Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: hLZIfsK/K5nZ3XK4V3QR6xTT3D/cF5pVicbK+EjV3Hs=
Subject key identifier: 73:52:4B:1A:C9:CA:A9:76:A1:0B:A2:24:72:6C:FE:21:F4:F6:52:84
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0198D515C3AC849B3C10D14851B4A2B029DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: qqKpP98rXHi7XhzJC4oKHtA/5gIbctABhXoGIeVlL3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c3:ac:84:9b:3c:10:d1:48:51:b4:a2:b0:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=73524b1ac9caa976a10ba224726cfe21f4f65284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:43:8b:c7:bf:ea:0c:a9:8b:bd:ac:00:e5:
bd:29:c8:f4:03:68:21:c8:7e:53:4d:43:fc:07:b4:
56:2f:2c:6c:d5:a4:9f:09:b4:d1:b0:2c:6c:58:06:
6d:ab:33:d6:71:04:d4:2e:c4:02:4a:74:2a:5e:3f:
46:81:35:0f:89:93:f8:13:97:17:6a:0f:68:ab:ed:
e7:93:ab:4a:57:56:da:dc:e9:6f:a8:25:8b:7f:42:
80:4f:13:b9:67:dd:ce:4a:b3:af:b3:cc:37:5f:2b:
03:09:70:f6:60:6e:4b:95:cf:db:f3:d1:40:7a:c3:
11:ce:a3:37:fd:64:7e:10:3b:0a:aa:72:21:19:cc:
d7:9d:d5:7d:4a:d3:7a:c2:20:db:46:af:64:8e:84:
8f:f3:3b:05:9e:8a:c7:42:da:45:73:5d:7a:07:9c:
f5:b4:1e:ba:bc:8e:52:c5:65:f8:6a:d9:21:80:0e:
0a:29:40:61:e4:f7:3d:ba:99:98:4f:d6:65:4c:20:
11:c1:9d:8e:30:05:62:c0:5a:bd:69:0d:e3:97:6c:
68:84:04:e4:95:4b:7a:aa:d4:97:25:6e:27:a4:9c:
db:6f:69:35:a1:8f:25:91:3b:b1:f3:b0:e4:64:93:
61:a2:ed:b3:d0:84:2b:6e:45:68:cb:ff:1c:c7:a4:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:4B:1A:C9:CA:A9:76:A1:0B:A2:24:72:6C:FE:21:F4:F6:52:84
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:d8:d0:5a:51:89:4a:5e:fa:64:10:16:df:44:56:d0:59:
65:40:e8:61:16:3b:02:d1:ab:07:a3:ed:0a:9e:cb:ac:0d:61:
e7:f2:29:95:e9:84:c2:da:5d:51:61:01:6d:cd:cb:38:11:23:
c3:11:47:b0:85:a3:8c:9b:a0:d2:56:73:c8:4b:d2:53:0b:b9:
85:b1:ed:c1:23:f6:f1:06:8f:7f:c6:cc:7f:65:32:ee:9e:c2:
89:3e:fb:9c:65:d6:bd:0c:43:0a:26:ec:dd:30:db:90:48:09:
a0:d8:09:6b:cd:e3:f1:4e:b8:42:2a:f7:04:7a:2e:ea:ab:65:
30:2f:56:24:a2:91:d1:1b:a3:21:1e:96:6e:3d:aa:92:e1:e8:
73:91:b3:59:ad:1b:2d:6f:2b:db:10:45:00:27:72:2a:7e:15:
81:f4:16:4b:ed:6e:ca:27:76:e2:8c:70:26:98:87:84:60:13:
e2:62:d2:5e:1d:ec:d2:9b:f9:4e:be:ce:1c:c9:59:db:c7:02:
75:e6:bb:3b:29:30:e4:c4:d3:63:00:2f:c4:72:b5:7a:b5:e1:
01:2d:71:a8:21:aa:0f:04:62:eb:45:89:98:b2:32:c1:44:74:
75:d9:c6:23:af:f0:b1:22:59:76:e9:c1:f7:61:74:6a:8d:c3:
5e:26:2b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcOshJs8ENFIUbSisCnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk
NzAxNDIwHhcNMjUwODIzMDQwMDMwWhcNMjUwODI0MDQwMDMwWjAzMTEwLwYDVQQD
Eyg3MzUyNGIxYWM5Y2FhOTc2YTEwYmEyMjQ3MjZjZmUyMWY0ZjY1Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0VDi8e/6gypi72sAOW9Kcj0A2gh
yH5TTUP8B7RWLyxs1aSfCbTRsCxsWAZtqzPWcQTULsQCSnQqXj9GgTUPiZP4E5cX
ag9oq+3nk6tKV1ba3OlvqCWLf0KATxO5Z93OSrOvs8w3XysDCXD2YG5Llc/b89FA
esMRzqM3/WR+EDsKqnIhGczXndV9StN6wiDbRq9kjoSP8zsFnorHQtpFc116B5z1
tB66vI5SxWX4atkhgA4KKUBh5Pc9upmYT9ZlTCARwZ2OMAViwFq9aQ3jl2xohATk
lUt6qtSXJW4npJzbb2k1oY8lkTux87DkZJNhou2z0IQrbkVoy/8cx6SflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNSSxrJyql2oQuiJHJs/iH09lKEMB8GA1UdIwQY
MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt
OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy
LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkrY0FpR
iUpe+mQQFt9EVtBZZUDoYRY7AtGrB6PtCp7LrA1h5/IplemEwtpdUWEBbc3LOBEj
wxFHsIWjjJug0lZzyEvSUwu5hbHtwSP28QaPf8bMf2Uy7p7CiT77nGXWvQxDCibs
3TDbkEgJoNgJa83j8U64Qir3BHou6qtlMC9WJKKR0RujIR6Wbj2qkuHoc5GzWa0b
LW8r2xBFACdyKn4VgfQWS+1uyid24oxwJpiHhGAT4mLSXh3s0pv5Tr7OHMlZ28cC
dea7Oykw5MTTYwAvxHK1erXhAS1xqCGqDwRi60WJmLIywUR0ddnGI6/wsSJZdunB
92F0ao3DXiYroQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:52 2025 by rpki-client