Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: TqcK+Diz3A3Djl0Rfrqgh8NWSTdz5/nm6lAntPk88EM=
Subject key identifier: 40:9D:BB:90:4B:A3:1B:AF:C5:07:BE:3A:CE:5F:17:79:11:D1:C8:90
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 019887D697CF34BF91E2E12A279E24E5F739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 04:00:44 +0000
Manifest this update: Fri 08 Aug 2025 04:00:44 +0000
Manifest next update: Sat 09 Aug 2025 04:00:44 +0000
Files and hashes: 1: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: Get2kr43FHS3FzuDyEuTHd8KtJIobswyc1pIe4TuiSM=)
2: yPiwl9qBas0_CWwr3HhvXq6bAGE.roa (hash: yb05fvQGJfFhNZnnjkljRSCUExMNOud+I+YEv/Cdk1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:97:cf:34:bf:91:e2:e1:2a:27:9e:24:e5:f7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Aug 8 04:00:44 2025 GMT
Not After : Aug 9 04:00:44 2025 GMT
Subject: CN=409dbb904ba31bafc507be3ace5f177911d1c890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:83:df:ef:fb:8a:23:1e:b8:8f:7b:52:c7:
bd:34:cd:0a:fd:d9:e0:bb:e9:a7:00:a6:5a:38:c3:
ba:ea:7a:46:ef:ef:37:12:4f:6d:0d:f4:a7:b7:3b:
ad:b1:68:85:6d:fc:b2:37:aa:57:f4:76:0d:1a:05:
29:c3:36:a6:0e:53:e9:ac:f6:e1:db:7f:9b:83:8a:
4f:fc:a4:64:4c:0d:f2:65:20:6a:b5:50:50:ff:b4:
d7:b4:25:6c:d5:65:0a:15:f5:b1:69:1c:13:19:94:
5e:48:b2:29:c1:c5:7e:fe:5f:92:23:fe:45:90:ea:
8d:c1:53:c9:42:9c:d3:db:06:dc:df:e5:f3:48:52:
21:78:ee:37:9d:e4:d5:27:5a:f8:9a:85:f1:4c:04:
2f:bb:a9:5d:b7:a5:68:e9:46:74:36:c6:73:1b:b4:
24:8c:38:ef:89:9b:b6:cf:8b:5e:17:23:57:56:39:
84:4a:01:09:b8:7f:59:2a:cb:d1:d4:a8:df:a5:7f:
17:79:3a:9e:69:1e:49:00:11:83:06:ae:26:56:9d:
6d:be:78:07:03:8e:2e:1d:03:89:11:7a:07:fd:a5:
a0:9f:e6:b1:8d:6c:76:cf:8a:c7:02:7e:39:e2:e6:
0e:74:e9:9f:1a:a1:b9:bc:4f:e2:23:e9:76:40:30:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:BB:90:4B:A3:1B:AF:C5:07:BE:3A:CE:5F:17:79:11:D1:C8:90
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:20:a4:45:30:0d:11:f6:f2:ee:d1:91:35:9d:af:dc:19:
e2:13:b2:63:4e:73:6e:4b:af:35:45:f6:43:8d:0a:70:d7:8f:
df:73:af:1e:d1:cf:e6:6a:4a:53:54:4b:65:ae:0e:b2:e2:9f:
1e:b0:2d:0e:5b:34:f6:0b:30:ba:81:2c:27:1d:bc:20:50:86:
6c:4e:90:9d:75:f3:da:5d:2a:d5:7c:2b:e1:5b:cd:a0:bd:82:
ab:3a:78:70:b9:63:03:c0:a3:97:b2:f0:16:73:e2:24:91:6d:
bf:8d:5d:55:bb:56:7f:02:33:f5:c8:60:d7:f0:82:03:da:13:
42:20:d7:ff:32:aa:bc:38:5e:f7:8c:40:0d:dc:48:8b:60:2b:
15:78:5f:55:15:4c:cf:86:26:41:4e:c2:a3:b6:97:ba:7f:71:
39:c3:69:10:b7:17:57:3e:55:83:df:11:4c:19:8b:8a:06:fe:
13:8d:52:ff:3e:72:fe:5d:19:5c:5d:07:6a:f3:86:f3:01:65:
1c:9e:c1:e6:74:0d:89:fa:97:01:91:b3:f6:94:38:ad:f9:2f:
69:86:33:f0:00:34:ee:cd:e8:9f:ed:3f:3e:98:53:d2:47:aa:
55:69:38:1f:ed:68:19:0f:de:ba:39:cb:9a:0a:64:33:9d:bf:
55:e4:0d:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiH1pfPNL+R4uEqJ54k5fc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjUwODA4MDQwMDQ0WhcNMjUwODA5MDQwMDQ0WjAzMTEwLwYDVQQD
Eyg0MDlkYmI5MDRiYTMxYmFmYzUwN2JlM2FjZTVmMTc3OTExZDFjODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9WD3+/7iiMeuI97Use9NM0K/dng
u+mnAKZaOMO66npG7+83Ek9tDfSntzutsWiFbfyyN6pX9HYNGgUpwzamDlPprPbh
23+bg4pP/KRkTA3yZSBqtVBQ/7TXtCVs1WUKFfWxaRwTGZReSLIpwcV+/l+SI/5F
kOqNwVPJQpzT2wbc3+XzSFIheO43neTVJ1r4moXxTAQvu6ldt6Vo6UZ0NsZzG7Qk
jDjviZu2z4teFyNXVjmESgEJuH9ZKsvR1KjfpX8XeTqeaR5JABGDBq4mVp1tvngH
A44uHQOJEXoH/aWgn+axjWx2z4rHAn454uYOdOmfGqG5vE/iI+l2QDApDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECdu5BLoxuvxQe+Os5fF3kR0ciQMB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/kgpEUw
DRH28u7RkTWdr9wZ4hOyY05zbkuvNUX2Q40KcNeP33OvHtHP5mpKU1RLZa4OsuKf
HrAtDls09gswuoEsJx28IFCGbE6QnXXz2l0q1Xwr4VvNoL2Cqzp4cLljA8Cjl7Lw
FnPiJJFtv41dVbtWfwIz9chg1/CCA9oTQiDX/zKqvDhe94xADdxIi2ArFXhfVRVM
z4YmQU7Co7aXun9xOcNpELcXVz5Vg98RTBmLigb+E41S/z5y/l0ZXF0HavOG8wFl
HJ7B5nQNifqXAZGz9pQ4rfkvaYYz8AA07s3on+0/PphT0keqVWk4H+1oGQ/eujnL
mgpkM52/VeQNMA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:45 2025 by rpki-client