Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: +AgjccRIre38vsWPOWeFTxvLlUQJo/NsaCFRHlYLlmE=
Subject key identifier: 84:EC:BC:F8:A7:F1:B1:7D:59:37:A5:01:2A:5C:9C:F4:76:67:E7:92
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 019874509A9AD80B0AF69D8336616E6CA0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 10B2
Signing time: Mon 04 Aug 2025 09:01:36 +0000
Manifest this update: Mon 04 Aug 2025 09:01:36 +0000
Manifest next update: Tue 05 Aug 2025 09:01:36 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: udwA/Q6rVqhPdIQM6RvFJoAp4S3jCK92sSWHisJp7ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:9a:9a:d8:0b:0a:f6:9d:83:36:61:6e:6c:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Aug 4 09:01:36 2025 GMT
Not After : Aug 5 09:01:36 2025 GMT
Subject: CN=84ecbcf8a7f1b17d5937a5012a5c9cf47667e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:9e:fb:b1:54:d8:40:8d:d9:51:6a:12:02:
99:88:d4:b2:1b:31:10:65:13:71:08:7a:96:fe:81:
44:d6:99:6f:4f:ad:fe:84:ad:7a:46:77:07:b6:40:
37:95:b5:d1:a3:b4:bc:5d:4b:d3:cc:2d:84:bd:f4:
bb:59:bb:70:87:64:35:79:38:e4:14:30:d7:d3:68:
f3:ca:44:5a:54:ee:36:51:6a:c0:6d:a3:8a:2b:5a:
31:37:24:f2:52:fd:20:85:83:86:6d:eb:6b:c5:c2:
d9:43:23:31:9a:0a:ba:2d:30:07:32:35:c2:ee:49:
7d:eb:ad:7e:33:82:9f:c5:5a:47:91:c4:14:65:27:
5b:a3:99:a5:41:c1:65:8c:0f:e5:d2:c1:79:63:9f:
9c:e7:d4:3b:9c:26:c3:2e:73:2d:e0:a1:a8:e1:dc:
0b:1b:4e:40:6f:20:4a:48:ab:76:cf:59:89:29:30:
0d:22:4a:36:9a:c6:f6:08:56:04:13:0b:a0:21:4c:
8c:90:06:12:a1:78:dd:7c:0f:6a:cd:7d:9a:bd:be:
fc:68:b8:71:d9:72:a2:57:0e:be:6e:b3:73:0a:7f:
b9:b5:30:e6:60:c1:60:e1:c4:a2:d9:f6:02:ad:19:
25:6a:9b:b7:bc:5f:95:ee:86:6e:10:3e:86:39:7b:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:BC:F8:A7:F1:B1:7D:59:37:A5:01:2A:5C:9C:F4:76:67:E7:92
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:24:eb:38:46:db:54:ca:85:fa:ff:cf:27:ed:02:a8:e7:
aa:ba:10:6e:86:cc:42:40:91:e6:c8:ff:92:78:7b:b7:cf:d4:
81:93:61:73:fc:d0:25:ce:11:d1:3b:0d:13:02:7f:39:3c:a7:
6c:23:44:90:fa:d8:ff:a0:a3:be:62:d0:42:73:1d:34:b0:3b:
19:5a:45:ba:df:10:af:7e:84:ba:a2:36:6b:0e:2f:42:cf:a0:
ba:ce:2e:eb:b9:44:21:a9:6e:71:85:0d:6d:73:4f:2b:86:0f:
e3:58:67:11:45:4a:7e:70:89:c8:41:e6:ee:06:f5:9a:fa:3c:
29:66:30:ba:0a:92:94:79:75:dd:2c:2e:2f:b7:2a:5a:5b:43:
ac:6f:40:92:b1:71:d0:90:97:f1:39:35:07:48:1c:07:41:e2:
a1:d6:0d:58:f9:42:e3:d2:db:df:4d:d5:29:68:22:a2:e7:c1:
fa:1b:4e:c3:d9:5d:a8:f0:0d:ae:78:53:46:3e:24:1d:54:97:
3c:38:ae:a2:60:ac:c9:32:a8:14:ed:2d:24:f6:e0:26:33:c5:
94:b4:eb:67:e0:bd:bf:d4:b6:b8:a7:5c:5d:49:1b:e6:0d:b7:
35:7e:44:8f:9b:76:79:5f:44:73:b7:22:ac:e0:b2:2b:1c:d2:
5c:e3:8d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UJqa2AsK9p2DNmFubKDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjM3M2Y1ZGY5OWQ4MjFkY2I1N2M3ZmI5MjAyZmI0Njg2
ZTVkNjEwHhcNMjUwODA0MDkwMTM2WhcNMjUwODA1MDkwMTM2WjAzMTEwLwYDVQQD
Eyg4NGVjYmNmOGE3ZjFiMTdkNTkzN2E1MDEyYTVjOWNmNDc2NjdlNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Ke+7FU2ECN2VFqEgKZiNSyGzEQ
ZRNxCHqW/oFE1plvT63+hK16RncHtkA3lbXRo7S8XUvTzC2EvfS7Wbtwh2Q1eTjk
FDDX02jzykRaVO42UWrAbaOKK1oxNyTyUv0ghYOGbetrxcLZQyMxmgq6LTAHMjXC
7kl9661+M4KfxVpHkcQUZSdbo5mlQcFljA/l0sF5Y5+c59Q7nCbDLnMt4KGo4dwL
G05AbyBKSKt2z1mJKTANIko2msb2CFYEEwugIUyMkAYSoXjdfA9qzX2avb78aLhx
2XKiVw6+brNzCn+5tTDmYMFg4cSi2fYCrRklapu3vF+V7oZuED6GOXu+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITsvPin8bF9WTelASpcnPR2Z+eSMB8GA1UdIwQY
MBaAFF1jc/Xfmdgh3LV8f7kgL7Robl1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAt
YWQyMTUyODVjODY0LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAtYWQyMTUyODVjODY0
LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5Yk6zhG
21TKhfr/zyftAqjnqroQbobMQkCR5sj/knh7t8/UgZNhc/zQJc4R0TsNEwJ/OTyn
bCNEkPrY/6CjvmLQQnMdNLA7GVpFut8Qr36EuqI2aw4vQs+gus4u67lEIalucYUN
bXNPK4YP41hnEUVKfnCJyEHm7gb1mvo8KWYwugqSlHl13SwuL7cqWltDrG9AkrFx
0JCX8Tk1B0gcB0HiodYNWPlC49Lb303VKWgioufB+htOw9ldqPANrnhTRj4kHVSX
PDiuomCsyTKoFO0tJPbgJjPFlLTrZ+C9v9S2uKdcXUkb5g23NX5Ej5t2eV9Ec7ci
rOCyKxzSXOONPw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:47 2025 by rpki-client