Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: IZvrfF6gDmqAQVBTKIX8JwFZncnJ8dWoDUVUhkCoBWg=
Subject key identifier: BE:DB:28:2E:60:0A:6A:31:CB:C6:F5:E3:00:22:4C:64:42:24:B0:24
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 0198D583980C53B72D8C0CC74F8C30B36E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: QgOqit0uRxJj5qadR2csRDJZ8VC7Ft9ceSwKWiK8QPs=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:98:0c:53:b7:2d:8c:0c:c7:4f:8c:30:b3:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=bedb282e600a6a31cbc6f5e300224c644224b024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:be:16:c1:bf:6b:65:37:f1:77:03:52:69:
68:04:aa:d2:60:3f:d6:14:cc:df:6a:55:93:e5:e3:
fb:36:b7:d6:85:fc:bc:f6:14:4f:d6:92:fe:ca:e2:
e7:45:35:43:36:d9:6f:31:4b:95:c1:8e:74:2b:11:
f5:e2:0a:64:e4:0d:00:6c:df:b9:89:ef:79:b1:fe:
7e:92:04:63:1e:e7:87:b8:a3:24:f6:ff:f5:43:ef:
23:13:f6:72:2b:1f:07:80:f0:f1:3c:76:80:40:6e:
5d:37:8b:c2:dc:71:e1:c7:c8:a0:11:8b:2d:47:26:
69:c4:46:5f:9a:f1:a9:2a:19:40:b2:54:5d:cd:99:
f9:ae:34:d1:29:7a:55:a8:96:59:6f:a8:3a:8d:b0:
8f:d8:86:89:5b:e2:7b:eb:14:f7:dc:ae:b1:e6:9b:
60:44:36:85:ab:2c:78:f1:9f:fd:d3:43:34:64:0a:
53:61:8b:8b:eb:71:67:27:db:8d:e8:08:17:ad:b9:
64:0a:b2:5f:87:98:e8:47:06:b7:ba:76:85:fd:9c:
76:08:19:09:d7:26:0b:b4:f5:a8:6d:fd:b7:a4:52:
16:17:ba:83:7c:ba:19:7b:84:fe:75:19:78:e7:ba:
b1:75:83:ee:de:45:88:1f:2a:49:c6:89:b7:b8:e5:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:28:2E:60:0A:6A:31:CB:C6:F5:E3:00:22:4C:64:42:24:B0:24
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e1:55:a2:73:ab:da:49:14:83:98:88:cb:12:ef:82:ed:9d:
62:21:66:ae:0e:ba:79:73:7c:5d:14:45:6f:95:df:5e:ab:99:
92:e8:91:df:89:4d:01:e5:f2:d3:ec:8e:90:72:d1:bf:8b:fe:
80:6c:fa:5a:15:0e:73:28:b1:53:64:c5:17:2d:7a:63:52:1e:
8c:48:63:40:88:c0:56:68:54:a7:cf:58:62:84:32:8f:eb:8b:
b3:6e:2c:cd:79:06:fe:bd:53:0b:af:79:a1:a3:8e:bc:dd:eb:
35:75:53:f4:f0:7b:1d:94:8b:b8:83:6b:c7:59:73:66:e5:04:
ae:81:ab:b2:48:00:d2:7f:9e:30:c8:0c:c5:c5:1c:dd:77:58:
9e:37:6f:a9:0a:d6:6a:36:0d:5a:55:13:8a:6c:7b:d4:7d:c9:
b5:7e:ea:6a:79:e2:a7:90:f4:7a:9f:9b:55:c8:df:12:f5:7c:
0e:8e:bd:34:b5:86:32:70:4e:a9:c7:40:6c:72:47:55:22:35:
99:eb:24:3c:bd:ee:d4:20:6c:8e:a7:ca:47:bb:6d:64:5a:77:
f5:8c:91:df:d4:e1:ef:b7:f4:bd:c5:45:d5:e9:84:14:4c:bb:
9f:02:03:e3:2a:5d:89:42:96:2f:07:cd:26:40:2b:e6:e9:8a:
72:4a:2e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5gMU7ctjAzHT4wws26MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli
OGE0MDgwHhcNMjUwODIzMDYwMDI3WhcNMjUwODI0MDYwMDI3WjAzMTEwLwYDVQQD
EyhiZWRiMjgyZTYwMGE2YTMxY2JjNmY1ZTMwMDIyNGM2NDQyMjRiMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6++FsG/a2U38XcDUmloBKrSYD/W
FMzfalWT5eP7NrfWhfy89hRP1pL+yuLnRTVDNtlvMUuVwY50KxH14gpk5A0AbN+5
ie95sf5+kgRjHueHuKMk9v/1Q+8jE/ZyKx8HgPDxPHaAQG5dN4vC3HHhx8igEYst
RyZpxEZfmvGpKhlAslRdzZn5rjTRKXpVqJZZb6g6jbCP2IaJW+J76xT33K6x5ptg
RDaFqyx48Z/900M0ZApTYYuL63FnJ9uN6AgXrblkCrJfh5joRwa3unaF/Zx2CBkJ
1yYLtPWobf23pFIWF7qDfLoZe4T+dRl457qxdYPu3kWIHypJxom3uOU1ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7bKC5gCmoxy8b14wAiTGRCJLAkMB8GA1UdIwQY
MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt
MjE1ZGJjODljMmI5LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5
LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+FVonOr
2kkUg5iIyxLvgu2dYiFmrg66eXN8XRRFb5XfXquZkuiR34lNAeXy0+yOkHLRv4v+
gGz6WhUOcyixU2TFFy16Y1IejEhjQIjAVmhUp89YYoQyj+uLs24szXkG/r1TC695
oaOOvN3rNXVT9PB7HZSLuINrx1lzZuUEroGrskgA0n+eMMgMxcUc3XdYnjdvqQrW
ajYNWlUTimx71H3JtX7qannip5D0ep+bVcjfEvV8Do69NLWGMnBOqcdAbHJHVSI1
meskPL3u1CBsjqfKR7ttZFp39YyR39Th77f0vcVF1emEFEy7nwID4ypdiUKWLwfN
JkAr5umKckoukw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:53 2025 by rpki-client