Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: otz3fNVEiowN0D3+3K6HdlVl8/lUOfS6Rl6dcmiYEvI=
Subject key identifier: 3D:B2:48:22:16:5F:F6:84:C3:B8:64:B0:0B:1E:23:22:7B:DA:49:18
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 01989034E0F10A28685BDE2A15CFD6EC6EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 19:00:41 +0000
Manifest this update: Sat 09 Aug 2025 19:00:41 +0000
Manifest next update: Sun 10 Aug 2025 19:00:41 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: xHf/TVrmWJcWb45FFVJdxUo79WctCnSF0/WdUCScgP8=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:e0:f1:0a:28:68:5b:de:2a:15:cf:d6:ec:6e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Aug 9 19:00:41 2025 GMT
Not After : Aug 10 19:00:41 2025 GMT
Subject: CN=3db24822165ff684c3b864b00b1e23227bda4918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:10:ec:04:66:cb:a4:9a:81:70:1f:4e:ac:
cf:6f:a2:19:ce:f2:be:15:29:f9:ae:31:f4:37:ad:
54:08:dc:c3:54:7c:d5:2c:99:cb:16:93:79:6f:84:
59:b7:bf:26:0a:c3:86:78:bd:d1:60:4d:23:9a:bc:
7e:d0:ce:e3:6a:7f:c8:12:18:2d:91:be:7b:9f:28:
d3:3b:3a:26:54:ee:27:2c:33:d7:37:ed:85:b4:c7:
a2:ed:ba:1a:3e:ab:d7:6c:63:bb:43:78:34:4e:d3:
e9:7c:4a:7f:19:49:c2:cb:7f:f2:e8:eb:0a:0d:e5:
ec:d1:f6:54:be:b1:be:28:c7:8e:50:55:04:f9:2c:
c4:a1:07:8a:11:48:ad:21:6f:58:3a:6a:33:66:78:
ce:4f:eb:b2:d0:db:ae:66:26:d2:a6:ad:16:26:61:
f6:57:8c:e8:d1:59:ea:4b:24:7e:be:45:f0:01:b6:
6e:0f:ff:fc:fe:0d:ec:a0:de:80:9d:c7:ad:56:24:
1d:71:79:eb:f7:05:56:d1:23:cd:80:cb:e1:82:39:
72:02:bf:4d:43:a6:05:e2:7d:c3:7f:4f:ae:86:39:
1d:b5:ba:7a:1b:0d:80:af:e1:ff:fa:fa:7a:12:28:
8a:71:bd:6d:bd:51:ce:ef:fe:f5:82:8b:8c:32:32:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:48:22:16:5F:F6:84:C3:B8:64:B0:0B:1E:23:22:7B:DA:49:18
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5b:5f:39:70:f3:10:c5:a8:3b:4a:83:12:bd:bc:60:42:c9:
3b:0b:96:5a:ae:e4:a0:50:ad:95:ec:f4:92:a3:d0:83:fe:44:
d7:09:6d:69:f8:9a:1c:d7:d7:ab:c3:3e:d5:7b:f7:8c:dd:d0:
71:2c:b4:8e:e0:2f:e9:14:66:60:41:22:91:01:04:fa:33:39:
44:2f:ef:45:8d:74:a7:d3:f2:77:10:6e:7c:80:54:5a:11:fe:
1c:da:6e:e7:78:11:c5:b8:b4:09:26:0a:58:a8:f0:dd:fc:88:
ea:b2:db:b9:f7:54:9a:03:97:51:7f:c2:4e:d3:01:4a:08:0e:
33:db:9a:4f:09:c1:6e:c7:32:cb:c6:46:54:54:27:5f:49:6d:
89:40:02:8e:17:ae:ce:a6:6c:77:78:a4:99:32:0e:a0:89:d7:
d8:0b:ef:4c:75:5d:5b:69:1e:b2:c6:e8:82:31:95:20:a2:82:
cd:b2:31:77:06:72:55:9c:48:dd:b5:54:10:39:e0:c8:52:25:
d3:69:e5:28:d9:98:71:1c:5d:34:63:c0:dd:a0:f1:db:47:bc:
2c:bb:c6:a2:ca:34:9d:e2:b9:0f:b1:e9:d5:f6:23:1a:c9:c6:
6e:54:58:a4:ae:39:dc:b6:49:11:a8:e6:c1:7d:92:05:03:1f:
a8:57:c0:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNODxCihoW94qFc/W7G70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm
MmFhY2IwHhcNMjUwODA5MTkwMDQxWhcNMjUwODEwMTkwMDQxWjAzMTEwLwYDVQQD
EygzZGIyNDgyMjE2NWZmNjg0YzNiODY0YjAwYjFlMjMyMjdiZGE0OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtowQ7ARmy6SagXAfTqzPb6IZzvK+
FSn5rjH0N61UCNzDVHzVLJnLFpN5b4RZt78mCsOGeL3RYE0jmrx+0M7jan/IEhgt
kb57nyjTOzomVO4nLDPXN+2FtMei7boaPqvXbGO7Q3g0TtPpfEp/GUnCy3/y6OsK
DeXs0fZUvrG+KMeOUFUE+SzEoQeKEUitIW9YOmozZnjOT+uy0NuuZibSpq0WJmH2
V4zo0VnqSyR+vkXwAbZuD//8/g3soN6AncetViQdcXnr9wVW0SPNgMvhgjlyAr9N
Q6YF4n3Df0+uhjkdtbp6Gw2Ar+H/+vp6EiiKcb1tvVHO7/71gouMMjLDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2ySCIWX/aEw7hksAseIyJ72kkYMB8GA1UdIwQY
MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt
NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh
LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVtfOXDz
EMWoO0qDEr28YELJOwuWWq7koFCtlez0kqPQg/5E1wltafiaHNfXq8M+1Xv3jN3Q
cSy0juAv6RRmYEEikQEE+jM5RC/vRY10p9PydxBufIBUWhH+HNpu53gRxbi0CSYK
WKjw3fyI6rLbufdUmgOXUX/CTtMBSggOM9uaTwnBbscyy8ZGVFQnX0ltiUACjheu
zqZsd3ikmTIOoInX2AvvTHVdW2kessbogjGVIKKCzbIxdwZyVZxI3bVUEDngyFIl
02nlKNmYcRxdNGPA3aDx20e8LLvGoso0neK5D7Hp1fYjGsnGblRYpK453LZJEajm
wX2SBQMfqFfAzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:33 2025 by rpki-client