7:2f:8c:63:8b:02:93:3a:64:
a7:93:be:4e:7e:16:25:81:40:0b:45:e2:5e:2c:a0:
ae:ae:97:87:e4:8d:22:24:c7:04:a2:19:f7:78:2a:
bd:2b:92:f3:3e:ed:d7:ec:ff:06:f2:c1:42:14:9c:
bc:45:54:b4:fd:f6:ac:ba:dc:c7:df:e5:60:67:39:
ac:49:3f:50:f4:9e:58:5d:fd:59:64:35:0d:2f:42:
5c:85:f6:31:97:86:01:ab:54:bb:7e:1c:85:eb:b3:
a6:07:af:88:ee:d0:ab:11:7b:b8:88:8c:30:f5:42:
de:cb:26:ac:52:c8:c2:8e:65:88:7e:81:96:a3:73:
50:25:ca:d8:47:7f:d8:10:01:d3:c6:3a:dc:9e:06:
ec:33:53:21:38:a7:cc:73:5e:9f:49:3a:27:88:b3:
04:72:28:9d:ef:77:4f:38:a6:bc:0c:f9:bf:93:5a:
7e:0e:ba:10:35:90:fc:cc:ee:20:4d:a2:f7:c6:be:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:A2:93:59:5F:9E:98:7C:65:30:86:4E:48:25:57:2F:F4:C0:DC
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:71:19:cf:1d:e1:8e:b0:f6:5f:38:a2:28:9c:1c:be:90:
24:ac:86:a2:ef:c4:c1:db:3d:6d:d2:d9:e8:19:a7:fe:20:97:
36:c1:6d:de:30:5a:2a:8b:7c:e3:af:65:21:0e:17:03:b1:ed:
f2:02:e7:62:f0:fd:52:58:f6:41:f5:75:a9:12:16:bb:71:39:
7e:e3:b5:99:d3:9f:4d:b4:1e:5a:f1:ff:bc:66:37:9b:cc:3d:
a7:6f:9e:17:fa:ab:6a:71:90:4f:f4:20:f2:30:7a:13:d6:b9:
a4:61:7f:69:20:d3:c9:d0:50:4d:17:7c:26:82:3a:64:71:ee:
9b:4c:e9:8a:05:70:83:a8:79:26:e4:98:a8:68:54:88:5f:e8:
6e:b7:99:d3:4e:ca:c1:3d:03:32:21:3e:7e:76:8f:73:5b:42:
b5:68:29:e6:60:8a:f7:c8:82:a8:d4:8d:6b:65:c9:93:c4:b8:
2e:ea:ae:50:b3:8c:ac:72:f3:58:28:6c:70:9a:b5:37:1e:61:
99:64:8f:59:af:56:70:e6:00:d4:c1:f0:5a:31:3c:84:28:f8:
f1:df:69:ff:c2:77:3b:7a:c6:ba:6f:25:8b:e4:f8:c2:69:1c:
0e:ab:37:79:2f:83:49:db:a8:dd:20:75:8a:15:75:7f:db:48:
f1:6b:17:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCBvCFjNUomfORdkt7d3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw
ODRmZGYwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZjhhYTI5MzU5NWY5ZTk4N2M2NTMwODY0ZTQ4MjU1NzJmZjRjMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qsn1O9mKvs6spmQHcrICiwcgETS
n0wgVul4dvM7sFMBhRvcQr+IAoXvcrunN5ZdyLvMwIz6RMKi87jsziVqPebXL4xj
iwKTOmSnk75OfhYlgUALReJeLKCurpeH5I0iJMcEohn3eCq9K5LzPu3X7P8G8sFC
FJy8RVS0/fasutzH3+VgZzmsST9Q9J5YXf1ZZDUNL0JchfYxl4YBq1S7fhyF67Om
B6+I7tCrEXu4iIww9ULeyyasUsjCjmWIfoGWo3NQJcrYR3/YEAHTxjrcngbsM1Mh
OKfMc16fSToniLMEciid73dPOKa8DPm/k1p+DroQNZD8zO4gTaL3xr4B/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+KopNZX56YfGUwhk5IJVcv9MDcMB8GA1UdIwQY
MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt
Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl
LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbxxGc8d
4Y6w9l84oiicHL6QJKyGou/Ewds9bdLZ6Bmn/iCXNsFt3jBaKot8469lIQ4XA7Ht
8gLnYvD9Ulj2QfV1qRIWu3E5fuO1mdOfTbQeWvH/vGY3m8w9p2+eF/qranGQT/Qg
8jB6E9a5pGF/aSDTydBQTRd8JoI6ZHHum0zpigVwg6h5JuSYqGhUiF/obreZ007K
wT0DMiE+fnaPc1tCtWgp5mCK98iCqNSNa2XJk8S4LuquULOMrHLzWChscJq1Nx5h
mWSPWa9WcOYA1MHwWjE8hCj48d9p/8J3O3rGum8li+T4wmkcDqs3eS+DSduo3SB1
ihV1f9tI8WsXmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:09 2025 by rpki-client