Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: lPQTE7Q/o9FS2yPX3VGGfsI4j6n9Bl3pYCv2QnhD8OA=
Subject key identifier: 04:1C:29:55:BF:CC:CB:FB:5C:A6:91:72:16:A4:E7:86:18:F6:0A:3C
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 0198D54E6FFF049E1A0A4D67B68E8A71A711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 10AD
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: zw8Z9VgbL7TxCtS0qih85apEcVn69AmoJYtWB3a+9Ss=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6f:ff:04:9e:1a:0a:4d:67:b6:8e:8a:71:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=041c2955bfcccbfb5ca6917216a4e78618f60a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:2c:7b:11:59:01:4f:f0:44:23:5a:a1:41:
ee:41:d7:da:02:74:5d:44:11:4e:bc:18:5f:15:2b:
a7:4b:fb:26:b8:33:31:b5:49:19:ff:0b:1d:ff:73:
3e:d7:4d:9b:ab:2a:1a:06:b7:3c:62:1d:79:19:74:
1a:59:80:16:1c:6d:77:2f:6a:d4:6d:4c:25:ec:b4:
d6:0a:73:31:a4:5c:c3:72:00:1f:9e:f3:08:1c:16:
8c:54:70:eb:ab:dc:df:f6:97:21:64:86:98:14:59:
ed:cb:27:c4:c8:3c:f2:38:75:16:07:8e:ec:29:cd:
37:23:45:8d:f3:1d:69:5a:92:1d:af:fd:ba:fc:84:
45:1f:4b:c6:4b:d2:3a:a7:a0:ea:2b:aa:d5:b2:51:
17:cd:df:31:e2:cd:b8:f1:b7:19:51:05:7f:52:59:
5e:b7:25:a0:4b:b3:91:0f:50:be:f6:1e:14:5a:af:
16:89:4e:d0:ca:ad:7e:99:73:07:75:7c:9a:97:79:
e9:a0:b0:d9:a2:9d:f1:2e:64:2c:ad:3a:73:eb:f8:
86:d1:fc:d9:12:63:cc:8a:de:94:fa:ed:30:b0:7c:
7a:03:27:b0:75:e1:0b:b0:87:9b:18:20:17:70:12:
5f:35:87:5b:40:2a:da:4c:15:10:df:a4:20:76:b0:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:29:55:BF:CC:CB:FB:5C:A6:91:72:16:A4:E7:86:18:F6:0A:3C
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f0:48:f0:df:21:e2:87:33:95:91:b2:8c:c1:02:2d:30:d3:
04:b1:c7:7c:cd:2f:5f:d3:73:5c:21:e2:3c:ef:39:70:5e:20:
ab:46:66:7f:09:8c:40:05:0e:8f:10:50:28:3f:d1:ba:3b:d5:
8f:5a:4e:45:8d:7f:de:53:b1:f2:33:28:a7:09:e3:d8:fa:8a:
00:45:53:a1:e1:da:a8:8b:13:95:d5:36:eb:79:0d:08:99:12:
cc:42:7b:8e:90:2a:12:f9:86:77:59:12:79:88:43:ba:0c:e4:
16:2d:41:04:88:9b:7c:db:97:ec:64:54:a0:06:17:c1:eb:0d:
21:4e:06:f9:73:59:be:4b:60:4a:eb:05:72:2e:66:6b:2d:33:
0b:1d:a5:14:a6:13:f4:01:e5:1c:f9:d3:75:ab:43:78:dc:ce:
95:d8:66:31:65:82:a9:ee:38:58:25:05:a8:0e:39:1a:84:7b:
73:dc:f5:2e:3a:dd:7d:b0:e6:0a:74:9e:5b:5c:80:6c:93:97:
a4:e3:00:bf:1b:7a:d8:b3:42:21:9f:7d:b1:b6:bc:7d:f7:99:
bf:d1:1c:d7:ae:e7:e2:e3:62:ef:b8:8a:b7:0f:fa:fa:95:8c:
4b:a6:d7:21:18:3b:8f:8a:d6:cc:f5:38:30:fd:e5:40:42:1c:
8a:27:dc:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTm//BJ4aCk1nto6KcacRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1
YTU4MWEwHhcNMjUwODIzMDUwMjI0WhcNMjUwODI0MDUwMjI0WjAzMTEwLwYDVQQD
EygwNDFjMjk1NWJmY2NjYmZiNWNhNjkxNzIxNmE0ZTc4NjE4ZjYwYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1UsexFZAU/wRCNaoUHuQdfaAnRd
RBFOvBhfFSunS/smuDMxtUkZ/wsd/3M+102bqyoaBrc8Yh15GXQaWYAWHG13L2rU
bUwl7LTWCnMxpFzDcgAfnvMIHBaMVHDrq9zf9pchZIaYFFntyyfEyDzyOHUWB47s
Kc03I0WN8x1pWpIdr/26/IRFH0vGS9I6p6DqK6rVslEXzd8x4s248bcZUQV/Ulle
tyWgS7ORD1C+9h4UWq8WiU7Qyq1+mXMHdXyal3npoLDZop3xLmQsrTpz6/iG0fzZ
EmPMit6U+u0wsHx6AyewdeELsIebGCAXcBJfNYdbQCraTBUQ36QgdrAWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQcKVW/zMv7XKaRchak54YY9go8MB8GA1UdIwQY
MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt
NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz
LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfBI8N8h
4oczlZGyjMECLTDTBLHHfM0vX9NzXCHiPO85cF4gq0ZmfwmMQAUOjxBQKD/RujvV
j1pORY1/3lOx8jMopwnj2PqKAEVToeHaqIsTldU263kNCJkSzEJ7jpAqEvmGd1kS
eYhDugzkFi1BBIibfNuX7GRUoAYXwesNIU4G+XNZvktgSusFci5may0zCx2lFKYT
9AHlHPnTdatDeNzOldhmMWWCqe44WCUFqA45GoR7c9z1LjrdfbDmCnSeW1yAbJOX
pOMAvxt62LNCIZ99sba8ffeZv9Ec167n4uNi77iKtw/6+pWMS6bXIRg7j4rWzPU4
MP3lQEIciifctA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:01 2025 by rpki-client