Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: yfJhSU8/CF2ZQaehwhceLq5MFe0oxe+V9LR9FMsFQm8=
Subject key identifier: B8:E3:47:60:23:14:14:DD:2E:25:EB:1F:19:21:CA:91:14:01:0C:8F
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01987AC04785DCBD1414ADF53B58E56DB241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 15:01:18 +0000
Manifest this update: Tue 05 Aug 2025 15:01:18 +0000
Manifest next update: Wed 06 Aug 2025 15:01:18 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: dUjwxoyMT1v+LP9awFd8KnbhoYCZTmO4VBFUmFS5X+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:47:85:dc:bd:14:14:ad:f5:3b:58:e5:6d:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Aug 5 15:01:18 2025 GMT
Not After : Aug 6 15:01:18 2025 GMT
Subject: CN=b8e34760231414dd2e25eb1f1921ca9114010c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:09:a7:e3:e8:a2:05:a8:55:48:e6:0b:a6:
18:3e:c5:25:8f:85:3a:01:81:45:b9:80:ae:11:a8:
ee:f1:48:51:04:d2:b1:a0:18:8a:8b:98:69:2c:3a:
8d:7b:08:0a:3b:26:2f:8d:3a:a8:a5:3a:92:b1:d1:
2c:46:b6:3d:48:46:95:f1:3a:a0:d7:64:49:06:cc:
e2:06:21:95:47:58:76:e2:f2:99:1d:1e:1a:f3:37:
a8:ca:f9:53:c2:37:c9:36:36:6c:84:47:f5:51:ff:
d3:f6:dd:0a:67:ae:5f:5e:6b:c2:90:f5:04:3c:b6:
ca:6d:11:e9:b5:ab:13:d8:41:4a:3e:1b:d4:82:4f:
9b:fa:54:6b:96:48:74:31:00:18:df:82:f1:e4:52:
f8:75:9f:cb:4c:1f:27:da:24:54:83:8f:b8:9c:db:
e8:22:a4:60:fd:b6:c5:34:34:fb:0f:82:9e:25:25:
5d:4d:2e:6a:a6:8f:82:43:ec:ba:65:15:e6:de:62:
79:05:ff:9f:b2:9c:bb:fb:c2:b8:94:2e:a2:52:7e:
e6:37:60:bf:9e:bf:5e:3a:4c:79:7c:b4:fa:05:11:
07:ad:39:00:43:8e:b8:54:7a:15:99:2c:82:d4:5e:
74:3f:fd:df:9e:ca:0a:be:9a:d2:f1:19:ff:ee:fb:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:47:60:23:14:14:DD:2E:25:EB:1F:19:21:CA:91:14:01:0C:8F
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:22:19:72:96:aa:4a:01:72:c0:36:6e:29:c2:04:7f:8f:17:
2d:9b:59:ea:03:7b:2d:f6:38:a9:fa:7b:ed:4c:24:28:fd:d1:
59:95:3b:b5:52:f1:13:75:62:d1:96:94:9b:7f:e3:8e:15:64:
60:84:52:7e:91:9a:d0:bd:29:e7:9d:bb:ab:a4:59:0c:d9:ae:
75:39:52:11:44:55:06:fc:65:65:6d:c5:1e:95:2b:c7:b0:a5:
08:52:c5:a2:78:5e:82:c7:f6:5c:6a:ec:f4:b9:1d:f4:83:0d:
b3:70:03:6c:f6:a7:a7:82:84:b7:d6:8b:54:c3:7c:27:fd:1b:
e9:a9:f8:bf:a8:61:22:ef:94:c6:78:53:30:db:50:e6:d1:23:
ab:4d:4a:0d:71:10:5b:e7:10:5b:1e:42:84:44:5b:49:a2:d8:
9a:b1:4a:c0:6d:81:fb:ba:60:73:82:81:07:0d:d4:49:de:26:
20:94:10:68:84:95:74:45:ce:b0:5a:fd:1a:bf:db:97:a0:a8:
56:9d:83:b3:23:15:35:42:0f:fd:30:c0:c0:52:7a:c3:55:b4:
66:f0:9f:97:ff:dc:c6:1e:4a:c3:78:67:d0:e1:0b:cd:51:c7:
aa:85:e2:98:03:47:d2:c4:5c:c1:2f:c5:41:f5:4e:f8:b1:4f:
47:c7:d4:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6wEeF3L0UFK31O1jlbbJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWQ4Njk3NGE3YjYyNDE5MmVjOGQ4MzRjZjI5MDZlMTMw
MmU0MzEwHhcNMjUwODA1MTUwMTE4WhcNMjUwODA2MTUwMTE4WjAzMTEwLwYDVQQD
EyhiOGUzNDc2MDIzMTQxNGRkMmUyNWViMWYxOTIxY2E5MTE0MDEwYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1EJp+PoogWoVUjmC6YYPsUlj4U6
AYFFuYCuEaju8UhRBNKxoBiKi5hpLDqNewgKOyYvjTqopTqSsdEsRrY9SEaV8Tqg
12RJBsziBiGVR1h24vKZHR4a8zeoyvlTwjfJNjZshEf1Uf/T9t0KZ65fXmvCkPUE
PLbKbRHptasT2EFKPhvUgk+b+lRrlkh0MQAY34Lx5FL4dZ/LTB8n2iRUg4+4nNvo
IqRg/bbFNDT7D4KeJSVdTS5qpo+CQ+y6ZRXm3mJ5Bf+fspy7+8K4lC6iUn7mN2C/
nr9eOkx5fLT6BREHrTkAQ464VHoVmSyC1F50P/3fnsoKvprS8Rn/7vsljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjjR2AjFBTdLiXrHxkhypEUAQyPMB8GA1UdIwQY
MBaAFFxdhpdKe2JBkuyNg0zykG4TAuQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEt
YmQ4MDJmYzRhYTk0LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEtYmQ4MDJmYzRhYTk0
LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyIZcpaq
SgFywDZuKcIEf48XLZtZ6gN7LfY4qfp77UwkKP3RWZU7tVLxE3Vi0ZaUm3/jjhVk
YIRSfpGa0L0p5527q6RZDNmudTlSEURVBvxlZW3FHpUrx7ClCFLFonhegsf2XGrs
9Lkd9IMNs3ADbPanp4KEt9aLVMN8J/0b6an4v6hhIu+UxnhTMNtQ5tEjq01KDXEQ
W+cQWx5ChERbSaLYmrFKwG2B+7pgc4KBBw3USd4mIJQQaISVdEXOsFr9Gr/bl6Co
Vp2DsyMVNUIP/TDAwFJ6w1W0ZvCfl//cxh5Kw3hn0OELzVHHqoXimANH0sRcwS/F
QfVO+LFPR8fUQg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:42 2025 by rpki-client