Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: TFfomIithHGnxs2UP7yBnd9fq+rN1pZkjr+LvjSQLLg=
Subject key identifier: DD:CF:77:94:31:C8:09:7C:B7:50:FB:44:A0:37:E1:90:EC:1B:04:46
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 0198D4DFDB66D25FC39D769536F5932CED37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: lUX0VlMP/QPjbSBAtDenm5KKZ0cFXxQVLTXZyP0v+A0=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:db:66:d2:5f:c3:9d:76:95:36:f5:93:2c:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=ddcf779431c8097cb750fb44a037e190ec1b0446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:b7:0c:e5:86:bf:0f:50:66:95:09:3a:b9:
35:45:6b:05:20:53:b8:a3:86:b7:80:6a:d9:cc:ca:
4c:3e:50:b9:2a:3b:1c:59:55:3d:e5:39:a0:a8:af:
e0:d6:23:76:e6:1b:c1:fe:ef:ea:ad:47:14:6e:1e:
b7:56:55:d8:ca:e1:05:8a:d5:70:47:a4:80:62:cd:
60:0a:17:6f:3f:8a:87:53:49:98:db:15:a3:eb:7f:
32:2f:d1:f0:c3:87:c7:a9:40:b5:63:e2:c0:a4:c3:
f9:52:8f:c0:dd:a6:f2:dd:9e:96:85:d7:21:04:03:
c6:42:07:25:80:c4:f4:06:94:a0:f6:60:f1:f2:98:
f7:88:65:90:fc:4a:d6:ae:e2:ba:02:6b:be:51:80:
2a:e0:f3:24:a3:78:eb:29:44:61:a6:12:71:9c:04:
39:dd:02:ab:0a:1f:42:58:99:74:8f:23:28:ad:64:
25:c6:bf:98:f4:62:68:8b:69:a7:8e:1c:cc:72:fd:
43:31:5a:d9:15:20:30:44:a7:62:c3:32:04:58:51:
31:d2:cb:88:e4:4c:00:7b:65:e5:18:8d:b3:ef:55:
f5:9d:ef:e0:cb:0a:ee:c2:a9:a6:98:c0:f1:03:56:
46:80:32:65:cc:43:61:60:bf:cb:af:ea:51:4c:a9:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:77:94:31:C8:09:7C:B7:50:FB:44:A0:37:E1:90:EC:1B:04:46
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dc:e8:b6:f1:81:55:ff:e4:22:b7:a2:4b:26:a9:39:32:32:
37:2b:93:2a:c1:22:ba:78:7a:c7:54:dc:28:2f:1c:22:70:e5:
5d:d0:77:05:dd:d0:ea:0d:79:b8:23:f5:83:a3:08:10:d8:f5:
f0:9a:c5:43:0f:67:c2:de:5c:22:db:e6:bf:9c:9f:66:bd:84:
26:8a:5e:23:8a:75:be:81:00:d6:c1:00:34:96:5e:c6:5f:6d:
19:85:44:1b:a7:e1:77:a7:69:7b:e7:4c:b7:81:c1:95:b8:b8:
41:10:02:4d:af:78:61:f0:de:c4:cf:56:62:76:f4:7b:36:f8:
b4:71:45:9e:7a:55:9b:ff:2a:5b:ea:d0:44:2e:ed:5d:a5:f4:
2f:00:2f:86:0b:38:95:ea:e7:1e:75:61:bf:30:0c:88:5b:c5:
d9:dc:c5:6c:8f:37:4d:e3:6e:a8:49:b9:c6:77:00:ff:72:9e:
a3:6a:23:ad:9b:8b:cc:3f:e3:d2:d6:1f:cd:03:c7:48:b5:22:
d0:5a:99:db:88:4b:e8:1a:65:19:d1:e8:c8:d2:e7:1b:3a:6f:
85:74:08:11:86:9f:30:fc:39:a2:5a:e2:2d:8b:5e:64:4e:f2:
39:49:8f:5f:e5:79:6b:cb:56:91:28:ca:7b:66:43:bf:6d:fa:
6e:9d:a6:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39tm0l/DnXaVNvWTLO03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYWI0NTZhMDUxZDRhOTM3ODhiZWY0ZmFjMGQwN2JkYzBj
OWYwY2YwHhcNMjUwODIzMDMwMTM3WhcNMjUwODI0MDMwMTM3WjAzMTEwLwYDVQQD
EyhkZGNmNzc5NDMxYzgwOTdjYjc1MGZiNDRhMDM3ZTE5MGVjMWIwNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6u3DOWGvw9QZpUJOrk1RWsFIFO4
o4a3gGrZzMpMPlC5KjscWVU95TmgqK/g1iN25hvB/u/qrUcUbh63VlXYyuEFitVw
R6SAYs1gChdvP4qHU0mY2xWj638yL9Hww4fHqUC1Y+LApMP5Uo/A3aby3Z6Whdch
BAPGQgclgMT0BpSg9mDx8pj3iGWQ/ErWruK6Amu+UYAq4PMko3jrKURhphJxnAQ5
3QKrCh9CWJl0jyMorWQlxr+Y9GJoi2mnjhzMcv1DMVrZFSAwRKdiwzIEWFEx0suI
5EwAe2XlGI2z71X1ne/gywruwqmmmMDxA1ZGgDJlzENhYL/Lr+pRTKlcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3Pd5QxyAl8t1D7RKA34ZDsGwRGMB8GA1UdIwQY
MBaAFF2rRWoFHUqTeIvvT6wNB73AyfDPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDct
OGFkNzRjYzZhNmI5LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDctOGFkNzRjYzZhNmI5
LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftzotvGB
Vf/kIreiSyapOTIyNyuTKsEiunh6x1TcKC8cInDlXdB3Bd3Q6g15uCP1g6MIENj1
8JrFQw9nwt5cItvmv5yfZr2EJopeI4p1voEA1sEANJZexl9tGYVEG6fhd6dpe+dM
t4HBlbi4QRACTa94YfDexM9WYnb0ezb4tHFFnnpVm/8qW+rQRC7tXaX0LwAvhgs4
lernHnVhvzAMiFvF2dzFbI83TeNuqEm5xncA/3Keo2ojrZuLzD/j0tYfzQPHSLUi
0FqZ24hL6BplGdHoyNLnGzpvhXQIEYafMPw5olriLYteZE7yOUmPX+V5a8tWkSjK
e2ZDv236bp2mhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:49 2025 by rpki-client