Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: iq991UWXrrsuqaMkpIwdasLTZStIE0aZbRb+xTgrRtg=
Subject key identifier: B1:FF:88:DB:7F:80:E2:94:25:26:45:62:2C:7D:2E:8E:67:A0:C1:8B
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 019896A6EDC65824416B36FBFD4FC74C3195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 162F
Signing time: Mon 11 Aug 2025 01:02:58 +0000
Manifest this update: Mon 11 Aug 2025 01:02:58 +0000
Manifest next update: Tue 12 Aug 2025 01:02:58 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: /XXhKfdKL9sxqOc5GSCho4C/KnHe187xslWlpZk5HWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:ed:c6:58:24:41:6b:36:fb:fd:4f:c7:4c:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Aug 11 01:02:58 2025 GMT
Not After : Aug 12 01:02:58 2025 GMT
Subject: CN=b1ff88db7f80e294252645622c7d2e8e67a0c18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:2e:df:94:9e:da:7a:66:47:88:99:d0:15:
a6:85:05:ae:fb:01:77:b5:01:8b:51:46:69:0e:02:
fb:1c:57:6b:51:ad:13:c8:8c:5d:c3:23:46:0e:a3:
36:1f:9b:0a:f8:ba:0b:d6:80:bf:98:bf:68:da:52:
d9:22:19:24:80:7c:d6:30:b5:a1:e6:67:b2:31:92:
84:2b:a6:99:e0:93:b8:f8:d9:52:90:b4:0c:4c:08:
ae:85:5e:4d:2d:38:f7:bb:29:d6:39:71:4b:78:e6:
c4:09:0d:1d:a5:64:9b:ce:75:bc:d0:7f:66:75:8d:
a6:17:19:6e:45:6b:e9:2f:2a:e2:84:95:25:94:6f:
28:4d:c6:0c:34:e9:ed:d3:8f:91:8c:ec:ca:90:a5:
64:76:53:38:8a:c0:d0:5d:4b:e7:6f:75:6a:d0:de:
09:ed:ff:4b:ab:d4:b3:e3:74:53:96:cc:67:a6:a7:
26:21:08:13:c4:ea:9c:56:f0:1f:2a:bf:c8:74:dc:
63:9d:b1:77:11:4a:ae:87:b0:0a:9a:f2:41:a4:ac:
37:58:c5:e2:0a:54:31:24:c5:e4:ce:78:c3:6c:8e:
fa:38:15:df:8a:f2:ce:23:d8:01:ab:a5:d2:fa:ae:
64:b5:2b:3f:a6:c6:17:f9:c8:d2:40:47:81:4f:ff:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:88:DB:7F:80:E2:94:25:26:45:62:2C:7D:2E:8E:67:A0:C1:8B
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:56:64:94:93:81:11:2d:99:ff:ae:0b:c3:29:b8:30:de:4d:
c3:d4:ea:ad:24:9d:7d:6c:44:60:49:51:84:81:f8:0b:21:e9:
41:47:78:01:98:b3:ed:b4:6a:dd:89:04:08:d7:2e:ab:15:31:
62:93:52:33:2b:87:6a:84:8b:8b:69:4f:cf:c4:03:3a:6c:9a:
d8:9b:e6:cb:76:3f:4e:96:52:cb:b2:08:45:bd:63:33:f8:9e:
d8:0d:86:c3:fe:0f:00:78:58:97:0b:fb:87:bf:f0:22:4b:66:
93:21:8e:fa:f8:95:68:00:cb:65:e9:9a:e2:93:48:98:28:1f:
fc:f0:2c:4c:85:ea:d9:27:6c:da:bd:17:77:4f:c9:b8:62:8c:
9b:2e:2d:b7:ee:70:8e:69:b7:cc:b8:09:b1:3a:df:7f:84:40:
28:79:5f:4a:f0:0e:5e:a4:a1:01:88:87:32:22:25:93:99:f2:
0b:ac:9d:d6:02:21:4c:b0:e1:ed:e2:2e:6c:b7:39:7e:18:6e:
bf:ba:3a:ba:b6:a2:fb:5e:44:4d:24:21:9f:53:f6:a3:07:eb:
23:66:d9:a6:58:54:ea:73:98:a9:de:e7:db:47:b4:59:02:13:
4f:13:c7:09:90:57:b2:13:f6:bf:1b:b5:21:ff:ec:c0:ee:53:
89:4d:30:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpu3GWCRBazb7/U/HTDGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTFiY2Q4OWViN2Y1YjNhYjA4ODA2ZWY1MWE3YzJmNmVi
OThlZmMwHhcNMjUwODExMDEwMjU4WhcNMjUwODEyMDEwMjU4WjAzMTEwLwYDVQQD
EyhiMWZmODhkYjdmODBlMjk0MjUyNjQ1NjIyYzdkMmU4ZTY3YTBjMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPQu35Se2npmR4iZ0BWmhQWu+wF3
tQGLUUZpDgL7HFdrUa0TyIxdwyNGDqM2H5sK+LoL1oC/mL9o2lLZIhkkgHzWMLWh
5meyMZKEK6aZ4JO4+NlSkLQMTAiuhV5NLTj3uynWOXFLeObECQ0dpWSbznW80H9m
dY2mFxluRWvpLyrihJUllG8oTcYMNOnt04+RjOzKkKVkdlM4isDQXUvnb3Vq0N4J
7f9Lq9Sz43RTlsxnpqcmIQgTxOqcVvAfKr/IdNxjnbF3EUquh7AKmvJBpKw3WMXi
ClQxJMXkznjDbI76OBXfivLOI9gBq6XS+q5ktSs/psYX+cjSQEeBT/8WlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH/iNt/gOKUJSZFYix9Lo5noMGLMB8GA1UdIwQY
MBaAFF9RvNiet/WzqwiAbvUafC9uuY78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MWY2ZjUtY2VmMC00YTU3LThlNDct
MGE4NTk4NjIwOGE5LzEvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80MWY2ZjUtY2VmMC00YTU3LThlNDctMGE4NTk4NjIwOGE5
LzEvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVZklJOB
ES2Z/64Lwym4MN5Nw9TqrSSdfWxEYElRhIH4CyHpQUd4AZiz7bRq3YkECNcuqxUx
YpNSMyuHaoSLi2lPz8QDOmya2Jvmy3Y/TpZSy7IIRb1jM/ie2A2Gw/4PAHhYlwv7
h7/wIktmkyGO+viVaADLZema4pNImCgf/PAsTIXq2Sds2r0Xd0/JuGKMmy4tt+5w
jmm3zLgJsTrff4RAKHlfSvAOXqShAYiHMiIlk5nyC6yd1gIhTLDh7eIubLc5fhhu
v7o6urai+15ETSQhn1P2owfrI2bZplhU6nOYqd7n20e0WQITTxPHCZBXshP2vxu1
If/swO5TiU0wVQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:16 2025 by rpki-client