Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: 5T/RtMqGwz0wq0FFxbTgjy918oI2WpPUW6Sfa6kvcsM=
Subject key identifier: 06:B5:8F:2F:A5:D0:A9:43:F8:BD:5D:93:3C:02:D5:2E:DD:FD:5A:E6
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 01989E5F59C7DFD374BE1B5DE866ED81121D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 022E
Signing time: Tue 12 Aug 2025 13:01:45 +0000
Manifest this update: Tue 12 Aug 2025 13:01:45 +0000
Manifest next update: Wed 13 Aug 2025 13:01:45 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: CMLlTsBSniIw0VPKGBE+C/Gq6AWnT5pLqfrKMRJwdck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:59:c7:df:d3:74:be:1b:5d:e8:66:ed:81:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Aug 12 13:01:45 2025 GMT
Not After : Aug 13 13:01:45 2025 GMT
Subject: CN=06b58f2fa5d0a943f8bd5d933c02d52eddfd5ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:23:41:60:c6:aa:bd:47:2e:89:43:a0:15:
86:cd:ae:cb:b4:c1:f9:cf:b9:eb:1a:d2:21:0b:88:
a9:2d:55:0f:47:37:fb:36:3e:36:c0:df:2d:be:28:
d2:a4:42:ff:6f:ac:55:6d:ed:71:02:a6:c9:53:93:
b9:d0:01:1a:19:da:e8:ad:1e:a6:ef:d4:31:0d:3f:
47:51:5b:cf:8a:c7:5e:09:64:9c:8d:81:2a:20:c6:
79:a3:b6:05:f9:ac:5f:25:5e:78:8a:13:b2:73:18:
88:5a:69:e1:90:0b:ba:0d:67:b6:23:4b:30:31:5b:
ed:66:27:a7:62:53:78:b5:14:b4:5d:db:de:20:d4:
03:35:05:e2:9f:24:07:bf:16:f2:aa:16:09:c6:6c:
02:6d:be:c4:6d:28:98:b7:ed:ad:60:9f:6b:78:65:
96:1e:2e:3d:d7:31:31:79:39:4f:64:5d:b9:17:69:
25:21:f4:f9:b1:cb:73:a6:82:37:fd:96:88:e0:c4:
60:a6:7c:16:22:23:ff:bf:29:24:e2:eb:28:43:1d:
e4:35:45:3d:07:ad:ee:ee:f7:c7:11:0a:7d:d6:aa:
7b:14:d8:fd:0f:7e:7d:5f:da:d3:e6:bf:4e:e3:86:
35:94:14:f5:f9:40:2b:70:d4:0e:f7:31:f0:3a:c2:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B5:8F:2F:A5:D0:A9:43:F8:BD:5D:93:3C:02:D5:2E:DD:FD:5A:E6
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0d:8e:9e:5f:24:cf:39:3f:18:8f:d5:c1:c1:00:68:69:7d:
60:cb:f1:6a:35:93:91:94:81:85:20:a1:4e:54:1c:64:b2:3a:
12:44:f4:99:bf:59:4d:1c:2e:b5:05:5e:5c:ee:30:43:d5:19:
84:31:f0:07:a5:5f:16:ca:c8:30:33:d7:7a:d6:8e:9c:8f:af:
9f:ae:20:5c:76:cf:89:26:f7:53:c9:39:22:d7:f8:12:d7:ca:
7a:f3:2b:e4:ce:4f:24:c7:92:83:3a:b8:98:05:69:86:d2:5c:
83:fd:99:66:8d:63:99:a4:54:72:b0:fb:d6:7e:4e:9f:72:a3:
85:80:bc:c0:7e:c9:70:b5:35:b0:a0:45:91:38:e9:85:07:92:
d8:1f:27:2e:c7:26:03:2b:41:82:0b:0a:ef:d5:7f:04:fc:f4:
92:29:48:8d:40:c5:8d:23:e9:fc:2f:d4:d7:d4:e3:39:bc:8f:
f6:50:27:4b:47:e6:e8:99:51:62:6d:2c:df:fd:12:97:34:92:
f9:75:ab:81:01:ec:3f:ba:3a:f2:bc:25:e4:ef:e8:54:b0:0e:
18:9d:34:f5:02:38:59:e0:19:ee:9b:25:31:2c:1d:cd:ec:96:
b2:3d:df:d8:e6:e4:16:87:bf:38:07:d0:a7:22:96:ab:fc:83:
b6:5b:65:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieX1nH39N0vhtd6GbtgRIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi
N2MzZTUwHhcNMjUwODEyMTMwMTQ1WhcNMjUwODEzMTMwMTQ1WjAzMTEwLwYDVQQD
EygwNmI1OGYyZmE1ZDBhOTQzZjhiZDVkOTMzYzAyZDUyZWRkZmQ1YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAMjQWDGqr1HLolDoBWGza7LtMH5
z7nrGtIhC4ipLVUPRzf7Nj42wN8tvijSpEL/b6xVbe1xAqbJU5O50AEaGdrorR6m
79QxDT9HUVvPisdeCWScjYEqIMZ5o7YF+axfJV54ihOycxiIWmnhkAu6DWe2I0sw
MVvtZienYlN4tRS0XdveINQDNQXinyQHvxbyqhYJxmwCbb7EbSiYt+2tYJ9reGWW
Hi491zExeTlPZF25F2klIfT5sctzpoI3/ZaI4MRgpnwWIiP/vykk4usoQx3kNUU9
B63u7vfHEQp91qp7FNj9D359X9rT5r9O44Y1lBT1+UArcNQO9zHwOsLFdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa1jy+l0KlD+L1dkzwC1S7d/VrmMB8GA1UdIwQY
MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt
Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz
LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw2Onl8k
zzk/GI/VwcEAaGl9YMvxajWTkZSBhSChTlQcZLI6EkT0mb9ZTRwutQVeXO4wQ9UZ
hDHwB6VfFsrIMDPXetaOnI+vn64gXHbPiSb3U8k5Itf4EtfKevMr5M5PJMeSgzq4
mAVphtJcg/2ZZo1jmaRUcrD71n5On3KjhYC8wH7JcLU1sKBFkTjphQeS2B8nLscm
AytBggsK79V/BPz0kilIjUDFjSPp/C/U19TjObyP9lAnS0fm6JlRYm0s3/0SlzSS
+XWrgQHsP7o68rwl5O/oVLAOGJ009QI4WeAZ7pslMSwdzeyWsj3f2ObkFoe/OAfQ
pyKWq/yDtltlSw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:55 2025 by rpki-client