Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: vM7VpAOJeDhtRRmTvBqnnpYw66ZXfzDqqLCLgfLLWVs=
Subject key identifier: 58:59:DC:8E:A9:34:20:CB:80:43:06:2E:03:33:A9:52:EE:7D:30:88
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01987487273232FA4F0C8FB6BEB4E4107294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0412
Signing time: Mon 04 Aug 2025 10:01:11 +0000
Manifest this update: Mon 04 Aug 2025 10:01:11 +0000
Manifest next update: Tue 05 Aug 2025 10:01:11 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: J59n4kHBFQzud9ur0GbdYjK05g+tBM9DUiYO26H1098=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:27:32:32:fa:4f:0c:8f:b6:be:b4:e4:10:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Aug 4 10:01:11 2025 GMT
Not After : Aug 5 10:01:11 2025 GMT
Subject: CN=5859dc8ea93420cb8043062e0333a952ee7d3088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:73:3d:35:3b:f5:0a:b0:6c:7a:01:8d:30:
da:34:e0:a8:46:ad:40:27:aa:99:ca:83:65:dd:2b:
c4:e6:cd:e3:bf:0c:01:87:a6:db:96:be:b5:37:ab:
d1:fa:5d:6f:b8:1a:c0:e0:f0:73:3c:06:bd:cd:9e:
98:d4:d1:05:44:07:90:1b:19:5e:8d:72:33:ce:3f:
a9:be:11:94:91:03:dd:5b:a3:86:0f:50:2d:90:cb:
54:e6:b0:79:ff:e5:22:b9:5b:42:39:87:00:4b:3a:
6f:e9:75:61:3d:98:e7:10:c7:5a:d6:71:fa:19:24:
87:0d:35:51:0e:7e:37:7c:07:c1:32:20:a8:ef:b6:
e2:78:ae:1c:86:cb:e4:56:4b:d0:c0:1a:9c:a2:17:
72:47:2c:fc:65:00:46:d4:ca:cd:7d:0c:44:5d:34:
c3:5a:99:33:8e:d1:f4:48:91:c6:3b:eb:6d:af:7c:
5f:dc:0c:d0:2f:c0:ac:a6:38:c6:7d:5e:b4:94:65:
d9:5b:ea:37:8b:72:31:fd:eb:a9:86:61:40:15:10:
dd:05:0b:a0:82:c8:c8:be:76:fb:48:25:fe:ce:2f:
0d:96:da:31:57:5f:dc:49:8f:f2:ac:0d:10:f3:ed:
ce:df:dd:0d:79:9a:d0:fd:eb:d1:6e:56:9b:d4:a5:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:DC:8E:A9:34:20:CB:80:43:06:2E:03:33:A9:52:EE:7D:30:88
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:24:6c:34:4c:43:e7:a3:8b:72:b5:53:bc:ed:aa:dc:d6:d5:
dd:03:b6:da:b3:64:22:a8:da:50:9f:59:60:40:2a:7b:ef:ea:
28:e3:75:90:62:04:fe:16:db:f7:0c:a0:7b:92:63:58:8c:f0:
46:76:4c:da:5d:68:e7:e8:3c:1e:80:83:86:e7:2b:a4:21:c2:
8b:c9:3a:88:21:18:0a:4d:9d:78:cf:ff:75:84:7f:5e:d3:65:
e3:3f:4c:d8:8d:47:97:40:ee:7a:62:5e:6b:f4:5d:f7:59:64:
11:00:3d:99:bc:2b:b3:09:86:f3:2e:4c:1b:18:8b:c0:20:d9:
ba:a3:71:df:8c:38:86:64:87:34:e3:4f:66:f0:f7:f5:32:02:
bc:ce:27:a1:de:be:f4:81:50:ed:de:db:d1:56:cf:f3:87:16:
da:d3:16:da:78:51:fa:6e:d5:2c:71:66:00:91:33:fb:96:15:
ab:e3:25:cf:ec:7d:71:2a:86:02:ab:00:70:66:09:2b:f6:f4:
9b:b3:d9:b3:3e:8a:68:4c:56:38:20:84:b1:c7:8d:39:9e:13:
ed:67:fa:6b:3a:23:c0:71:40:b8:b6:1d:d4:a5:ad:bf:1f:b2:
4a:0b:e4:f4:d9:70:84:56:ec:f2:9c:9e:f6:6c:de:06:93:0e:
81:1b:49:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hycyMvpPDI+2vrTkEHKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl
NGM5MzEwHhcNMjUwODA0MTAwMTExWhcNMjUwODA1MTAwMTExWjAzMTEwLwYDVQQD
Eyg1ODU5ZGM4ZWE5MzQyMGNiODA0MzA2MmUwMzMzYTk1MmVlN2QzMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTBzPTU79QqwbHoBjTDaNOCoRq1A
J6qZyoNl3SvE5s3jvwwBh6bblr61N6vR+l1vuBrA4PBzPAa9zZ6Y1NEFRAeQGxle
jXIzzj+pvhGUkQPdW6OGD1AtkMtU5rB5/+UiuVtCOYcASzpv6XVhPZjnEMda1nH6
GSSHDTVRDn43fAfBMiCo77bieK4chsvkVkvQwBqcohdyRyz8ZQBG1MrNfQxEXTTD
WpkzjtH0SJHGO+ttr3xf3AzQL8CspjjGfV60lGXZW+o3i3Ix/euphmFAFRDdBQug
gsjIvnb7SCX+zi8NltoxV1/cSY/yrA0Q8+3O390NeZrQ/evRblab1KWhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhZ3I6pNCDLgEMGLgMzqVLufTCIMB8GA1UdIwQY
MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt
OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy
LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSRsNExD
56OLcrVTvO2q3NbV3QO22rNkIqjaUJ9ZYEAqe+/qKON1kGIE/hbb9wyge5JjWIzw
RnZM2l1o5+g8HoCDhucrpCHCi8k6iCEYCk2deM//dYR/XtNl4z9M2I1Hl0DuemJe
a/Rd91lkEQA9mbwrswmG8y5MGxiLwCDZuqNx34w4hmSHNONPZvD39TICvM4nod6+
9IFQ7d7b0VbP84cW2tMW2nhR+m7VLHFmAJEz+5YVq+Mlz+x9cSqGAqsAcGYJK/b0
m7PZsz6KaExWOCCEsceNOZ4T7Wf6azojwHFAuLYd1KWtvx+ySgvk9NlwhFbs8pye
9mzeBpMOgRtJ5A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:40 2025 by rpki-client