Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier: K63mQin5zFrFpltPoIGXC7sIc/+ERpwSDuyDDFKwaR8=
Subject key identifier: 8A:37:3F:FD:8D:EA:46:F5:77:43:C7:B6:E9:9C:2B:59:24:F9:C4:A8
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 019875D13AF1B16A747A09E6D1FB6A9AFC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number: 0E4F
Signing time: Mon 04 Aug 2025 16:01:42 +0000
Manifest this update: Mon 04 Aug 2025 16:01:42 +0000
Manifest next update: Tue 05 Aug 2025 16:01:42 +0000
Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: aLZIGDWIcLjYXicUfLem+nwRTc4yIT0gj1aIsyCJKXg=)
2: aeqC4EE0KUZ0Hdgey5muRSCYEvc.roa (hash: aH7XcxnHv3qEq7LQXqlBVrjotePFAy5nc/77ZI52Ock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:3a:f1:b1:6a:74:7a:09:e6:d1:fb:6a:9a:fc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Aug 4 16:01:42 2025 GMT
Not After : Aug 5 16:01:42 2025 GMT
Subject: CN=8a373ffd8dea46f57743c7b6e99c2b5924f9c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:1d:f0:00:f6:80:06:41:7b:1b:40:93:af:
d2:fd:b3:3b:ef:d9:5b:ab:5a:50:63:21:e2:32:36:
19:20:ff:31:78:a5:8d:7f:20:73:59:a3:a8:fb:42:
9f:b9:f3:2f:73:1a:13:20:fb:70:23:91:92:6e:c2:
5f:d5:5b:b8:b6:f1:e8:9f:9d:44:2b:6a:7a:ed:83:
a1:9c:6b:99:59:ca:44:c9:ab:43:65:3f:a0:59:ad:
8d:d6:63:e1:e9:7d:b0:fe:f3:78:bc:4e:3e:0b:39:
13:fa:2c:b7:68:bf:94:a4:5f:a8:cc:97:bb:ea:93:
5b:17:3d:46:ff:93:d8:41:01:12:73:08:d5:dc:38:
ba:c9:ce:4a:ee:19:4b:03:83:1e:ad:7f:9e:23:35:
b0:1f:ce:a9:5e:1f:d8:cc:ed:52:fc:24:d0:9b:b4:
c3:44:d2:54:30:a8:6f:3d:8c:45:f4:fd:6e:8e:1e:
39:99:c0:2e:92:ad:ba:8a:86:47:dc:85:e4:65:9c:
f6:e6:0b:2a:e9:8a:48:3d:d7:08:4a:4e:23:c9:a0:
7b:9a:78:d2:3b:a1:89:0e:4f:df:06:30:d6:2b:89:
20:1a:46:57:33:99:ed:60:a8:40:e6:a6:1d:3a:60:
28:d3:b4:b4:d8:d2:9a:6c:d6:7d:ce:6d:8a:6e:47:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:3F:FD:8D:EA:46:F5:77:43:C7:B6:E9:9C:2B:59:24:F9:C4:A8
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:29:f3:c1:ff:68:35:41:12:98:ff:e5:c2:4e:13:ad:a5:91:
a1:2f:63:aa:9d:f0:e0:4a:28:6b:34:7c:f6:b3:34:a8:d8:4a:
9d:11:a1:5f:ad:bb:07:61:2d:dc:a8:05:eb:86:19:62:be:ce:
28:90:df:13:8c:70:9e:9b:0c:05:5f:c2:af:81:6f:85:68:61:
45:75:d4:4e:41:d7:e8:f3:80:ec:1c:e9:57:fe:91:e1:93:4b:
2a:45:62:d3:97:cb:b6:7c:a9:28:90:e4:87:99:b4:1f:a4:18:
fa:13:04:5d:77:a3:19:c6:7c:fd:59:2c:84:e3:64:be:9e:1e:
61:99:17:7d:d1:34:18:a5:7b:a5:22:7f:01:c6:05:58:05:b9:
1a:dd:29:6c:43:43:c2:7c:39:68:da:35:2b:c6:ef:60:11:ee:
1c:c8:56:57:69:c6:4f:c3:3a:4d:a2:2f:57:4a:e3:7c:09:d9:
d8:ea:a5:68:8a:3e:42:46:cf:c8:0b:99:18:52:a2:c7:18:12:
c4:57:d2:fb:8a:a2:55:a2:55:b5:c6:79:fd:08:c3:0c:d2:c2:
44:5c:3a:2d:fd:43:9d:13:9b:b0:c4:23:8e:42:65:2f:7a:37:
f9:db:5d:72:94:9e:88:0e:90:89:b9:9e:60:db:b7:e1:79:3a:
a9:07:36:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10TrxsWp0egnm0ftqmvx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzZlZmYyNjg4NGJmMDA2MjA3ZDcyMmIzYjAxYTQ0ZDJi
NTYxOTkwHhcNMjUwODA0MTYwMTQyWhcNMjUwODA1MTYwMTQyWjAzMTEwLwYDVQQD
Eyg4YTM3M2ZmZDhkZWE0NmY1Nzc0M2M3YjZlOTljMmI1OTI0ZjljNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGYd8AD2gAZBextAk6/S/bM779lb
q1pQYyHiMjYZIP8xeKWNfyBzWaOo+0KfufMvcxoTIPtwI5GSbsJf1Vu4tvHon51E
K2p67YOhnGuZWcpEyatDZT+gWa2N1mPh6X2w/vN4vE4+CzkT+iy3aL+UpF+ozJe7
6pNbFz1G/5PYQQEScwjV3Di6yc5K7hlLA4MerX+eIzWwH86pXh/YzO1S/CTQm7TD
RNJUMKhvPYxF9P1ujh45mcAukq26ioZH3IXkZZz25gsq6YpIPdcISk4jyaB7mnjS
O6GJDk/fBjDWK4kgGkZXM5ntYKhA5qYdOmAo07S02NKabNZ9zm2KbkdzeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo3P/2N6kb1d0PHtumcK1kk+cSoMB8GA1UdIwQY
MBaAFFx27/JohL8AYgfXIrOwGkTStWGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgt
NjYwNDExYjlkMTY3LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgtNjYwNDExYjlkMTY3
LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVynzwf9o
NUESmP/lwk4TraWRoS9jqp3w4EooazR89rM0qNhKnRGhX627B2Et3KgF64YZYr7O
KJDfE4xwnpsMBV/Cr4FvhWhhRXXUTkHX6POA7BzpV/6R4ZNLKkVi05fLtnypKJDk
h5m0H6QY+hMEXXejGcZ8/VkshONkvp4eYZkXfdE0GKV7pSJ/AcYFWAW5Gt0pbEND
wnw5aNo1K8bvYBHuHMhWV2nGT8M6TaIvV0rjfAnZ2OqlaIo+QkbPyAuZGFKixxgS
xFfS+4qiVaJVtcZ5/QjDDNLCRFw6Lf1DnRObsMQjjkJlL3o3+dtdcpSeiA6Qibme
YNu34Xk6qQc2qA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:15:44 2025 by rpki-client