Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: majzZjFbB9jRzx1e7uQV3LjRbmdIhl4J0rK3+attEl0=
Subject key identifier: 90:F8:06:A3:75:C4:B0:CD:F8:72:9B:E7:60:37:06:45:41:A2:C7:34
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 019873E2E85BE03EEBC5E560A973E5219BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 056F
Signing time: Mon 04 Aug 2025 07:01:47 +0000
Manifest this update: Mon 04 Aug 2025 07:01:47 +0000
Manifest next update: Tue 05 Aug 2025 07:01:47 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: BEOsS5DXVYiZOMTs6JubxZCY+L59p9nQQHssa1y1VjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e8:5b:e0:3e:eb:c5:e5:60:a9:73:e5:21:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Aug 4 07:01:47 2025 GMT
Not After : Aug 5 07:01:47 2025 GMT
Subject: CN=90f806a375c4b0cdf8729be76037064541a2c734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:4b:9d:07:ad:a1:0d:10:6e:59:e4:a9:03:
0b:79:a8:6e:d9:42:62:f1:2a:50:ad:21:a7:f1:be:
35:cd:e3:8e:59:35:05:48:65:a1:72:d4:31:06:94:
54:08:f4:ae:3d:cc:cc:61:8e:5b:c9:fb:35:96:bd:
d8:08:63:65:9a:22:c9:73:db:4a:44:d5:d7:07:9a:
8a:64:71:8b:16:68:f0:e6:40:61:eb:d2:a0:ba:2c:
03:16:30:e8:5e:f4:9b:3b:e8:b8:8c:60:e4:0d:f7:
e4:bf:44:5f:e3:89:dc:61:4f:f0:b0:26:ff:f5:23:
5e:5f:20:e1:5f:39:1e:34:ea:30:99:6f:f2:f1:7b:
ec:07:d6:98:b4:b8:35:11:f5:0d:05:2f:e4:f1:87:
f8:cd:2b:b7:64:6d:ae:07:ad:9c:4a:d4:82:80:24:
95:ec:91:9b:db:24:41:82:bc:50:10:1c:f4:04:7f:
dc:a0:d2:87:ca:e7:37:3a:fe:18:83:67:1b:9a:3a:
d7:44:b4:35:ec:23:5c:ce:83:e7:42:be:b3:e6:c7:
f2:52:e4:13:33:ee:8e:f3:97:ba:8f:a5:93:c9:c1:
c3:12:7e:51:10:65:51:b5:66:8f:1d:86:82:e1:72:
2a:89:5c:a8:db:f4:5b:ae:97:8e:0b:f3:c6:b8:35:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:06:A3:75:C4:B0:CD:F8:72:9B:E7:60:37:06:45:41:A2:C7:34
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:19:35:7b:dc:a1:d7:84:5e:04:d2:e0:66:ff:87:29:15:c4:
23:e0:7f:97:3e:f1:15:c1:75:cc:57:bc:e9:ec:ac:c6:71:6d:
2b:dd:3d:6e:2b:ab:1e:70:5b:c7:a6:e7:e2:ce:9a:0f:60:7b:
c3:35:6f:ee:87:83:f9:d0:55:bf:e9:55:32:dc:a0:d1:c0:ec:
87:b2:dd:87:8d:09:35:3f:c2:4f:a6:50:ba:3b:bf:cb:2a:5c:
3b:7e:02:72:e1:bc:ab:51:20:97:ed:cf:ab:2b:44:b3:82:ee:
da:65:2b:7e:d2:7b:e2:ad:30:b5:70:7f:e4:83:12:ac:5c:ed:
28:e5:bc:7b:0a:a5:02:63:85:16:b6:0a:7f:bb:1f:3e:c9:9a:
f2:a1:81:5f:99:32:b4:e3:79:82:7b:ed:5f:45:aa:0f:22:67:
38:c0:b8:9d:ea:aa:f9:7d:32:69:a0:62:3a:a6:f3:d7:2b:2c:
9a:b2:ea:40:2b:37:d1:01:92:43:1c:7a:7c:13:89:19:92:90:
15:25:ea:2a:2a:04:0d:9b:2e:32:b6:22:a0:06:7b:92:2a:ac:
c9:1f:52:84:5a:bf:fa:e3:ca:c1:85:da:c2:94:86:54:9e:01:
d2:9d:2a:83:46:8e:9d:01:3a:57:1c:5d:3b:4b:ed:96:20:e8:
f5:7f:82:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4uhb4D7rxeVgqXPlIZvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmJlNjJiZTc1M2JhOTkyOTM1NWI0Y2U5ODhiYWUxMmFm
NzI3MmEwHhcNMjUwODA0MDcwMTQ3WhcNMjUwODA1MDcwMTQ3WjAzMTEwLwYDVQQD
Eyg5MGY4MDZhMzc1YzRiMGNkZjg3MjliZTc2MDM3MDY0NTQxYTJjNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00dLnQetoQ0QblnkqQMLeahu2UJi
8SpQrSGn8b41zeOOWTUFSGWhctQxBpRUCPSuPczMYY5byfs1lr3YCGNlmiLJc9tK
RNXXB5qKZHGLFmjw5kBh69KguiwDFjDoXvSbO+i4jGDkDffkv0Rf44ncYU/wsCb/
9SNeXyDhXzkeNOowmW/y8XvsB9aYtLg1EfUNBS/k8Yf4zSu3ZG2uB62cStSCgCSV
7JGb2yRBgrxQEBz0BH/coNKHyuc3Ov4Yg2cbmjrXRLQ17CNczoPnQr6z5sfyUuQT
M+6O85e6j6WTycHDEn5REGVRtWaPHYaC4XIqiVyo2/RbrpeOC/PGuDUCowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD4BqN1xLDN+HKb52A3BkVBosc0MB8GA1UdIwQY
MBaAFF8r5ivnU7qZKTVbTOmIuuEq9ycqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2It
ZTUyMmNhZTYzNDcwLzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2ItZTUyMmNhZTYzNDcw
LzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRk1e9yh
14ReBNLgZv+HKRXEI+B/lz7xFcF1zFe86eysxnFtK909biurHnBbx6bn4s6aD2B7
wzVv7oeD+dBVv+lVMtyg0cDsh7Ldh40JNT/CT6ZQuju/yypcO34CcuG8q1Egl+3P
qytEs4Lu2mUrftJ74q0wtXB/5IMSrFztKOW8ewqlAmOFFrYKf7sfPsma8qGBX5ky
tON5gnvtX0WqDyJnOMC4neqq+X0yaaBiOqbz1yssmrLqQCs30QGSQxx6fBOJGZKQ
FSXqKioEDZsuMrYioAZ7kiqsyR9ShFq/+uPKwYXawpSGVJ4B0p0qg0aOnQE6Vxxd
O0vtliDo9X+CtQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:13 2025 by rpki-client