Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: K7bY3xf43cadV9xuccp+qL8VFBt9yAnq2KSw9hoWAo8=
Subject key identifier: 71:CE:F3:0F:72:74:79:E1:89:79:FC:B0:D1:AC:42:A2:16:DA:5D:D3
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 01987C77E48230AABC6E3A75D1BAD1C9777A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0882
Signing time: Tue 05 Aug 2025 23:01:28 +0000
Manifest this update: Tue 05 Aug 2025 23:01:28 +0000
Manifest next update: Wed 06 Aug 2025 23:01:28 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: xpCESrGRN9mSq6VfvbwUO3bcAMk02dwf5JvU9qSEmCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:e4:82:30:aa:bc:6e:3a:75:d1:ba:d1:c9:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Aug 5 23:01:28 2025 GMT
Not After : Aug 6 23:01:28 2025 GMT
Subject: CN=71cef30f727479e18979fcb0d1ac42a216da5dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:ea:42:a2:fc:d3:c8:28:7e:32:24:dd:e8:
17:94:72:0b:af:ae:ca:c7:da:7b:e9:9c:55:e4:64:
c6:f9:8f:a5:53:7a:5a:ea:77:2c:b5:7d:1e:31:fc:
01:03:07:1f:33:e9:70:74:53:87:6f:d8:87:35:67:
40:40:66:be:71:8a:41:4d:44:ad:62:d5:9d:91:63:
e9:03:b4:cc:75:ee:4d:a2:1e:2e:fc:11:f9:bb:5c:
4e:33:01:0e:f4:fe:0c:d3:de:28:2d:0c:6a:a2:6c:
69:62:48:3c:5e:5e:03:3f:87:80:db:27:b0:7c:6f:
1f:08:bc:85:5c:29:7e:2c:fa:c9:0d:34:62:ef:95:
8c:66:ce:d7:71:d6:fa:bf:77:e5:60:56:91:07:03:
af:08:d3:88:01:b4:65:0a:45:03:41:90:b6:fd:1b:
f7:d1:32:f2:ee:c6:85:6d:79:b9:27:a6:fa:08:c0:
aa:d4:ee:1b:71:4a:5f:73:bc:9e:c0:ab:4e:fd:23:
3c:b6:c3:f1:ad:05:a1:20:d5:62:39:f1:03:10:a1:
74:bc:63:9b:ae:6e:34:30:ce:ef:e7:4c:ff:dc:ce:
36:d0:da:42:f9:d6:0b:d1:c6:72:26:0a:12:d3:ea:
9a:17:e4:32:42:fc:f3:d2:15:ef:f9:ff:33:e4:6c:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:F3:0F:72:74:79:E1:89:79:FC:B0:D1:AC:42:A2:16:DA:5D:D3
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:68:24:06:4c:31:fd:d7:f7:f4:68:1f:32:65:3d:f8:1b:fb:
12:d0:1a:15:3e:10:95:87:86:21:16:13:42:4c:3f:33:87:e5:
b4:46:c5:17:61:2a:e1:d0:97:39:45:5d:66:bb:8f:7c:7d:29:
49:83:8c:93:55:ca:dd:84:95:69:c2:27:06:2c:d7:02:0e:ee:
12:41:5e:df:4e:5d:d5:af:2a:88:e9:c3:fa:d1:fd:63:ad:a6:
49:4d:43:eb:0d:bc:9d:f8:8a:53:e2:c7:28:eb:27:05:a4:f1:
b2:b9:f6:b0:ae:ee:5e:d2:33:58:cd:08:a9:8a:d6:28:d5:fe:
e4:31:14:ce:ec:fc:e1:c5:98:5d:8c:c8:7e:fc:1b:27:d7:f1:
50:62:b9:1e:11:bd:9b:28:74:bc:39:53:b0:38:95:ef:6a:6e:
43:18:7f:48:29:de:ab:b5:13:34:43:25:4b:82:08:a8:fb:b3:
3a:2f:ec:50:e6:df:6f:b5:27:a1:fd:f1:92:c9:95:74:ed:30:
21:1a:cc:f5:f3:6f:9b:41:5e:23:cf:7c:72:b6:da:04:df:6a:
dc:7b:9c:63:07:d0:05:3a:d3:fa:f6:a9:fc:15:d9:0e:47:07:
0a:9b:07:50:32:64:e2:4e:2f:e6:83:67:93:dc:37:e2:3e:51:
0e:6e:7e:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d+SCMKq8bjp10brRyXd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0
YWQ5ZGMwHhcNMjUwODA1MjMwMTI4WhcNMjUwODA2MjMwMTI4WjAzMTEwLwYDVQQD
Eyg3MWNlZjMwZjcyNzQ3OWUxODk3OWZjYjBkMWFjNDJhMjE2ZGE1ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3PqQqL808gofjIk3egXlHILr67K
x9p76ZxV5GTG+Y+lU3pa6ncstX0eMfwBAwcfM+lwdFOHb9iHNWdAQGa+cYpBTUSt
YtWdkWPpA7TMde5Noh4u/BH5u1xOMwEO9P4M094oLQxqomxpYkg8Xl4DP4eA2yew
fG8fCLyFXCl+LPrJDTRi75WMZs7Xcdb6v3flYFaRBwOvCNOIAbRlCkUDQZC2/Rv3
0TLy7saFbXm5J6b6CMCq1O4bcUpfc7yewKtO/SM8tsPxrQWhINViOfEDEKF0vGOb
rm40MM7v50z/3M420NpC+dYL0cZyJgoS0+qaF+QyQvzz0hXv+f8z5GyrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHO8w9ydHnhiXn8sNGsQqIW2l3TMB8GA1UdIwQY
MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt
NjZiODZmYzc4MWEyLzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy
LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGgkBkwx
/df39GgfMmU9+Bv7EtAaFT4QlYeGIRYTQkw/M4fltEbFF2Eq4dCXOUVdZruPfH0p
SYOMk1XK3YSVacInBizXAg7uEkFe305d1a8qiOnD+tH9Y62mSU1D6w28nfiKU+LH
KOsnBaTxsrn2sK7uXtIzWM0IqYrWKNX+5DEUzuz84cWYXYzIfvwbJ9fxUGK5HhG9
myh0vDlTsDiV72puQxh/SCneq7UTNEMlS4IIqPuzOi/sUObfb7Unof3xksmVdO0w
IRrM9fNvm0FeI898crbaBN9q3HucYwfQBTrT+vap/BXZDkcHCpsHUDJk4k4v5oNn
k9w34j5RDm5+IA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:30 2025 by rpki-client