Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: Czvyq9h/omCM2pjHZrVr8Ag4rbNvVnor9waqg4UPkZU=
Subject key identifier: EB:F1:59:ED:D0:C6:06:1D:C8:D3:39:DD:BB:38:1D:EB:94:B5:AF:82
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 019873AAD28AE2140ACDF2532AF55DB4B26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0E48
Signing time: Mon 04 Aug 2025 06:00:31 +0000
Manifest this update: Mon 04 Aug 2025 06:00:31 +0000
Manifest next update: Tue 05 Aug 2025 06:00:31 +0000
Files and hashes: 1: PCViN5XjjWy3uXa6yVs2Quk_6To.roa (hash: Aquofks2bcfd5azy6+IqavH7O37I4bc+/mKKyjG/YPU=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: QSlLzr4rxnVr5Bf2GOtZtZiOpH7z3kjcByzdT5yrFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:d2:8a:e2:14:0a:cd:f2:53:2a:f5:5d:b4:b2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Aug 4 06:00:31 2025 GMT
Not After : Aug 5 06:00:31 2025 GMT
Subject: CN=ebf159edd0c6061dc8d339ddbb381deb94b5af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:09:b6:47:d9:fc:d1:50:49:90:36:b0:2d:
9f:a0:da:72:e8:9e:10:d3:17:c3:7f:9d:f2:5d:17:
4d:d9:35:43:68:3d:fe:4b:40:7a:57:9c:67:69:26:
68:b1:53:d4:fc:52:a7:77:6c:4a:80:da:4d:9a:f6:
7e:4d:c0:8a:0a:3a:dc:ae:e1:73:7f:1f:f3:1e:9f:
4b:dd:29:97:80:3c:6b:08:e9:ec:d0:09:6d:60:f1:
22:7d:30:5c:fc:55:ab:2f:dd:c2:04:13:fa:c9:d3:
20:3d:f3:35:0f:ae:80:eb:f1:db:fd:68:2d:b6:04:
4c:53:2a:04:08:79:0a:f6:23:bf:5e:df:90:77:5a:
68:b4:5d:98:32:f3:9d:8c:4d:4d:17:2f:c1:d3:b2:
11:e0:84:b5:70:6b:72:ff:9c:f8:a7:c4:c5:26:4a:
46:12:5c:8e:c6:51:10:a9:6c:ac:ff:b9:ce:2b:89:
c1:cf:e2:be:62:5a:6a:80:dc:34:af:c2:81:b3:6e:
49:6d:a9:26:33:c7:0c:e3:af:05:a7:c9:a8:5c:7b:
0a:46:e5:a1:bf:45:c0:c8:56:31:15:0f:d5:6e:6d:
59:d2:d8:86:01:68:37:40:dc:06:a6:3a:dd:6f:e6:
44:1b:fa:9b:7a:fd:7e:e6:85:33:c9:29:47:68:84:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:59:ED:D0:C6:06:1D:C8:D3:39:DD:BB:38:1D:EB:94:B5:AF:82
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:15:49:d9:6d:44:b5:ba:85:7e:07:bb:1c:f4:af:0c:0a:
05:53:d1:6c:57:18:76:e5:8d:d0:04:19:e3:ed:9b:c6:ab:af:
29:52:3d:49:dc:9f:d7:93:1b:14:a8:fc:20:11:19:af:e5:03:
44:56:ef:e5:e6:1a:28:12:54:ae:81:33:58:b6:e8:17:c3:a9:
46:2e:d5:bd:ff:74:39:cf:ec:84:02:79:d8:55:53:ad:51:8a:
34:f9:d6:f2:bd:63:fa:70:1e:79:7f:a1:f0:fa:fc:b1:06:8d:
7d:57:ac:df:69:7f:d4:65:66:ca:04:e4:b0:53:ce:ba:04:0d:
13:05:95:c2:ea:b6:32:bf:40:8d:1f:37:12:85:93:08:a8:49:
f4:4a:98:5f:93:14:ec:f9:58:a0:73:5b:7e:87:ba:a8:c2:da:
80:66:14:0e:6e:31:02:01:85:78:02:87:1d:93:e1:be:5e:a5:
e0:f0:01:47:00:02:c0:8c:98:01:fd:3a:8a:38:eb:ff:a7:b8:
50:50:90:63:24:52:76:9e:0f:1c:d9:fb:08:fb:7c:ca:34:c7:
e7:f4:15:1e:5a:94:d5:45:3e:b8:55:62:ae:d0:e2:18:23:46:
a5:7d:fa:74:ff:5e:ce:1e:82:5c:14:2b:8c:bc:17:de:71:3c:
b1:a3:72:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzqtKK4hQKzfJTKvVdtLJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzlhY2Q0ZWU0MGZkYTQzMDIyYTJjOTY0MmIwNzFkYTY0
OTUyNmMwHhcNMjUwODA0MDYwMDMxWhcNMjUwODA1MDYwMDMxWjAzMTEwLwYDVQQD
EyhlYmYxNTllZGQwYzYwNjFkYzhkMzM5ZGRiYjM4MWRlYjk0YjVhZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHYJtkfZ/NFQSZA2sC2foNpy6J4Q
0xfDf53yXRdN2TVDaD3+S0B6V5xnaSZosVPU/FKnd2xKgNpNmvZ+TcCKCjrcruFz
fx/zHp9L3SmXgDxrCOns0AltYPEifTBc/FWrL93CBBP6ydMgPfM1D66A6/Hb/Wgt
tgRMUyoECHkK9iO/Xt+Qd1potF2YMvOdjE1NFy/B07IR4IS1cGty/5z4p8TFJkpG
ElyOxlEQqWys/7nOK4nBz+K+YlpqgNw0r8KBs25JbakmM8cM468Fp8moXHsKRuWh
v0XAyFYxFQ/Vbm1Z0tiGAWg3QNwGpjrdb+ZEG/qbev1+5oUzySlHaIR8IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvxWe3QxgYdyNM53bs4HeuUta+CMB8GA1UdIwQY
MBaAFF55rNTuQP2kMCKiyWQrBx2mSVJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYt
ZWI4ZGE1OTU0ZjNiLzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYtZWI4ZGE1OTU0ZjNi
LzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzUVSdlt
RLW6hX4Huxz0rwwKBVPRbFcYduWN0AQZ4+2bxquvKVI9Sdyf15MbFKj8IBEZr+UD
RFbv5eYaKBJUroEzWLboF8OpRi7Vvf90Oc/shAJ52FVTrVGKNPnW8r1j+nAeeX+h
8Pr8sQaNfVes32l/1GVmygTksFPOugQNEwWVwuq2Mr9AjR83EoWTCKhJ9EqYX5MU
7PlYoHNbfoe6qMLagGYUDm4xAgGFeAKHHZPhvl6l4PABRwACwIyYAf06ijjr/6e4
UFCQYyRSdp4PHNn7CPt8yjTH5/QVHlqU1UU+uFVirtDiGCNGpX36dP9ezh6CXBQr
jLwX3nE8saNykw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:05 2025 by rpki-client