Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: yj/3JOrsqkA8Iv/kXWWhmjJ8EVICHRWZjN7AFW4N2OM=
Subject key identifier: D5:A3:D6:40:06:9F:6A:6A:DB:DE:2D:4E:D5:EB:33:4B:C8:43:9F:4E
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 01987DC0F7206AD0492F42106F5E05AE6701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0CB3
Signing time: Wed 06 Aug 2025 05:00:54 +0000
Manifest this update: Wed 06 Aug 2025 05:00:54 +0000
Manifest next update: Thu 07 Aug 2025 05:00:54 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: KbvvA6AQFF+UMN3xAJFxBksQrOf+qUsZzonmvB5prTk=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:f7:20:6a:d0:49:2f:42:10:6f:5e:05:ae:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Aug 6 05:00:54 2025 GMT
Not After : Aug 7 05:00:54 2025 GMT
Subject: CN=d5a3d640069f6a6adbde2d4ed5eb334bc8439f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:61:e8:3b:40:14:07:3c:19:8f:46:41:29:
9b:d3:e6:56:a0:4d:25:5f:9d:5e:f9:1a:17:12:ac:
82:85:60:fd:d6:e5:96:6a:69:76:8d:10:9c:c3:2f:
94:e7:8a:59:0e:75:63:d8:dc:9d:ed:ce:b2:0a:df:
af:56:9c:c6:ca:72:b1:59:69:3b:26:8c:86:28:0c:
c6:71:c1:5b:62:de:a3:17:1c:c3:26:14:4e:c1:53:
f7:5c:ef:ae:d8:23:05:1d:e8:7f:8b:5f:f5:93:77:
ce:c6:8f:77:6a:75:20:f9:e7:37:24:09:3e:12:da:
70:5d:c4:d0:d1:ce:e3:84:28:73:7d:37:90:24:8d:
fe:f8:21:cf:54:7f:ae:49:bc:15:b9:04:79:fc:61:
bb:d7:6d:2f:f3:22:9b:bb:0e:7e:ba:bb:4d:47:74:
52:4f:2e:ef:f1:2e:af:30:39:ca:50:ed:d8:02:c1:
2c:bc:12:25:7c:56:e0:e9:fb:d9:ad:85:1c:a5:6e:
9b:47:1b:f0:f2:4e:00:b4:5d:45:25:cd:84:08:ba:
f6:ae:21:2e:29:65:03:10:0d:66:9d:21:b8:27:45:
99:57:cf:9c:b1:a7:74:70:1c:ee:49:73:c6:e4:e7:
1f:48:13:84:a9:37:dd:cf:93:2c:0d:2c:29:8a:5a:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:D6:40:06:9F:6A:6A:DB:DE:2D:4E:D5:EB:33:4B:C8:43:9F:4E
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6e:00:ec:a3:4e:9f:bc:b7:17:4c:93:95:bc:0e:ba:5e:23:
01:d1:d0:e7:2e:1e:4b:d7:76:9c:c7:e7:e8:f6:75:73:42:6a:
7c:6b:50:52:72:65:b1:ce:ca:28:3d:47:64:27:4f:c3:ab:95:
eb:bf:ff:ed:d4:ae:14:4a:48:e3:c4:8f:04:6b:b3:a4:5d:98:
b6:d9:1e:80:7c:80:d3:d2:05:34:52:4b:0f:77:4c:70:81:04:
83:8d:9e:78:54:d6:bc:26:30:a1:d7:93:3b:5c:37:e5:7c:75:
2b:14:f3:b7:08:fc:91:7b:d1:e4:f6:02:e2:dc:db:30:d1:53:
e4:78:6c:28:08:e2:ea:1d:e3:9f:4e:f4:aa:a5:3f:a6:c8:34:
10:b8:5c:ed:64:59:21:0c:70:29:4e:b1:52:1d:1b:61:17:69:
cf:86:1c:b1:4a:3b:ba:eb:36:e9:f1:df:b1:0d:26:9f:96:90:
5f:ea:25:3c:dc:44:bc:21:48:2d:07:98:87:d1:f5:f0:a8:2e:
ba:0c:df:f3:64:29:c1:b0:c4:06:d3:9e:b0:88:37:fc:a0:6e:
d4:a6:62:98:14:85:38:2d:9b:cb:88:dd:84:af:46:06:00:b1:
3c:bf:91:a1:ea:68:e2:9b:2f:71:43:a1:f8:0e:26:39:7d:1b:
9c:65:07:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wPcgatBJL0IQb14FrmcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2Y2MzQwMTQwN2MxY2M3OTdiMTcwMzRlODEzZDIyNTRm
OTc3M2UwHhcNMjUwODA2MDUwMDU0WhcNMjUwODA3MDUwMDU0WjAzMTEwLwYDVQQD
EyhkNWEzZDY0MDA2OWY2YTZhZGJkZTJkNGVkNWViMzM0YmM4NDM5ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWRh6DtAFAc8GY9GQSmb0+ZWoE0l
X51e+RoXEqyChWD91uWWaml2jRCcwy+U54pZDnVj2Nyd7c6yCt+vVpzGynKxWWk7
JoyGKAzGccFbYt6jFxzDJhROwVP3XO+u2CMFHeh/i1/1k3fOxo93anUg+ec3JAk+
EtpwXcTQ0c7jhChzfTeQJI3++CHPVH+uSbwVuQR5/GG7120v8yKbuw5+urtNR3RS
Ty7v8S6vMDnKUO3YAsEsvBIlfFbg6fvZrYUcpW6bRxvw8k4AtF1FJc2ECLr2riEu
KWUDEA1mnSG4J0WZV8+csad0cBzuSXPG5OcfSBOEqTfdz5MsDSwpilpmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWj1kAGn2pq294tTtXrM0vIQ59OMB8GA1UdIwQY
MBaAFF1/Y0AUB8HMeXsXA06BPSJU+Xc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMt
MzNmYjE0NTJiYjBhLzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMtMzNmYjE0NTJiYjBh
LzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD24A7KNO
n7y3F0yTlbwOul4jAdHQ5y4eS9d2nMfn6PZ1c0JqfGtQUnJlsc7KKD1HZCdPw6uV
67//7dSuFEpI48SPBGuzpF2YttkegHyA09IFNFJLD3dMcIEEg42eeFTWvCYwodeT
O1w35Xx1KxTztwj8kXvR5PYC4tzbMNFT5HhsKAji6h3jn070qqU/psg0ELhc7WRZ
IQxwKU6xUh0bYRdpz4YcsUo7uus26fHfsQ0mn5aQX+olPNxEvCFILQeYh9H18Kgu
ugzf82QpwbDEBtOesIg3/KBu1KZimBSFOC2by4jdhK9GBgCxPL+Roepo4psvcUOh
+A4mOX0bnGUHWw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:25 2025 by rpki-client