
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File: XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier: I3s8T/My/OT8HbUtF3aNSJyZLeO0k0NH2n20y51CT9M=
Subject key identifier: DE:79:FF:27:58:FA:BB:1F:34:5A:8B:EC:C6:80:46:67:48:87:2E:94
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer: /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial: 019873E3328A9C1E9C212DD74542E416379F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number: 0B23
Signing time: Mon 04 Aug 2025 07:02:05 +0000
Manifest this update: Mon 04 Aug 2025 07:02:05 +0000
Manifest next update: Tue 05 Aug 2025 07:02:05 +0000
Files and hashes: 1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: JoPr99L1SjhcREcWliI/E3P/5gqxMG9EH/uiiwcImd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:32:8a:9c:1e:9c:21:2d:d7:45:42:e4:16:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Validity
Not Before: Aug 4 07:02:05 2025 GMT
Not After : Aug 5 07:02:05 2025 GMT
Subject: CN=de79ff2758fabb1f345a8becc680466748872e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:d9:88:c9:9d:8c:8c:58:3c:64:fd:2f:ff:
72:1a:d9:9b:6b:09:44:37:a0:2a:8b:d5:05:33:d0:
92:f4:8e:60:69:98:52:75:18:1a:a4:3f:c1:b0:19:
b1:5c:80:65:e8:02:9e:5f:7d:dc:27:1c:1e:f8:55:
0b:5e:8a:1e:eb:c9:1d:bc:be:d3:7b:0e:42:dc:a7:
e9:5b:eb:ee:3b:43:1b:64:ad:6d:3b:c0:1f:f1:60:
9e:9c:9a:cc:3e:64:db:14:72:9b:ad:a6:e5:ff:75:
b8:c8:8b:db:23:7b:7c:0a:8a:5b:ab:7b:33:85:12:
e7:36:70:aa:27:38:1c:22:28:b7:ac:3f:06:87:66:
67:af:4e:62:a8:d2:d9:b5:2e:ac:4d:eb:bc:c7:c6:
b5:3f:b6:df:bf:4e:79:d4:a8:f8:bb:26:9d:16:d5:
d7:31:ba:56:fe:39:3d:d1:89:9f:6a:26:ea:a1:76:
25:f9:bd:0c:7f:bb:51:8b:6d:29:d0:5e:e2:2b:26:
5b:e9:27:0d:97:0d:cd:ec:8d:60:55:9b:ad:71:75:
2d:3a:4b:a7:6d:ab:2d:75:e0:f0:0e:20:16:69:c2:
62:62:21:cd:a3:eb:ca:54:09:cc:bd:f7:e3:22:b8:
c4:7a:b6:c6:d1:b1:c6:34:59:5e:d3:f0:96:6d:d5:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:FF:27:58:FA:BB:1F:34:5A:8B:EC:C6:80:46:67:48:87:2E:94
X509v3 Authority Key Identifier:
keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:43:ef:7a:90:ae:54:9d:4d:bb:e8:e8:14:b0:f1:8f:f8:
19:b2:8b:1b:ef:42:aa:91:4b:cc:12:d1:4e:14:dd:f2:b8:9e:
c2:0b:78:cf:2e:bd:ce:1b:56:13:65:18:ca:96:63:50:ad:58:
8c:a1:c1:cf:95:18:96:c9:47:77:a9:4f:9e:5b:86:8f:00:11:
9b:20:f6:eb:09:b9:61:95:95:f8:a9:89:08:a4:f9:47:9a:b8:
f3:10:d7:60:4e:d2:11:ee:54:b0:3a:ee:1f:c3:f0:86:94:08:
a8:c4:7d:e6:dc:e9:1b:cc:b1:b3:f9:66:ea:c0:46:2d:74:e0:
98:e0:0b:1f:13:2e:98:af:5c:8f:ed:9b:55:e8:a6:0c:d0:ba:
86:22:51:46:6f:7b:62:23:91:fd:d2:70:2b:0e:6d:6e:d2:b4:
f2:9e:9e:5c:4e:e5:06:96:11:bf:71:e2:87:de:70:de:c1:5d:
3d:88:d8:1b:da:17:e1:c0:f4:69:a3:44:24:79:96:b0:fd:6d:
ae:08:9e:31:51:4d:82:55:7e:33:42:29:8b:5b:a8:83:5b:76:
e8:d1:bb:7f:eb:52:b1:be:bc:88:b4:49:fa:5a:8b:28:a1:22:
bd:6a:17:93:45:6c:57:09:37:2e:3a:e6:9a:7f:39:aa:3b:f9:
0a:21:9f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4zKKnB6cIS3XRULkFjefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTY5YzkxZDQ1MzM5NmJmYTE2NmYwNTFiZjhmMDZjMDNh
MDg1Y2IwHhcNMjUwODA0MDcwMjA1WhcNMjUwODA1MDcwMjA1WjAzMTEwLwYDVQQD
EyhkZTc5ZmYyNzU4ZmFiYjFmMzQ1YThiZWNjNjgwNDY2NzQ4ODcyZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/bZiMmdjIxYPGT9L/9yGtmbawlE
N6Aqi9UFM9CS9I5gaZhSdRgapD/BsBmxXIBl6AKeX33cJxwe+FULXooe68kdvL7T
ew5C3KfpW+vuO0MbZK1tO8Af8WCenJrMPmTbFHKbrabl/3W4yIvbI3t8Copbq3sz
hRLnNnCqJzgcIii3rD8Gh2Znr05iqNLZtS6sTeu8x8a1P7bfv0551Kj4uyadFtXX
MbpW/jk90YmfaibqoXYl+b0Mf7tRi20p0F7iKyZb6ScNlw3N7I1gVZutcXUtOkun
bastdeDwDiAWacJiYiHNo+vKVAnMvffjIrjEerbG0bHGNFle0/CWbdUytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN55/ydY+rsfNFqL7MaARmdIhy6UMB8GA1UdIwQY
MBaAFFzmnJHUUzlr+hZvBRv48GwDoIXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQt
YTU5N2VlNjM3ZGI0LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQtYTU5N2VlNjM3ZGI0
LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcZD73qQ
rlSdTbvo6BSw8Y/4GbKLG+9CqpFLzBLRThTd8riewgt4zy69zhtWE2UYypZjUK1Y
jKHBz5UYlslHd6lPnluGjwARmyD26wm5YZWV+KmJCKT5R5q48xDXYE7SEe5UsDru
H8PwhpQIqMR95tzpG8yxs/lm6sBGLXTgmOALHxMumK9cj+2bVeimDNC6hiJRRm97
YiOR/dJwKw5tbtK08p6eXE7lBpYRv3Hih95w3sFdPYjYG9oX4cD0aaNEJHmWsP1t
rgieMVFNglV+M0Ipi1uog1t26NG7f+tSsb68iLRJ+lqLKKEivWoXk0VsVwk3Ljrm
mn85qjv5CiGfYQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:10 2025 by rpki-client