Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: PbWRO5cJB21geHPlQNYUKauVPJY4BA9jV3IgerztnSY=
Subject key identifier: 9B:7F:33:E0:A4:3A:2B:3B:7F:2D:E0:8E:E5:DF:40:CE:03:EB:C0:95
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01988B0FB2DC88FEA2861E01906206AE3174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:01:58 +0000
Manifest this update: Fri 08 Aug 2025 19:01:58 +0000
Manifest next update: Sat 09 Aug 2025 19:01:58 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: hHZ/efltIzOLhotI9x28RzkrCIXUJ6INy7/Y2xcCVu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:b2:dc:88:fe:a2:86:1e:01:90:62:06:ae:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Aug 8 19:01:58 2025 GMT
Not After : Aug 9 19:01:58 2025 GMT
Subject: CN=9b7f33e0a43a2b3b7f2de08ee5df40ce03ebc095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d9:73:b9:4f:f9:9c:73:f1:74:b7:ee:a9:89:
e4:12:98:80:16:ac:24:a8:0f:be:40:75:bb:ae:6b:
c9:b7:be:0e:46:93:35:25:dc:a2:99:d1:16:15:5e:
95:01:3c:37:0b:8e:e2:66:e8:36:86:7d:ad:79:e7:
ce:b0:e2:7f:c4:6d:da:28:97:63:7b:4b:ba:0a:ce:
ff:50:00:e2:91:87:49:bf:71:ab:9f:76:33:61:ac:
81:3a:57:9c:89:76:06:5f:d5:59:3a:24:3d:14:09:
2d:4a:c8:dd:64:f7:0d:f3:f5:a9:ba:2f:81:88:4b:
23:b2:cd:48:38:95:73:a5:4d:44:9a:12:b8:34:02:
da:54:53:37:1e:53:f7:24:4b:0f:21:8c:ff:a2:be:
14:45:6e:1c:17:01:4a:16:2e:02:4a:0e:aa:89:3b:
f5:dd:71:03:cb:5e:dd:13:88:40:62:7a:36:be:e8:
9a:2e:c1:f2:5a:58:13:9e:38:8c:b6:96:78:4c:d5:
99:e5:12:2b:aa:a1:94:a1:83:3b:14:3b:f1:57:fe:
2d:fa:1c:2a:c7:7e:c8:4e:71:15:d4:a5:25:3d:64:
69:7b:f9:bb:62:31:e3:37:df:66:1c:af:68:4f:f1:
dc:f1:9f:a2:74:81:65:2a:5c:6d:7c:5d:79:c0:0d:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:33:E0:A4:3A:2B:3B:7F:2D:E0:8E:E5:DF:40:CE:03:EB:C0:95
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:b0:66:5b:f0:40:f6:03:22:a3:d7:d8:f9:ec:49:66:0a:
0c:79:e4:ad:f9:74:71:09:07:3e:df:22:88:4e:87:fb:ca:6b:
9c:91:c0:06:0a:6c:8f:31:0c:23:cf:2e:2b:54:29:c2:2e:f1:
bf:44:56:e3:69:34:89:ff:ed:17:09:ae:ee:24:94:dc:ae:3f:
7d:d8:c0:c3:c4:9c:dc:25:fd:2d:0c:5a:4f:12:9c:a2:36:e7:
a6:26:30:6f:4c:e1:ca:79:46:80:33:ec:53:6e:86:c5:50:0a:
9d:df:57:de:53:d7:84:ef:e8:e7:81:21:02:69:22:61:2a:0d:
41:86:78:83:5b:56:fc:32:d0:6b:7d:49:e9:94:22:8a:55:bf:
d5:81:b2:c8:e8:f2:18:d3:66:6e:6f:81:30:ea:21:0e:62:91:
91:98:0a:84:86:33:59:dd:ca:1b:c7:4b:b8:c6:c3:e1:bb:89:
51:d9:d3:51:d2:fd:1f:ec:7a:d1:cd:1c:32:16:42:08:41:18:
5a:a8:68:6c:9e:65:49:ce:c7:fe:b7:8f:ae:80:9a:69:17:fc:
31:30:aa:c9:e1:09:79:26:42:80:da:5b:c0:19:04:b9:c9:67:
42:2b:b7:1d:50:b2:0b:9f:d4:63:1a:c1:50:b8:c4:46:7a:05:
03:89:98:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD7LciP6ihh4BkGIGrjF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl
NzE5M2QwHhcNMjUwODA4MTkwMTU4WhcNMjUwODA5MTkwMTU4WjAzMTEwLwYDVQQD
Eyg5YjdmMzNlMGE0M2EyYjNiN2YyZGUwOGVlNWRmNDBjZTAzZWJjMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNlzuU/5nHPxdLfuqYnkEpiAFqwk
qA++QHW7rmvJt74ORpM1JdyimdEWFV6VATw3C47iZug2hn2teefOsOJ/xG3aKJdj
e0u6Cs7/UADikYdJv3Grn3YzYayBOleciXYGX9VZOiQ9FAktSsjdZPcN8/Wpui+B
iEsjss1IOJVzpU1EmhK4NALaVFM3HlP3JEsPIYz/or4URW4cFwFKFi4CSg6qiTv1
3XEDy17dE4hAYno2vuiaLsHyWlgTnjiMtpZ4TNWZ5RIrqqGUoYM7FDvxV/4t+hwq
x37ITnEV1KUlPWRpe/m7YjHjN99mHK9oT/Hc8Z+idIFlKlxtfF15wA29QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt/M+CkOis7fy3gjuXfQM4D68CVMB8GA1UdIwQY
MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt
ZWJlMjMzMmNhZjFjLzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj
LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr6wZlvw
QPYDIqPX2PnsSWYKDHnkrfl0cQkHPt8iiE6H+8prnJHABgpsjzEMI88uK1Qpwi7x
v0RW42k0if/tFwmu7iSU3K4/fdjAw8Sc3CX9LQxaTxKcojbnpiYwb0zhynlGgDPs
U26GxVAKnd9X3lPXhO/o54EhAmkiYSoNQYZ4g1tW/DLQa31J6ZQiilW/1YGyyOjy
GNNmbm+BMOohDmKRkZgKhIYzWd3KG8dLuMbD4buJUdnTUdL9H+x60c0cMhZCCEEY
WqhobJ5lSc7H/reProCaaRf8MTCqyeEJeSZCgNpbwBkEuclnQiu3HVCyC5/UYxrB
ULjERnoFA4mYgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:59 2025 by rpki-client