Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: JoHGQhePL0dUuTBXMphdEzMOs3g5dRYx5awsD7V1vVc=
Subject key identifier: 7E:08:15:99:98:33:24:85:CF:6A:01:59:FC:FA:EF:75:BF:5F:1D:0C
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01988B7CBE818412DCB3C9DB33CD5042A6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:01:04 +0000
Manifest this update: Fri 08 Aug 2025 21:01:04 +0000
Manifest next update: Sat 09 Aug 2025 21:01:04 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: aKw3UEvc5TdHuR3zNscg2Ug8WGOHoBSRJIQ3jSNAQUs=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:be:81:84:12:dc:b3:c9:db:33:cd:50:42:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Aug 8 21:01:04 2025 GMT
Not After : Aug 9 21:01:04 2025 GMT
Subject: CN=7e08159998332485cf6a0159fcfaef75bf5f1d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:0d:e3:75:ce:ec:d2:bd:dc:fc:1f:51:49:
c3:8f:64:2c:3e:c0:32:1f:ec:2e:64:23:9d:a7:76:
4e:74:9b:4f:0e:e2:cf:64:20:a5:70:50:7b:bc:0a:
40:83:bc:eb:cd:65:d8:f9:f0:ae:a6:8d:c2:f7:2e:
92:5a:73:5b:fc:a7:91:11:5b:52:d1:f3:0e:8f:19:
50:a4:ce:d7:4b:00:63:1b:62:34:50:03:14:35:51:
d7:84:44:22:d9:91:a5:64:06:a4:4c:d7:de:ca:22:
e1:43:40:76:d4:1b:39:6f:a5:d9:a7:dc:7f:e1:a5:
da:af:e6:e2:6c:1a:bf:0d:69:b2:89:9b:25:0d:1d:
89:5f:53:69:50:f7:8d:f4:28:1c:f8:7e:8d:f9:4e:
13:bc:31:e2:38:56:70:9e:ac:bf:56:d8:7e:82:11:
ba:2e:b3:9a:73:97:da:b6:4c:d9:55:38:15:0e:2c:
53:56:5d:ff:71:d8:f0:fa:5a:e4:99:8d:8e:6c:9e:
ce:77:e4:65:bf:0c:a5:f0:79:bb:b6:0d:73:fe:b1:
76:eb:31:67:83:39:4b:9a:4a:c2:de:9c:f8:86:a8:
98:26:e7:42:7b:53:7d:96:c1:7f:fe:61:3b:cb:36:
a6:6c:ee:64:57:e5:9f:eb:df:61:0b:9e:3a:96:5c:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:15:99:98:33:24:85:CF:6A:01:59:FC:FA:EF:75:BF:5F:1D:0C
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2b:53:77:26:46:ef:b6:0f:e8:4d:38:4d:c0:47:ad:6f:e6:
be:23:0f:d0:8b:69:98:88:fc:14:5f:5c:10:fc:83:ab:9b:97:
0c:19:cf:7a:d4:c0:14:f0:19:0e:fd:77:df:24:1a:2e:3a:51:
d1:58:1c:b3:02:10:0c:62:c8:d2:22:89:cb:b8:28:28:73:da:
b0:aa:64:8d:c3:13:a4:f2:c0:fb:0c:70:fa:d7:2b:1f:3e:72:
63:06:c2:ea:85:88:a7:0b:ee:b6:e0:12:86:7e:89:23:84:35:
20:d0:f6:98:f5:ad:c2:79:35:8c:92:44:de:cb:b2:5a:44:f4:
90:d3:d8:c6:df:0f:2b:32:d9:35:f9:70:62:38:20:62:55:0f:
fa:8a:f7:69:ff:2f:21:0c:7f:27:09:ab:db:c4:62:ed:f1:7e:
b7:96:76:bb:53:b2:bc:85:ba:34:d7:7b:6d:8d:28:56:fa:6d:
b3:c8:7c:3d:d3:b9:b0:0a:54:e5:ca:94:09:8a:a1:29:b8:a1:
3c:a9:16:a5:d9:3e:46:98:2f:b9:c1:b5:3f:f2:b8:f3:4a:d2:
b3:61:2c:f8:9f:c5:6b:95:78:9e:f9:af:1c:25:b2:9a:e9:dd:
a0:83:a6:ee:0b:aa:12:46:39:85:70:f4:4d:f5:dd:2a:69:87:
26:86:fa:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfL6BhBLcs8nbM81QQqarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjUwODA4MjEwMTA0WhcNMjUwODA5MjEwMTA0WjAzMTEwLwYDVQQD
Eyg3ZTA4MTU5OTk4MzMyNDg1Y2Y2YTAxNTlmY2ZhZWY3NWJmNWYxZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiQN43XO7NK93PwfUUnDj2QsPsAy
H+wuZCOdp3ZOdJtPDuLPZCClcFB7vApAg7zrzWXY+fCupo3C9y6SWnNb/KeREVtS
0fMOjxlQpM7XSwBjG2I0UAMUNVHXhEQi2ZGlZAakTNfeyiLhQ0B21Bs5b6XZp9x/
4aXar+bibBq/DWmyiZslDR2JX1NpUPeN9Cgc+H6N+U4TvDHiOFZwnqy/Vth+ghG6
LrOac5fatkzZVTgVDixTVl3/cdjw+lrkmY2ObJ7Od+Rlvwyl8Hm7tg1z/rF26zFn
gzlLmkrC3pz4hqiYJudCe1N9lsF//mE7yzambO5kV+Wf699hC546llzdFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4IFZmYMySFz2oBWfz673W/Xx0MMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsitTdyZG
77YP6E04TcBHrW/mviMP0ItpmIj8FF9cEPyDq5uXDBnPetTAFPAZDv133yQaLjpR
0VgcswIQDGLI0iKJy7goKHPasKpkjcMTpPLA+wxw+tcrHz5yYwbC6oWIpwvutuAS
hn6JI4Q1IND2mPWtwnk1jJJE3suyWkT0kNPYxt8PKzLZNflwYjggYlUP+or3af8v
IQx/Jwmr28Ri7fF+t5Z2u1OyvIW6NNd7bY0oVvpts8h8PdO5sApU5cqUCYqhKbih
PKkWpdk+RpgvucG1P/K480rSs2Es+J/Fa5V4nvmvHCWymundoIOm7guqEkY5hXD0
TfXdKmmHJob6zA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:29 2025 by rpki-client