Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: Pqrvp25AuYUkRuGga+VCUhnMLNcsv75CnvFAFgEGg1s=
Subject key identifier: 5C:95:45:43:4B:44:ED:9F:15:74:4C:F0:55:34:7E:83:B6:74:80:CD
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0198952518E5760E70FFB6ACFD91639588FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 0243
Signing time: Sun 10 Aug 2025 18:01:32 +0000
Manifest this update: Sun 10 Aug 2025 18:01:32 +0000
Manifest next update: Mon 11 Aug 2025 18:01:32 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: jIEDtmvOvv3C60wdU2K0of0/sVGc6ZPWtxuHUZI2zDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:18:e5:76:0e:70:ff:b6:ac:fd:91:63:95:88:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Aug 10 18:01:32 2025 GMT
Not After : Aug 11 18:01:32 2025 GMT
Subject: CN=5c9545434b44ed9f15744cf055347e83b67480cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:94:a6:0a:57:32:a9:01:b1:4a:2a:5e:43:
48:40:08:1f:87:01:23:ea:d2:5d:ea:14:35:c0:da:
ac:26:1a:cc:2d:01:bb:ef:41:99:f9:08:b0:f3:68:
60:02:87:8b:c4:ce:3d:12:70:96:26:7f:81:83:0f:
ea:c0:1b:61:6d:b4:86:85:84:7b:70:32:b2:3f:81:
d6:20:65:db:64:1d:43:15:54:97:8c:a8:8e:b1:8b:
49:53:12:70:f0:2e:74:63:84:94:4d:d5:ee:94:1d:
cc:19:55:bb:e3:7f:12:cb:57:6c:d5:c1:f0:12:ac:
d2:eb:c5:28:e9:7f:ec:cd:f0:aa:38:51:41:08:48:
4f:ee:4f:31:99:03:2d:99:27:c3:90:b7:74:7c:9e:
0f:84:10:aa:6f:03:65:f5:18:71:47:a0:af:c1:18:
df:51:3b:c7:70:96:16:79:ee:98:c0:66:af:eb:95:
9f:b2:96:bd:2d:fd:6a:93:da:51:7f:0b:e3:2c:5f:
f3:8e:f5:e3:0e:66:ec:a4:cf:ba:4b:61:a9:ff:03:
c9:e1:23:43:05:23:a0:33:d7:ab:6f:b7:a8:ae:42:
56:18:90:f4:cd:88:27:13:27:8c:99:13:97:34:68:
e5:16:b9:89:67:f2:6a:07:36:8e:75:ec:e4:c7:4d:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:45:43:4B:44:ED:9F:15:74:4C:F0:55:34:7E:83:B6:74:80:CD
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:1f:19:d4:a5:a8:cb:cf:9a:86:25:0b:20:7b:ba:ba:f7:
00:58:36:ef:e3:6b:16:32:15:62:8c:8c:d6:03:48:00:06:92:
ac:8e:50:04:79:37:82:2c:bf:7a:47:96:3e:f5:13:4d:af:cb:
1c:c6:03:81:11:56:0d:91:a5:74:f9:ff:ab:af:32:be:c7:46:
17:a4:5b:c2:a3:88:ad:77:cd:38:1d:29:93:b0:26:f3:2c:1f:
29:aa:87:65:7d:3d:ce:3e:7c:0a:4f:ea:86:31:70:9f:53:10:
30:2f:35:be:6d:02:8e:a4:0b:ca:9c:74:70:3d:c6:bd:8c:4f:
a2:6c:0a:38:88:e9:d8:a6:5e:1f:50:64:89:0a:e8:7b:5d:ff:
df:c6:bf:be:2f:70:ec:10:fd:dc:62:5c:b4:2c:c3:b3:fd:e7:
73:f3:47:6a:eb:0e:b7:fe:82:a8:08:7f:8f:55:c3:9a:b3:2e:
8a:cb:f4:0c:b7:6b:5f:94:15:08:ad:41:7e:ea:b0:78:18:27:
59:0c:6d:06:98:85:3f:dc:2d:88:b0:9b:73:b1:0d:dd:55:a5:
78:76:f2:26:49:87:1d:9a:4a:0e:09:f6:b9:89:a7:49:a3:34:
2d:9c:5d:80:11:04:b5:9c:12:cf:33:94:29:48:a0:b6:5b:b2:
b8:c3:0f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJRjldg5w/7as/ZFjlYj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5
MGJhMDkwHhcNMjUwODEwMTgwMTMyWhcNMjUwODExMTgwMTMyWjAzMTEwLwYDVQQD
Eyg1Yzk1NDU0MzRiNDRlZDlmMTU3NDRjZjA1NTM0N2U4M2I2NzQ4MGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJKUpgpXMqkBsUoqXkNIQAgfhwEj
6tJd6hQ1wNqsJhrMLQG770GZ+Qiw82hgAoeLxM49EnCWJn+Bgw/qwBthbbSGhYR7
cDKyP4HWIGXbZB1DFVSXjKiOsYtJUxJw8C50Y4SUTdXulB3MGVW7438Sy1ds1cHw
EqzS68Uo6X/szfCqOFFBCEhP7k8xmQMtmSfDkLd0fJ4PhBCqbwNl9RhxR6CvwRjf
UTvHcJYWee6YwGav65Wfspa9Lf1qk9pRfwvjLF/zjvXjDmbspM+6S2Gp/wPJ4SND
BSOgM9erb7eorkJWGJD0zYgnEyeMmROXNGjlFrmJZ/JqBzaOdezkx01lkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyVRUNLRO2fFXRM8FU0foO2dIDNMB8GA1UdIwQY
MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut
NjUwOTkyZjJhMTc0LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0
LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar0fGdSl
qMvPmoYlCyB7urr3AFg27+NrFjIVYoyM1gNIAAaSrI5QBHk3giy/ekeWPvUTTa/L
HMYDgRFWDZGldPn/q68yvsdGF6RbwqOIrXfNOB0pk7Am8ywfKaqHZX09zj58Ck/q
hjFwn1MQMC81vm0CjqQLypx0cD3GvYxPomwKOIjp2KZeH1BkiQroe13/38a/vi9w
7BD93GJctCzDs/3nc/NHausOt/6CqAh/j1XDmrMuisv0DLdrX5QVCK1BfuqweBgn
WQxtBpiFP9wtiLCbc7EN3VWleHbyJkmHHZpKDgn2uYmnSaM0LZxdgBEEtZwSzzOU
KUigtluyuMMPvQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:53 2025 by rpki-client