Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json)
Hash identifier: eAFFMUPPVpVAo8VQKGtWAWq0vTf2wg11C86H50tFAV8=
Subject key identifier: 76:F1:20:70:42:07:4D:85:91:FC:96:BE:EF:03:2C:E7:E4:CC:D6:02
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial: 019872CF393A405BAEDF00C8EB9F2D2AFB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
Manifest number: 0DCB
Signing time: Mon 04 Aug 2025 02:00:39 +0000
Manifest this update: Mon 04 Aug 2025 02:00:39 +0000
Manifest next update: Tue 05 Aug 2025 02:00:39 +0000
Files and hashes: 1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: ge94Ia/oMTkrAHiBIoyP/85tRGLhWIcBeDbph5cMMsI=)
2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:39:3a:40:5b:ae:df:00:c8:eb:9f:2d:2a:fb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Validity
Not Before: Aug 4 02:00:39 2025 GMT
Not After : Aug 5 02:00:39 2025 GMT
Subject: CN=76f1207042074d8591fc96beef032ce7e4ccd602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:03:6d:76:c4:1d:79:16:a6:93:da:ea:95:
03:f3:c5:81:e3:9c:ad:34:68:11:a5:d1:d5:84:d4:
6c:22:c6:c8:5e:d5:c2:1b:df:76:c8:b8:a7:cd:af:
dd:61:d1:38:ff:60:54:87:50:d9:11:48:a7:87:71:
36:80:86:bc:93:0c:f6:cd:15:cc:54:62:ad:eb:e1:
9f:33:c3:be:91:c3:d6:bf:9e:ff:b7:99:46:00:5b:
75:05:92:05:83:4f:49:18:91:cb:0d:eb:7a:f0:52:
e0:41:55:fb:6f:fa:26:58:e6:22:8b:d3:9a:7f:44:
77:2c:72:f7:aa:3e:30:4a:d6:6e:9f:51:50:47:fd:
44:90:8e:cc:3e:90:3e:23:de:f2:e4:88:ad:6f:47:
f6:90:ae:40:b0:00:f2:8d:10:90:d2:54:fa:64:14:
ed:12:6d:ed:ee:cf:ae:09:06:3d:3d:d6:2d:b9:cd:
97:20:ed:3b:b5:a7:89:48:17:f5:a9:5a:8b:ff:01:
b4:a9:49:a7:3c:2d:c1:ee:53:eb:07:f7:17:7b:0b:
74:5f:39:ab:5b:b2:f6:cb:8d:5d:c7:d2:e0:89:87:
03:bd:87:9e:98:33:ed:09:aa:f1:6e:cc:40:79:e9:
93:61:e3:72:aa:78:c1:96:96:41:9c:2e:4f:c4:68:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:20:70:42:07:4D:85:91:FC:96:BE:EF:03:2C:E7:E4:CC:D6:02
X509v3 Authority Key Identifier:
keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:46:4c:5e:3e:4e:d1:bb:e0:93:13:67:3a:bb:60:5d:ef:
e7:8d:b3:f1:94:e0:6d:dc:ec:d9:d3:ce:a1:61:0a:e2:55:7c:
25:63:fa:12:2b:a6:61:12:04:30:3d:f2:14:66:bb:82:be:00:
8d:f8:8f:68:24:fd:9c:8b:5c:26:5d:0a:83:44:09:67:76:96:
18:82:77:dd:ba:75:90:b9:15:7a:34:3b:ff:42:30:e9:86:76:
3c:37:72:e9:1a:f8:ab:38:f7:95:e3:46:55:09:31:d8:67:78:
ef:91:62:a9:53:f1:e4:bc:8f:ec:38:f0:82:f0:51:4e:dc:ef:
8d:41:03:f4:88:c6:3d:ba:fd:e8:9e:61:86:18:4b:e4:41:45:
a2:7c:f2:32:36:5a:0b:cf:ae:59:d6:af:9d:42:ff:7d:71:e8:
7d:dc:f0:7c:17:26:f6:70:3e:a5:de:b9:07:cb:37:3d:ae:bf:
9d:93:a0:dc:21:35:69:63:8a:d6:29:91:81:b3:fe:9d:68:9e:
14:48:a6:89:3e:d7:0a:f4:cd:2a:51:e8:21:52:a2:ae:ab:ff:
6b:ac:29:f3:6f:67:58:7a:f0:61:d2:e8:71:82:7c:bf:f9:af:
8e:16:59:7f:62:f8:53:c0:cf:44:c7:05:d6:df:f0:85:d8:06:
1c:57:11:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzzk6QFuu3wDI658tKvsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2E3ODM1Mzc3YjllODQ5ZmU3YzMzZjlmY2E0NTcyZDkw
MjY3M2YwHhcNMjUwODA0MDIwMDM5WhcNMjUwODA1MDIwMDM5WjAzMTEwLwYDVQQD
Eyg3NmYxMjA3MDQyMDc0ZDg1OTFmYzk2YmVlZjAzMmNlN2U0Y2NkNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8ADbXbEHXkWppPa6pUD88WB45yt
NGgRpdHVhNRsIsbIXtXCG992yLinza/dYdE4/2BUh1DZEUinh3E2gIa8kwz2zRXM
VGKt6+GfM8O+kcPWv57/t5lGAFt1BZIFg09JGJHLDet68FLgQVX7b/omWOYii9Oa
f0R3LHL3qj4wStZun1FQR/1EkI7MPpA+I97y5Iitb0f2kK5AsADyjRCQ0lT6ZBTt
Em3t7s+uCQY9PdYtuc2XIO07taeJSBf1qVqL/wG0qUmnPC3B7lPrB/cXewt0Xzmr
W7L2y41dx9LgiYcDvYeemDPtCarxbsxAeemTYeNyqnjBlpZBnC5PxGjxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbxIHBCB02FkfyWvu8DLOfkzNYCMB8GA1UdIwQY
MBaAFF46eDU3e56En+fDP5/KRXLZAmc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5Yjgt
MDU1YjFiMGU2MGY0LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5YjgtMDU1YjFiMGU2MGY0
LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfRGTF4+
TtG74JMTZzq7YF3v542z8ZTgbdzs2dPOoWEK4lV8JWP6EiumYRIEMD3yFGa7gr4A
jfiPaCT9nItcJl0Kg0QJZ3aWGIJ33bp1kLkVejQ7/0Iw6YZ2PDdy6Rr4qzj3leNG
VQkx2Gd475FiqVPx5LyP7DjwgvBRTtzvjUED9IjGPbr96J5hhhhL5EFFonzyMjZa
C8+uWdavnUL/fXHofdzwfBcm9nA+pd65B8s3Pa6/nZOg3CE1aWOK1imRgbP+nWie
FEimiT7XCvTNKlHoIVKirqv/a6wp829nWHrwYdLocYJ8v/mvjhZZf2L4U8DPRMcF
1t/whdgGHFcRyg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:54 2025 by rpki-client