Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: Brn9qa0Aotf58G2cR4D79sLyjQD2xtOxjxQA/XZv98M=
Subject key identifier: 49:29:4B:C8:7D:C8:C5:27:93:48:BB:DA:A4:64:63:BB:12:9D:87:A4
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019897EE5B87F3DB139B4E4BBEEC74ECA3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 1024
Signing time: Mon 11 Aug 2025 07:00:37 +0000
Manifest this update: Mon 11 Aug 2025 07:00:37 +0000
Manifest next update: Tue 12 Aug 2025 07:00:37 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: bITtHNbFNTeBlxx5wX33Agr049r3j0R+2XGX4Yelnxw=)
2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:5b:87:f3:db:13:9b:4e:4b:be:ec:74:ec:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Aug 11 07:00:37 2025 GMT
Not After : Aug 12 07:00:37 2025 GMT
Subject: CN=49294bc87dc8c5279348bbdaa46463bb129d87a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:90:f1:51:34:93:af:d1:64:43:1d:dc:61:
09:03:7e:42:14:6b:44:d4:68:51:f3:3c:55:a3:5e:
a0:27:07:fa:46:d0:d7:57:cc:99:fa:48:e1:53:b6:
f0:dd:fc:f5:00:c3:4c:dc:97:d0:cb:99:5a:71:6f:
39:c3:33:10:98:25:f7:3b:ba:82:17:93:79:e6:ef:
5e:c4:b7:6c:3d:c0:c9:8a:11:3c:55:df:20:bc:47:
bc:1a:7c:8b:33:0e:9a:67:6f:f4:f9:4c:23:a8:f3:
bc:fa:1e:9a:ad:4e:16:22:6b:0a:c6:ce:26:e3:e6:
ef:67:70:d8:1a:d0:fc:28:6b:57:ac:a2:d3:94:f2:
7a:14:58:b6:a4:c4:34:e1:ac:45:32:93:f5:60:0a:
38:1a:af:75:ca:b0:95:11:bd:95:f7:2c:ed:ef:b8:
70:35:8e:81:33:87:a6:96:22:e4:9c:8d:02:6e:29:
5f:08:20:85:9f:b9:2a:81:30:7a:b4:ff:02:d2:4c:
b1:3b:0c:52:67:57:39:f6:af:61:af:8e:cb:9c:cd:
75:e5:b1:cd:ff:91:a9:40:9e:ee:1d:b1:09:03:66:
1b:35:f2:88:84:c9:68:b7:6e:12:36:e8:fd:6a:27:
f4:f1:2d:f6:6c:d0:bf:e0:45:ef:a2:0f:20:ed:e8:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:4B:C8:7D:C8:C5:27:93:48:BB:DA:A4:64:63:BB:12:9D:87:A4
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:d8:9e:d0:4d:17:80:a7:d5:85:fa:cd:30:0f:60:db:6d:
ca:aa:ff:25:d7:2e:3e:43:16:e1:a1:a3:31:9e:85:40:ed:11:
11:15:38:c9:e0:4a:e1:4a:1f:76:47:94:e5:0f:b1:21:0d:aa:
90:aa:fd:d8:d9:f7:11:ed:97:c7:c4:c9:6f:4d:2f:d1:95:9c:
f1:bc:5e:1f:90:50:6d:b6:1b:ad:86:d5:b5:8b:6d:32:7b:89:
4a:28:d2:9e:f7:5e:40:4f:cf:d6:f0:c4:f3:88:89:6b:a4:94:
3f:cd:bc:aa:b8:21:fd:37:87:53:c3:59:73:8b:b1:21:12:27:
7b:83:83:fa:82:64:48:18:6e:6e:37:0a:a7:0e:c3:50:de:36:
6a:08:a8:ad:88:9c:90:5e:4f:50:f4:ec:7c:02:0e:57:6a:00:
cf:42:47:60:fe:da:7a:94:46:1d:4b:de:3e:82:ae:7c:66:45:
29:ea:53:55:c8:d7:e1:9a:86:6d:e3:f8:bb:9c:d1:e3:53:c0:
a1:d7:19:3e:c5:de:c9:17:d7:b6:8f:f5:ee:3b:01:48:09:55:
8e:47:7c:87:f2:07:1f:9d:55:d6:b4:22:93:1b:67:6a:24:77:
9f:37:b9:52:fe:7b:a1:32:6e:da:90:33:56:eb:b9:fa:26:0f:
bd:bc:ce:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiX7luH89sTm05Lvux07KPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3
MDdhMTQwHhcNMjUwODExMDcwMDM3WhcNMjUwODEyMDcwMDM3WjAzMTEwLwYDVQQD
Eyg0OTI5NGJjODdkYzhjNTI3OTM0OGJiZGFhNDY0NjNiYjEyOWQ4N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkSQ8VE0k6/RZEMd3GEJA35CFGtE
1GhR8zxVo16gJwf6RtDXV8yZ+kjhU7bw3fz1AMNM3JfQy5lacW85wzMQmCX3O7qC
F5N55u9exLdsPcDJihE8Vd8gvEe8GnyLMw6aZ2/0+UwjqPO8+h6arU4WImsKxs4m
4+bvZ3DYGtD8KGtXrKLTlPJ6FFi2pMQ04axFMpP1YAo4Gq91yrCVEb2V9yzt77hw
NY6BM4emliLknI0CbilfCCCFn7kqgTB6tP8C0kyxOwxSZ1c59q9hr47LnM115bHN
/5GpQJ7uHbEJA2YbNfKIhMlot24SNuj9aif08S32bNC/4EXvog8g7ei9UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkpS8h9yMUnk0i72qRkY7sSnYekMB8GA1UdIwQY
MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt
ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5
LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRXYntBN
F4Cn1YX6zTAPYNttyqr/JdcuPkMW4aGjMZ6FQO0RERU4yeBK4UofdkeU5Q+xIQ2q
kKr92Nn3Ee2Xx8TJb00v0ZWc8bxeH5BQbbYbrYbVtYttMnuJSijSnvdeQE/P1vDE
84iJa6SUP828qrgh/TeHU8NZc4uxIRIne4OD+oJkSBhubjcKpw7DUN42agiorYic
kF5PUPTsfAIOV2oAz0JHYP7aepRGHUvePoKufGZFKepTVcjX4ZqGbeP4u5zR41PA
odcZPsXeyRfXto/17jsBSAlVjkd8h/IHH51V1rQikxtnaiR3nze5Uv57oTJu2pAz
Vuu5+iYPvbzOgw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:10 2025 by rpki-client