
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: FofX7jO688rGVWat7sDUq+PP2ExtQ08dK0DxZ4Ih/JM=
Subject key identifier: B9:0A:F4:84:90:5F:58:0E:74:70:5D:6F:07:8C:3C:61:39:F3:C0:92
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 01988B0F7FFE8006FC129B9083397B1B0CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 12D6
Signing time: Fri 08 Aug 2025 19:01:45 +0000
Manifest this update: Fri 08 Aug 2025 19:01:45 +0000
Manifest next update: Sat 09 Aug 2025 19:01:45 +0000
Files and hashes: 1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: +MgjVwP5JDSNrDHdjaI6fs4rg5BRIym0eCbJDwSx9Mg=)
2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:7f:fe:80:06:fc:12:9b:90:83:39:7b:1b:0c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Aug 8 19:01:45 2025 GMT
Not After : Aug 9 19:01:45 2025 GMT
Subject: CN=b90af484905f580e74705d6f078c3c6139f3c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:4f:43:57:9e:18:a1:3d:60:99:52:72:1f:
39:b2:ce:df:c5:3f:cb:77:60:74:3d:f5:8c:ad:1d:
bc:cc:24:97:2a:d5:76:5c:8b:d4:5f:d9:d8:1c:f6:
5a:d6:f7:d9:af:ec:b0:94:84:ef:09:75:b1:15:eb:
4c:9c:57:9b:5e:6d:14:29:ab:bc:fc:23:f9:5c:3f:
58:d5:14:ca:47:2a:8e:ef:df:4e:04:15:fd:6d:57:
3f:4b:12:33:4a:b4:68:61:f4:e0:72:de:2e:1f:07:
20:9e:8c:63:29:28:3f:94:29:dd:73:b6:ce:0f:c0:
0e:fc:90:20:ea:62:49:e1:03:22:ac:f2:60:50:ab:
f9:d8:3e:6c:b8:2c:1d:bc:1e:ed:26:d3:8a:5c:03:
af:01:d2:6f:ef:35:4c:ce:fd:e5:8c:02:60:c2:55:
0f:ea:b9:9a:02:56:08:ae:6e:33:83:5c:4d:5e:7f:
74:d5:a3:76:d8:01:28:9f:61:90:80:dd:9a:d2:42:
b2:93:6b:b0:c8:d0:fe:cc:14:28:4c:ff:ed:d1:30:
2b:1e:87:32:8f:5d:4f:ac:5e:9e:ff:b0:e6:29:13:
f4:38:c2:ae:35:a2:f6:6e:7b:c9:b2:22:3c:8e:e3:
a7:00:73:d7:96:94:b1:70:04:ed:b5:22:3d:37:2c:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:F4:84:90:5F:58:0E:74:70:5D:6F:07:8C:3C:61:39:F3:C0:92
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:c3:a2:6f:1b:06:db:64:35:9c:1d:d1:de:5c:18:a1:ea:
6c:33:da:c3:7b:44:61:71:7c:4c:9d:c5:f5:3e:50:d8:cf:6a:
59:46:0e:94:37:3c:a0:93:bb:6d:13:72:8d:16:bd:5e:e1:15:
3a:e9:d8:82:f3:0d:36:7f:85:e1:cd:4c:39:c3:9d:5a:98:c0:
f1:34:3a:e3:79:3a:4f:d8:8b:06:cb:53:ba:c1:40:56:2a:3d:
b1:9a:48:4b:e1:90:16:b6:9a:c3:f7:ca:8b:12:78:7a:48:4f:
ae:fa:e6:19:00:0a:28:c0:23:df:f5:0b:f7:04:5a:df:ad:36:
87:b5:ec:f0:fa:b4:48:9b:45:87:1c:f1:79:af:bd:55:c0:7d:
2f:f8:a6:72:07:eb:07:d5:b2:f6:c4:2b:75:eb:0e:4e:88:09:
ad:1e:ee:32:80:41:b6:2c:7a:1e:7f:4a:d3:ba:8f:db:1c:4f:
dc:da:46:e5:f3:8f:d0:b3:98:2f:80:ce:fb:85:e4:05:ee:8f:
ba:15:2e:80:ad:aa:7e:18:85:d6:df:86:ab:56:ed:6d:46:71:
d0:0c:44:2e:41:fa:ef:f5:75:36:af:a6:77:de:4a:31:63:d3:
bc:49:1f:a7:d5:6f:c8:27:f6:97:58:d3:67:e8:f5:b6:e7:0a:
12:7e:03:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD3/+gAb8EpuQgzl7Gwz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmE1ZjUyYjAwMmY2Mjg2YzFkNWViMjU3YmI1ZTg1MzM0
MmEyODQwHhcNMjUwODA4MTkwMTQ1WhcNMjUwODA5MTkwMTQ1WjAzMTEwLwYDVQQD
EyhiOTBhZjQ4NDkwNWY1ODBlNzQ3MDVkNmYwNzhjM2M2MTM5ZjNjMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaFPQ1eeGKE9YJlSch85ss7fxT/L
d2B0PfWMrR28zCSXKtV2XIvUX9nYHPZa1vfZr+ywlITvCXWxFetMnFebXm0UKau8
/CP5XD9Y1RTKRyqO799OBBX9bVc/SxIzSrRoYfTgct4uHwcgnoxjKSg/lCndc7bO
D8AO/JAg6mJJ4QMirPJgUKv52D5suCwdvB7tJtOKXAOvAdJv7zVMzv3ljAJgwlUP
6rmaAlYIrm4zg1xNXn901aN22AEon2GQgN2a0kKyk2uwyND+zBQoTP/t0TArHocy
j11PrF6e/7DmKRP0OMKuNaL2bnvJsiI8juOnAHPXlpSxcATttSI9NyyrjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkK9ISQX1gOdHBdbweMPGE588CSMB8GA1UdIwQY
MBaAFFxqX1KwAvYobB1esle7XoUzQqKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUt
MDk2YzljMDdhZTE4LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUtMDk2YzljMDdhZTE4
LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2nDom8b
BttkNZwd0d5cGKHqbDPaw3tEYXF8TJ3F9T5Q2M9qWUYOlDc8oJO7bRNyjRa9XuEV
OunYgvMNNn+F4c1MOcOdWpjA8TQ643k6T9iLBstTusFAVio9sZpIS+GQFraaw/fK
ixJ4ekhPrvrmGQAKKMAj3/UL9wRa3602h7Xs8Pq0SJtFhxzxea+9VcB9L/imcgfr
B9Wy9sQrdesOTogJrR7uMoBBtix6Hn9K07qP2xxP3NpG5fOP0LOYL4DO+4XkBe6P
uhUugK2qfhiF1t+Gq1btbUZx0AxELkH67/V1Nq+md95KMWPTvEkfp9VvyCf2l1jT
Z+j1tucKEn4Dfg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:12 2025 by rpki-client