Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: PgEouaI7efEo37kEkCwfpDtiecpxXxSRts4xVUP4krM=
Subject key identifier: 8F:C3:65:19:33:33:FE:3D:70:E1:8D:C3:68:EA:3D:9E:01:9E:0C:E4
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 01989CA7034F7182123D67C688689F915DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0BA0
Signing time: Tue 12 Aug 2025 05:00:47 +0000
Manifest this update: Tue 12 Aug 2025 05:00:47 +0000
Manifest next update: Wed 13 Aug 2025 05:00:47 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: hLZf10X5GAiAdovQFlx9I/JWKQQ/kt0dJrn/7I3ybvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a7:03:4f:71:82:12:3d:67:c6:88:68:9f:91:5d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Aug 12 05:00:47 2025 GMT
Not After : Aug 13 05:00:47 2025 GMT
Subject: CN=8fc365193333fe3d70e18dc368ea3d9e019e0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:a2:c3:80:bd:5d:b6:2c:a1:22:53:cd:ef:
10:6c:32:4d:fd:db:f2:e8:ee:20:95:b6:0f:de:63:
09:25:1e:2a:7e:38:ef:92:fe:0a:5b:0e:6d:d2:41:
87:96:68:53:d1:8f:a8:d1:e2:5c:73:2c:dd:f2:19:
9d:5b:56:67:32:4b:83:65:30:9a:e4:02:9d:2f:e1:
d9:6d:bb:47:e1:22:69:ab:7a:bb:df:a1:d4:ef:60:
96:08:74:09:e0:04:b0:16:a6:7f:46:17:9b:3f:77:
84:55:e6:c7:b5:f7:8b:ea:89:28:c0:17:78:1f:e0:
b2:77:9d:29:bf:b8:9f:76:16:5a:81:09:17:09:fc:
24:5f:8b:15:03:8b:62:7a:43:f5:b0:21:5d:18:49:
2e:b4:56:27:bc:fc:64:61:d7:ac:12:60:3f:9a:f9:
89:aa:8e:38:e4:1c:9e:9a:a2:62:d8:0d:f6:fe:cd:
82:c3:78:03:92:e2:58:62:f4:14:90:b5:1b:78:76:
12:4e:85:6e:11:3e:ef:59:41:99:ac:a9:86:c4:29:
5a:de:4a:1f:2f:ad:8c:90:fe:a6:5a:64:4c:d5:90:
1f:fe:b8:05:09:4f:e0:b7:bb:f8:7f:62:f4:5e:54:
45:d8:12:5b:f8:99:42:55:da:3c:b2:de:39:19:5e:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:65:19:33:33:FE:3D:70:E1:8D:C3:68:EA:3D:9E:01:9E:0C:E4
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:91:b0:f8:78:c7:00:35:a3:84:9a:ad:81:fa:48:9e:c4:e3:
78:24:0f:cd:30:2a:01:24:f9:51:35:b7:f7:22:bf:53:83:86:
7c:54:98:cd:f4:19:ec:7c:94:39:da:62:37:72:98:56:d7:1e:
7d:bc:26:89:eb:38:e6:84:47:6f:db:17:9b:4b:34:f7:bd:a6:
ad:85:6b:64:02:88:0e:fb:30:87:56:b9:66:63:85:48:a0:85:
be:27:fa:b9:22:99:34:04:72:b6:4e:20:23:c2:58:d1:28:4e:
fc:a5:11:cd:ca:08:1f:03:52:13:42:c6:7f:91:46:45:65:aa:
8e:77:8a:c8:b3:d5:be:3c:ea:53:f0:d1:1c:3d:b5:c4:64:96:
a0:89:4c:61:21:ed:a4:54:53:2d:33:cc:76:25:1d:72:3d:24:
31:7c:59:0b:76:44:8c:5c:b4:1a:fa:ea:e4:e1:18:51:9a:63:
df:fe:cd:80:96:33:c9:dc:b8:0b:b6:15:35:1c:07:82:99:b9:
1e:67:45:6e:bc:37:17:6c:20:bd:b2:63:d1:19:07:45:3a:94:
f7:70:07:95:40:ef:d5:18:97:1b:b6:7a:43:f9:d5:d8:cb:70:
4f:6e:91:e0:03:35:a5:6f:8c:6a:42:6b:69:cb:36:62:33:d6:
3f:8b:45:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZicpwNPcYISPWfGiGifkV3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2
OWJkZGYwHhcNMjUwODEyMDUwMDQ3WhcNMjUwODEzMDUwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZmMzNjUxOTMzMzNmZTNkNzBlMThkYzM2OGVhM2Q5ZTAxOWUwY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl86iw4C9XbYsoSJTze8QbDJN/dvy
6O4glbYP3mMJJR4qfjjvkv4KWw5t0kGHlmhT0Y+o0eJccyzd8hmdW1ZnMkuDZTCa
5AKdL+HZbbtH4SJpq3q736HU72CWCHQJ4ASwFqZ/RhebP3eEVebHtfeL6okowBd4
H+Cyd50pv7ifdhZagQkXCfwkX4sVA4tiekP1sCFdGEkutFYnvPxkYdesEmA/mvmJ
qo445ByemqJi2A32/s2Cw3gDkuJYYvQUkLUbeHYSToVuET7vWUGZrKmGxCla3kof
L62MkP6mWmRM1ZAf/rgFCU/gt7v4f2L0XlRF2BJb+JlCVdo8st45GV6mnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/DZRkzM/49cOGNw2jqPZ4BngzkMB8GA1UdIwQY
MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt
OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0
LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5Gw+HjH
ADWjhJqtgfpInsTjeCQPzTAqAST5UTW39yK/U4OGfFSYzfQZ7HyUOdpiN3KYVtce
fbwmies45oRHb9sXm0s0972mrYVrZAKIDvswh1a5ZmOFSKCFvif6uSKZNARytk4g
I8JY0ShO/KURzcoIHwNSE0LGf5FGRWWqjneKyLPVvjzqU/DRHD21xGSWoIlMYSHt
pFRTLTPMdiUdcj0kMXxZC3ZEjFy0Gvrq5OEYUZpj3/7NgJYzydy4C7YVNRwHgpm5
HmdFbrw3F2wgvbJj0RkHRTqU93AHlUDv1RiXG7Z6Q/nV2MtwT26R4AM1pW+MakJr
acs2YjPWP4tF2g==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:21 2025 by rpki-client