Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: niT+C94RecStJULzLjxY+ZYj639iY5X2Mr4Apqp78Lg=
Subject key identifier: 81:16:53:92:51:B7:BF:0F:16:86:A3:CA:16:5E:76:A5:59:AB:EE:94
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 01989335B42BA8650FB54614A720AF17AF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 0197
Signing time: Sun 10 Aug 2025 09:00:26 +0000
Manifest this update: Sun 10 Aug 2025 09:00:26 +0000
Manifest next update: Mon 11 Aug 2025 09:00:26 +0000
Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: /d1/RtT1/p403vpk3JhCJ2tdhDecBPMyyD7EkUyLJ1U=)
2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:b4:2b:a8:65:0f:b5:46:14:a7:20:af:17:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Aug 10 09:00:26 2025 GMT
Not After : Aug 11 09:00:26 2025 GMT
Subject: CN=8116539251b7bf0f1686a3ca165e76a559abee94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:a9:a7:f2:cb:8c:15:8c:67:9b:28:98:3c:
a5:a3:42:ab:2b:c1:58:0b:d4:58:46:23:57:c3:f1:
fb:06:f4:de:83:2c:7b:6f:5a:35:44:f3:b4:eb:07:
fc:31:3a:e2:57:c7:1f:b4:96:a4:7a:62:80:c0:3a:
27:ea:08:5c:e9:68:6f:f9:22:27:ec:bd:cb:68:ad:
b3:86:ec:c5:50:eb:25:d2:4a:4b:09:fa:e5:9e:1c:
be:d3:96:c8:8c:99:d9:47:a3:d9:62:e1:ce:dd:56:
b1:b5:98:1d:41:e3:6c:69:da:9b:b0:6f:7f:13:e7:
ed:b6:17:1f:23:6a:95:9a:e9:5c:10:68:e6:6a:ae:
37:0d:72:33:09:5c:75:f7:39:f8:ad:1b:0b:8f:b5:
23:d8:3e:06:d1:3b:73:ba:9d:d6:b9:89:e5:96:f5:
bc:1f:97:64:3f:14:93:57:8a:26:e4:76:49:12:9e:
5c:2a:c1:0c:33:6d:cf:42:d6:41:c2:1b:00:f9:62:
b6:35:d6:f6:fd:4c:20:3c:3a:b9:1d:6a:24:bf:70:
2f:f9:ed:0b:5a:ac:33:37:50:fc:8e:25:88:51:59:
2f:74:56:6f:1f:29:9b:9a:87:b7:56:3c:94:f8:b7:
32:bc:9e:f1:a4:3e:41:b0:5b:dc:25:a8:c5:70:6d:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:16:53:92:51:B7:BF:0F:16:86:A3:CA:16:5E:76:A5:59:AB:EE:94
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:68:f7:bb:1b:da:65:fb:41:97:a6:97:fc:a4:ba:49:47:
ef:9f:e4:c0:e9:9a:4c:c3:26:9e:19:19:ee:de:cd:70:ce:d9:
80:bd:90:55:83:e4:08:36:2c:d5:e7:25:f9:30:ce:98:48:19:
14:b1:f8:bd:2f:30:44:52:54:6c:cd:fd:13:8a:f5:18:29:26:
4b:d4:e0:db:8a:af:ed:75:aa:c4:58:b2:56:3f:2b:7c:4a:2f:
34:0e:f4:f0:f8:c6:f8:63:85:6b:4e:89:f4:fa:ca:f3:68:01:
c0:69:05:ca:72:ea:b0:a5:15:b9:9c:ef:34:28:b4:81:34:a5:
95:21:a4:15:18:97:41:fe:98:65:f6:e4:c0:37:4c:5d:9d:96:
72:04:59:fd:b0:27:77:e8:f0:67:f1:01:d0:d1:d1:20:f5:a3:
af:ec:f5:9f:ce:ae:56:1b:8f:29:bd:0c:67:d3:2e:44:63:63:
a1:2b:78:89:0a:85:c4:c0:cb:5d:77:d6:b4:f9:4c:45:ec:66:
c2:03:b9:90:ac:b9:a5:80:16:63:82:85:06:fa:bf:20:bc:ce:
14:65:f2:37:aa:df:1a:1e:61:5b:ec:90:9c:af:d4:9f:17:aa:
fe:ee:1b:13:9f:1f:90:28:59:7b:07:2f:9e:07:b4:88:bc:cb:
e0:df:96:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNbQrqGUPtUYUpyCvF69VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWFkODg5OWQ1YmM4NTQ5ZWVkZDNlNTlmMmQwZDYyMTM1
Y2NmMTQwHhcNMjUwODEwMDkwMDI2WhcNMjUwODExMDkwMDI2WjAzMTEwLwYDVQQD
Eyg4MTE2NTM5MjUxYjdiZjBmMTY4NmEzY2ExNjVlNzZhNTU5YWJlZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk+pp/LLjBWMZ5somDylo0KrK8FY
C9RYRiNXw/H7BvTegyx7b1o1RPO06wf8MTriV8cftJakemKAwDon6ghc6Whv+SIn
7L3LaK2zhuzFUOsl0kpLCfrlnhy+05bIjJnZR6PZYuHO3VaxtZgdQeNsadqbsG9/
E+ftthcfI2qVmulcEGjmaq43DXIzCVx19zn4rRsLj7Uj2D4G0Ttzup3WuYnllvW8
H5dkPxSTV4om5HZJEp5cKsEMM23PQtZBwhsA+WK2Ndb2/UwgPDq5HWokv3Av+e0L
WqwzN1D8jiWIUVkvdFZvHymbmoe3VjyU+LcyvJ7xpD5BsFvcJajFcG2F0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEWU5JRt78PFoajyhZedqVZq+6UMB8GA1UdIwQY
MBaAFF2a2ImdW8hUnu3T5Z8tDWITXM8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQt
MDkzMWZkM2U1YmVlLzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQtMDkzMWZkM2U1YmVl
LzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJ9o97sb
2mX7QZeml/ykuklH75/kwOmaTMMmnhkZ7t7NcM7ZgL2QVYPkCDYs1ecl+TDOmEgZ
FLH4vS8wRFJUbM39E4r1GCkmS9Tg24qv7XWqxFiyVj8rfEovNA708PjG+GOFa06J
9PrK82gBwGkFynLqsKUVuZzvNCi0gTSllSGkFRiXQf6YZfbkwDdMXZ2WcgRZ/bAn
d+jwZ/EB0NHRIPWjr+z1n86uVhuPKb0MZ9MuRGNjoSt4iQqFxMDLXXfWtPlMRexm
wgO5kKy5pYAWY4KFBvq/ILzOFGXyN6rfGh5hW+yQnK/Unxeq/u4bE58fkChZewcv
nge0iLzL4N+WfQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:30:52 2025 by rpki-client