Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: A0MnKufYrJeeyrwzaNbayPou0gLtN+bjYsVirT+KH4k=
Subject key identifier: 46:22:67:BB:B5:59:C9:EC:B5:4C:BF:18:D6:5A:0C:B2:3B:62:7F:AA
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 01987C77539380090EC4AF410394473FC9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 049A
Signing time: Tue 05 Aug 2025 23:00:51 +0000
Manifest this update: Tue 05 Aug 2025 23:00:51 +0000
Manifest next update: Wed 06 Aug 2025 23:00:51 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: 7GJNGo8lQqV5G73yVHhga7Lg0GmTyp1WKprn7V+/EZQ=)
2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:53:93:80:09:0e:c4:af:41:03:94:47:3f:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Aug 5 23:00:51 2025 GMT
Not After : Aug 6 23:00:51 2025 GMT
Subject: CN=462267bbb559c9ecb54cbf18d65a0cb23b627faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:ad:f1:b1:bb:87:8d:b3:19:1a:ca:d4:79:
5f:00:c7:1f:80:b7:71:1c:d8:c7:1d:cb:11:a7:bb:
f5:44:8a:97:95:5f:e6:44:77:0d:a5:1d:f6:d1:8d:
71:d0:03:b6:8b:87:f5:3d:eb:2c:9e:95:86:74:b3:
9e:3b:a3:d8:64:ac:db:87:74:4b:e8:fc:51:3e:62:
e2:22:7f:90:cc:71:70:4a:89:90:1b:6c:8e:12:2e:
42:4f:4d:0a:8f:51:d0:e1:f6:17:b5:9c:fe:19:28:
ee:22:66:5f:a4:e3:52:da:7b:33:d1:9b:4a:62:54:
77:97:3d:be:8b:25:97:46:90:15:59:90:43:2d:d4:
24:f2:33:ae:a9:5f:49:5b:68:27:a3:87:77:35:6d:
68:6d:ae:0a:45:f9:7a:26:3b:3a:9d:f2:76:0a:7f:
f9:8b:de:f8:32:98:13:a9:3f:f3:34:27:e0:3e:a5:
20:a1:c6:3d:73:01:c5:b5:13:5c:f9:68:eb:de:21:
06:38:0e:16:c6:9d:da:b0:a8:32:9a:79:71:97:4a:
ad:d5:51:13:15:1c:6d:c8:c0:ee:61:ae:80:c3:79:
de:6a:c4:f7:b3:5f:1e:e3:94:91:1c:05:93:a4:b6:
bf:bd:63:6b:f7:a7:f3:96:67:36:38:18:50:0f:73:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:67:BB:B5:59:C9:EC:B5:4C:BF:18:D6:5A:0C:B2:3B:62:7F:AA
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:42:2f:5f:02:ed:ee:ce:9f:69:9b:b6:ca:3f:0b:b0:47:4c:
d2:c9:3b:d5:11:7e:06:6c:75:a9:04:71:d5:55:00:a9:a2:f9:
fd:22:08:78:26:89:41:cb:7a:b8:0b:5a:ec:08:0a:79:43:cf:
29:34:ed:42:08:2c:26:eb:c7:08:e0:96:dc:82:5a:6c:1c:db:
45:d9:90:6d:c0:58:e3:52:c0:16:41:82:c2:6e:09:36:bb:8a:
8b:6f:83:97:61:2b:26:43:94:5a:47:08:37:13:ed:73:48:2d:
bf:48:c4:16:54:ca:2b:26:fa:bb:04:93:ec:a8:89:65:3e:30:
25:2b:b2:20:c2:72:f4:ac:6b:72:ce:95:70:b9:dd:40:50:36:
66:1c:aa:ed:88:a9:5b:42:43:85:f0:38:4e:ec:a7:4e:bd:57:
df:a7:aa:d0:f1:22:0c:26:d4:97:30:81:8a:1f:59:3d:04:ef:
c6:0a:2a:c2:06:16:a6:e4:a7:bf:8c:ef:60:10:58:5d:b7:ea:
2b:50:94:1a:cf:ea:85:45:17:3d:e2:ce:07:97:56:f5:6a:d4:
0b:3f:08:b3:8b:42:0d:35:a5:1b:1d:ac:cf:34:f3:5b:01:b9:
5c:a4:85:ff:b7:1c:84:74:8b:fa:bb:d0:88:65:d9:18:3f:f8:
dc:69:ee:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d1OTgAkOxK9BA5RHP8n/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZjEzMTVjM2M5MjM5ZThlMWY0YWEwYzViMDc0M2MzZGE1
ZDc3ZTMwHhcNMjUwODA1MjMwMDUxWhcNMjUwODA2MjMwMDUxWjAzMTEwLwYDVQQD
Eyg0NjIyNjdiYmI1NTljOWVjYjU0Y2JmMThkNjVhMGNiMjNiNjI3ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKt8bG7h42zGRrK1HlfAMcfgLdx
HNjHHcsRp7v1RIqXlV/mRHcNpR320Y1x0AO2i4f1PessnpWGdLOeO6PYZKzbh3RL
6PxRPmLiIn+QzHFwSomQG2yOEi5CT00Kj1HQ4fYXtZz+GSjuImZfpONS2nsz0ZtK
YlR3lz2+iyWXRpAVWZBDLdQk8jOuqV9JW2gno4d3NW1oba4KRfl6Jjs6nfJ2Cn/5
i974MpgTqT/zNCfgPqUgocY9cwHFtRNc+Wjr3iEGOA4Wxp3asKgymnlxl0qt1VET
FRxtyMDuYa6Aw3neasT3s18e45SRHAWTpLa/vWNr96fzlmc2OBhQD3Nm5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYiZ7u1WcnstUy/GNZaDLI7Yn+qMB8GA1UdIwQY
MBaAFF7xMVw8kjno4fSqDFsHQ8PaXXfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZFeFhEeVNPZWpoOUtvTVd3ZER3OXBkZC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82N2MzZWEtZWQ2YS00YzI5LWExYWMt
OGE4YTdmZmRkOWZkLzEvWHZFeFhEeVNPZWpoOUtvTVd3ZER3OXBkZC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82N2MzZWEtZWQ2YS00YzI5LWExYWMtOGE4YTdmZmRkOWZk
LzEvWHZFeFhEeVNPZWpoOUtvTVd3ZER3OXBkZC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikIvXwLt
7s6faZu2yj8LsEdM0sk71RF+Bmx1qQRx1VUAqaL5/SIIeCaJQct6uAta7AgKeUPP
KTTtQggsJuvHCOCW3IJabBzbRdmQbcBY41LAFkGCwm4JNruKi2+Dl2ErJkOUWkcI
NxPtc0gtv0jEFlTKKyb6uwST7KiJZT4wJSuyIMJy9Kxrcs6VcLndQFA2Zhyq7Yip
W0JDhfA4TuynTr1X36eq0PEiDCbUlzCBih9ZPQTvxgoqwgYWpuSnv4zvYBBYXbfq
K1CUGs/qhUUXPeLOB5dW9WrUCz8Is4tCDTWlGx2szzTzWwG5XKSF/7cchHSL+rvQ
iGXZGD/43GnuGQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:25 2025 by rpki-client