Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: o1GfsExn5w9cK+FY/vITryarShlAflFHSBuYq3V/ZsU=
Subject key identifier: 7F:FF:D2:80:12:3C:AF:32:E7:CA:76:57:40:A1:1E:56:FF:6B:B1:F2
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019880F961BFD94E7A3A58FAB1AD4D898172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 20:01:23 +0000
Manifest this update: Wed 06 Aug 2025 20:01:23 +0000
Manifest next update: Thu 07 Aug 2025 20:01:23 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: qrwAmWgrhQEHyREuyFBuLlBjbtr1a6/OJZp1/uGAF6g=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:61:bf:d9:4e:7a:3a:58:fa:b1:ad:4d:89:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Aug 6 20:01:23 2025 GMT
Not After : Aug 7 20:01:23 2025 GMT
Subject: CN=7fffd280123caf32e7ca765740a11e56ff6bb1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:6d:f3:e9:0c:1b:a5:fe:66:e6:5f:24:aa:
b4:14:34:e9:11:01:f0:38:27:38:33:d0:56:a3:c7:
79:3a:2a:c3:57:eb:bf:a9:51:46:fe:55:1f:69:ac:
9c:f0:0e:11:a0:29:88:30:e4:e4:16:86:19:6a:f0:
39:66:28:42:48:19:9e:02:c6:b2:f7:97:b9:48:20:
e9:32:45:59:ef:31:fd:47:c7:1d:d7:1e:05:dd:9d:
1d:72:a1:7e:93:e4:01:71:9f:1f:5b:ab:72:2e:72:
7c:c7:66:f8:53:71:d8:21:84:6a:00:d7:8d:87:aa:
3e:5a:72:b9:43:b1:e8:a4:65:61:7f:d2:09:00:b0:
c0:c8:9b:29:cd:f4:02:56:6c:ee:f5:42:6a:2c:8a:
2c:0f:a9:a1:55:8a:06:93:ed:a0:17:dd:a6:9f:1a:
c0:2c:19:ab:ce:dd:a2:60:a6:20:e6:7a:70:68:2b:
e2:71:c4:ea:5b:31:d9:d7:f8:f7:28:86:c2:dc:63:
7f:d1:25:a7:ed:2d:5d:81:94:5f:48:d5:c0:2d:73:
70:2c:97:e4:0e:11:d2:1c:7d:9b:ee:9d:00:ca:8a:
54:c5:f4:23:95:8e:6d:3b:40:4b:69:d6:fa:58:81:
29:88:88:f9:52:a7:6e:4b:9a:94:44:ae:70:b2:6d:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:D2:80:12:3C:AF:32:E7:CA:76:57:40:A1:1E:56:FF:6B:B1:F2
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:30:66:82:f6:20:b8:24:90:02:5b:67:02:8a:f5:35:4c:57:
6f:37:11:a7:e0:2d:1a:e0:ee:d5:cc:fc:b9:f8:16:45:0e:24:
a3:9f:78:ed:d4:ef:a0:f6:50:89:ae:ad:da:a7:84:ce:19:89:
79:50:a9:fe:3e:9d:2b:d3:91:36:42:48:7b:05:d5:fe:e3:85:
d4:55:21:e8:4e:1c:89:e0:eb:f6:94:8d:d4:2d:52:63:b0:1b:
66:4d:45:c5:fb:dd:37:29:f6:d6:68:25:3f:29:02:ca:ad:4e:
0c:82:c9:6d:30:0b:75:53:00:2b:02:ad:fb:05:0c:3b:a4:f3:
a4:d9:fb:bb:8b:9e:d8:80:4e:aa:da:3d:c8:7b:df:82:d4:4b:
b5:30:83:dc:2f:48:77:b3:21:c2:7f:70:50:50:34:4f:7d:0e:
6f:5b:f5:97:ed:3e:0b:1a:c9:ad:d9:0f:41:80:8b:e1:5d:c3:
21:a9:7a:77:6c:61:50:3a:94:e5:56:52:a4:ae:39:95:a8:fe:
35:fe:82:51:84:aa:86:77:75:3a:74:9f:9c:0e:eb:a8:79:5c:
b5:4a:63:cf:03:d5:de:f2:39:af:bf:07:34:61:00:b6:12:63:
94:cc:d5:34:40:ff:96:c7:ff:bc:8a:4a:9f:12:bb:ce:8a:1c:
d6:33:93:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+WG/2U56Olj6sa1NiYFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjUwODA2MjAwMTIzWhcNMjUwODA3MjAwMTIzWjAzMTEwLwYDVQQD
Eyg3ZmZmZDI4MDEyM2NhZjMyZTdjYTc2NTc0MGExMWU1NmZmNmJiMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyVt8+kMG6X+ZuZfJKq0FDTpEQHw
OCc4M9BWo8d5OirDV+u/qVFG/lUfaayc8A4RoCmIMOTkFoYZavA5ZihCSBmeAsay
95e5SCDpMkVZ7zH9R8cd1x4F3Z0dcqF+k+QBcZ8fW6tyLnJ8x2b4U3HYIYRqANeN
h6o+WnK5Q7HopGVhf9IJALDAyJspzfQCVmzu9UJqLIosD6mhVYoGk+2gF92mnxrA
LBmrzt2iYKYg5npwaCviccTqWzHZ1/j3KIbC3GN/0SWn7S1dgZRfSNXALXNwLJfk
DhHSHH2b7p0AyopUxfQjlY5tO0BLadb6WIEpiIj5UqduS5qURK5wsm3kGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH//0oASPK8y58p2V0ChHlb/a7HyMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTBmgvYg
uCSQAltnAor1NUxXbzcRp+AtGuDu1cz8ufgWRQ4ko5947dTvoPZQia6t2qeEzhmJ
eVCp/j6dK9ORNkJIewXV/uOF1FUh6E4cieDr9pSN1C1SY7AbZk1FxfvdNyn21mgl
PykCyq1ODILJbTALdVMAKwKt+wUMO6TzpNn7u4ue2IBOqto9yHvfgtRLtTCD3C9I
d7Mhwn9wUFA0T30Ob1v1l+0+CxrJrdkPQYCL4V3DIal6d2xhUDqU5VZSpK45laj+
Nf6CUYSqhnd1OnSfnA7rqHlctUpjzwPV3vI5r78HNGEAthJjlMzVNED/lsf/vIpK
nxK7zooc1jOTUw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:08:19 2025 by rpki-client