Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: SYQYNyU2Zbh56+A48kAfADHXkmk04geNsgIDyoiJ9nw=
Subject key identifier: 3E:C2:A3:6F:2A:CF:65:DE:C5:A0:E8:F1:11:FF:AC:87:D8:F5:3C:EA
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01988EEBD706BC05B32AC9ADED132E00B243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0D8A
Signing time: Sat 09 Aug 2025 13:01:17 +0000
Manifest this update: Sat 09 Aug 2025 13:01:17 +0000
Manifest next update: Sun 10 Aug 2025 13:01:17 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: wFYUXhzvWKvb+m7o40sY9R28D28PdRSXnZGT5psCtt0=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:d7:06:bc:05:b3:2a:c9:ad:ed:13:2e:00:b2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Aug 9 13:01:17 2025 GMT
Not After : Aug 10 13:01:17 2025 GMT
Subject: CN=3ec2a36f2acf65dec5a0e8f111ffac87d8f53cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:e2:80:c3:10:09:23:20:64:46:51:c0:9d:
da:f3:9d:de:03:00:c6:f8:9a:82:2c:5b:4f:01:0d:
f4:ae:0a:b9:64:9f:a3:4b:32:80:66:4d:14:80:80:
47:4d:a7:7b:2a:61:59:36:b1:74:d3:fb:ef:4e:ef:
4e:db:b7:69:32:47:36:12:7c:56:1f:95:7b:c5:84:
92:c8:6c:6a:d5:7b:7e:6b:59:23:f2:cd:06:1c:80:
0e:12:9e:19:19:7c:11:ea:b0:2b:fa:f8:10:cc:0d:
5a:57:8a:4a:8d:95:dd:8b:d8:52:66:41:18:2b:1f:
8c:88:25:52:e2:0a:58:2a:e6:9d:23:46:7f:68:cc:
32:f6:41:ba:75:90:67:ce:43:0d:5d:f1:17:aa:37:
a9:bf:0a:d0:c5:bb:41:e6:f5:b2:a9:e4:c8:93:c1:
e6:b8:23:48:c6:ba:a9:02:5b:bd:cc:4d:2a:f4:5a:
10:43:5a:bb:43:d7:18:56:4b:24:fa:27:af:f6:50:
0a:2d:3b:e3:90:16:56:5e:6f:30:84:0f:e4:ce:fe:
34:60:a7:05:fc:c4:a6:4a:96:c9:4b:21:e8:00:54:
55:56:4a:66:c5:16:8b:79:4a:34:da:be:ce:76:5b:
1b:b7:50:47:78:d5:1f:e4:da:71:3a:48:ad:30:39:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:A3:6F:2A:CF:65:DE:C5:A0:E8:F1:11:FF:AC:87:D8:F5:3C:EA
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ae:3f:74:fb:a8:72:56:05:9c:ea:fd:d7:85:95:d8:7c:bb:
24:a0:3c:bd:98:1b:27:27:41:18:c3:98:0d:ce:f3:e7:16:8a:
d8:e9:5b:0f:90:f9:f4:a0:9f:55:bf:62:77:6c:f5:35:00:37:
b8:f0:fd:82:e6:50:a1:5f:1c:55:29:64:df:f4:9d:de:1a:05:
26:f0:c0:c1:05:79:68:f3:75:38:a6:d4:ef:d0:d4:d7:22:69:
95:4b:49:38:5d:d8:65:b7:e2:d9:84:ec:2f:fa:61:b1:85:93:
7e:66:06:cc:be:9a:1c:00:4f:b6:5a:38:0b:03:dd:71:09:0e:
6a:89:d8:dc:54:8d:25:8c:db:48:0f:ff:ec:e8:e7:85:3a:ea:
e3:5d:85:d5:92:52:8d:65:73:80:a4:6d:60:9e:f6:05:e0:a3:
bb:d7:15:28:29:86:19:02:c8:44:b0:5b:3c:3d:6d:3d:60:94:
b8:a4:7b:76:02:c9:24:0c:dd:0c:47:f3:68:ed:02:c7:c3:0b:
f6:31:c5:97:2c:84:dc:8d:ef:7f:cf:36:1e:8f:2c:c8:00:cc:
cb:44:0b:18:19:36:52:0a:4d:ca:dc:e9:09:7e:85:2b:92:4f:
2e:dc:c7:b6:4f:ef:91:1e:9c:c0:ab:7c:95:35:54:0f:ee:13:
92:ac:07:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO69cGvAWzKsmt7RMuALJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjUwODA5MTMwMTE3WhcNMjUwODEwMTMwMTE3WjAzMTEwLwYDVQQD
EygzZWMyYTM2ZjJhY2Y2NWRlYzVhMGU4ZjExMWZmYWM4N2Q4ZjUzY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL3igMMQCSMgZEZRwJ3a853eAwDG
+JqCLFtPAQ30rgq5ZJ+jSzKAZk0UgIBHTad7KmFZNrF00/vvTu9O27dpMkc2EnxW
H5V7xYSSyGxq1Xt+a1kj8s0GHIAOEp4ZGXwR6rAr+vgQzA1aV4pKjZXdi9hSZkEY
Kx+MiCVS4gpYKuadI0Z/aMwy9kG6dZBnzkMNXfEXqjepvwrQxbtB5vWyqeTIk8Hm
uCNIxrqpAlu9zE0q9FoQQ1q7Q9cYVksk+iev9lAKLTvjkBZWXm8whA/kzv40YKcF
/MSmSpbJSyHoAFRVVkpmxRaLeUo02r7Odlsbt1BHeNUf5NpxOkitMDkdmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7Co28qz2XexaDo8RH/rIfY9TzqMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna4/dPuo
clYFnOr914WV2Hy7JKA8vZgbJydBGMOYDc7z5xaK2OlbD5D59KCfVb9id2z1NQA3
uPD9guZQoV8cVSlk3/Sd3hoFJvDAwQV5aPN1OKbU79DU1yJplUtJOF3YZbfi2YTs
L/phsYWTfmYGzL6aHABPtlo4CwPdcQkOaonY3FSNJYzbSA//7OjnhTrq412F1ZJS
jWVzgKRtYJ72BeCju9cVKCmGGQLIRLBbPD1tPWCUuKR7dgLJJAzdDEfzaO0Cx8ML
9jHFlyyE3I3vf882Ho8syADMy0QLGBk2UgpNytzpCX6FK5JPLtzHtk/vkR6cwKt8
lTVUD+4TkqwHbQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:48 2025 by rpki-client