Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: 4XdTMPmdhA2ZkilvSoLjnkjJDYme8fv9doXnnaOA/6I=
Subject key identifier: 85:46:B7:91:AA:61:A4:56:37:0E:9F:9D:67:98:5D:6B:BD:6C:15:BE
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 019880F8D46D078ABED394AFCD8724ED99FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 20:00:47 +0000
Manifest this update: Wed 06 Aug 2025 20:00:47 +0000
Manifest next update: Thu 07 Aug 2025 20:00:47 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: P0+H0vih8YPDCSq/S4ITJ37I0DkMRAtBDPuAtV5faAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:d4:6d:07:8a:be:d3:94:af:cd:87:24:ed:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Aug 6 20:00:47 2025 GMT
Not After : Aug 7 20:00:47 2025 GMT
Subject: CN=8546b791aa61a456370e9f9d67985d6bbd6c15be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:9d:9e:d3:57:8b:28:a6:ce:c1:6a:ce:67:
55:ea:cb:4c:09:7b:d2:15:fe:9b:dc:be:59:13:c1:
f1:4c:15:a3:95:5f:cc:05:98:18:d1:bd:15:d6:c7:
cc:c4:2a:14:3e:eb:b8:b6:72:b7:5c:20:22:76:4b:
bd:3b:59:af:70:c2:5d:69:01:9d:77:89:61:c9:ac:
5b:17:49:2d:7d:e9:48:6a:a4:03:d6:31:1e:05:43:
35:1c:e6:30:73:78:9b:fb:96:49:97:ca:c0:75:0f:
0f:2f:fc:0d:50:3d:5a:f0:f7:c1:fc:74:99:3d:a8:
19:00:78:a7:74:94:05:16:89:5a:d8:18:37:f2:0f:
15:1b:2b:3b:6d:b8:43:7c:97:81:4d:59:4a:10:c2:
f4:91:4a:b0:1e:53:30:64:4c:95:05:e2:5e:e7:e0:
2d:40:80:86:9b:98:b5:fc:18:98:fb:60:43:cd:7d:
4b:14:f7:40:27:39:83:13:35:c9:15:c7:84:e6:fc:
4d:d4:3d:15:f6:f6:d1:e6:8b:72:dc:da:34:de:db:
76:ce:0d:80:3e:37:87:f5:e7:3e:31:2e:32:8a:37:
31:12:66:b4:a1:f3:ee:c1:56:2f:81:68:8d:ac:e1:
95:f5:48:d2:1a:4e:1e:13:f0:33:6d:36:21:c3:9a:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:B7:91:AA:61:A4:56:37:0E:9F:9D:67:98:5D:6B:BD:6C:15:BE
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:51:18:5e:cd:37:89:56:53:1b:a8:8a:43:2f:58:24:31:7a:
08:92:36:a7:1b:9d:ed:8d:b6:f2:23:ff:89:c4:d2:82:54:fe:
79:bd:f4:21:e1:e1:15:9d:b6:21:a8:1f:f8:b4:a7:0a:c0:d3:
0b:0b:16:12:62:df:54:9c:7f:03:7a:52:8e:1c:6e:66:d0:36:
5d:38:13:75:7f:57:77:49:89:e5:1b:5b:38:95:ba:97:a7:31:
ce:11:24:5d:ba:fa:f4:80:1e:83:16:81:b3:93:be:d0:48:11:
6e:d3:df:85:c0:a1:0f:46:8d:6a:92:6e:67:6d:40:3a:a8:90:
78:3a:e2:7b:16:81:34:35:ba:c6:ee:e7:aa:c1:c0:94:3f:7e:
e8:d2:d4:44:f9:40:a6:71:33:f4:8a:3e:0b:31:7b:39:ae:6f:
cb:be:2e:f2:27:28:9a:a3:48:35:9f:b0:03:6e:47:00:71:36:
f7:05:2e:6c:d4:b2:4e:cd:e7:92:f7:45:e1:0a:b7:6b:4f:3c:
23:f4:09:cf:d7:fa:ed:92:e1:c3:f7:3f:3e:6b:62:17:a4:03:
28:78:6b:56:5f:21:3a:01:94:bc:e4:b7:76:49:05:72:61:d8:
4d:d7:82:8a:44:01:e7:b9:b5:4b:04:3e:51:0f:9a:bd:cb:dc:
31:60:a8:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+NRtB4q+05SvzYck7Zn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5
ZDZmYjkwHhcNMjUwODA2MjAwMDQ3WhcNMjUwODA3MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg4NTQ2Yjc5MWFhNjFhNDU2MzcwZTlmOWQ2Nzk4NWQ2YmJkNmMxNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHadntNXiyimzsFqzmdV6stMCXvS
Ff6b3L5ZE8HxTBWjlV/MBZgY0b0V1sfMxCoUPuu4tnK3XCAidku9O1mvcMJdaQGd
d4lhyaxbF0ktfelIaqQD1jEeBUM1HOYwc3ib+5ZJl8rAdQ8PL/wNUD1a8PfB/HSZ
PagZAHindJQFFola2Bg38g8VGys7bbhDfJeBTVlKEML0kUqwHlMwZEyVBeJe5+At
QICGm5i1/BiY+2BDzX1LFPdAJzmDEzXJFceE5vxN1D0V9vbR5oty3No03tt2zg2A
PjeH9ec+MS4yijcxEma0ofPuwVYvgWiNrOGV9UjSGk4eE/AzbTYhw5qdeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVGt5GqYaRWNw6fnWeYXWu9bBW+MB8GA1UdIwQY
MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt
OWNhOGVhOTBlNjE3LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3
LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFEYXs03
iVZTG6iKQy9YJDF6CJI2pxud7Y228iP/icTSglT+eb30IeHhFZ22Iagf+LSnCsDT
CwsWEmLfVJx/A3pSjhxuZtA2XTgTdX9Xd0mJ5RtbOJW6l6cxzhEkXbr69IAegxaB
s5O+0EgRbtPfhcChD0aNapJuZ21AOqiQeDriexaBNDW6xu7nqsHAlD9+6NLURPlA
pnEz9Io+CzF7Oa5vy74u8icomqNINZ+wA25HAHE29wUubNSyTs3nkvdF4Qq3a088
I/QJz9f67ZLhw/c/PmtiF6QDKHhrVl8hOgGUvOS3dkkFcmHYTdeCikQB57m1SwQ+
UQ+avcvcMWCopA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:17 2025 by rpki-client