Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json)
Hash identifier: 2GRaEEI1fxgBNaTz0Z1Ecu40L1VkUKMwTMfD6AztrZo=
Subject key identifier: 59:39:75:3C:46:14:0E:52:2F:3E:CC:DA:88:8B:C8:81:53:7A:B0:D9
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 01988F904CE24A0E21BF147B86B6998CCAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 16:00:55 +0000
Manifest this update: Sat 09 Aug 2025 16:00:55 +0000
Manifest next update: Sun 10 Aug 2025 16:00:55 +0000
Files and hashes: 1: 9OuhXfETInOXikMAHDgNmyTRYEU.roa (hash: eIv/UzfTlkAylqHyvhIg1kk0aW1IEfgfDL/qT3P5S8w=)
2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: gtZQgTxpDLqmYK2xaGASoXkJ1TAXn9yWHS5CkUCeqNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:4c:e2:4a:0e:21:bf:14:7b:86:b6:99:8c:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Aug 9 16:00:55 2025 GMT
Not After : Aug 10 16:00:55 2025 GMT
Subject: CN=5939753c46140e522f3eccda888bc881537ab0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:31:6e:30:68:63:e2:0f:2b:93:cf:56:a1:
8f:26:98:e0:af:a0:9a:74:fa:e5:b2:6c:b4:f5:0c:
0f:ad:d7:87:00:bd:54:71:62:d8:f3:e2:52:f4:1d:
4d:d4:2a:75:a5:1c:b4:ee:fa:22:1a:88:e8:11:d0:
39:61:1c:18:5f:d4:7e:a2:4b:97:2c:24:d9:30:39:
d5:b4:28:aa:16:12:a3:87:3f:06:15:3a:af:3f:5e:
c9:ba:88:55:b0:4b:49:be:d9:19:ff:ce:b7:6a:e4:
15:f7:0d:e9:6e:db:22:08:b6:a5:1b:7f:32:8b:46:
49:a9:0b:24:07:9b:81:c9:61:5d:db:79:ed:f1:69:
c3:90:7d:71:6b:71:6c:2d:25:9a:c3:05:ad:9e:e0:
37:38:18:17:95:a5:a1:bf:4a:97:31:3a:50:cf:81:
4c:14:a7:f1:81:b2:f4:6f:8b:f0:62:af:9f:17:e5:
3b:06:81:2c:24:6c:78:3c:3b:1e:71:fe:e6:fe:0b:
4f:7c:3d:8b:e9:49:b8:e2:46:3c:30:11:bb:72:b3:
cc:7f:54:84:3d:91:45:ce:b8:49:16:50:27:f1:69:
d4:33:a3:29:2f:7e:65:89:ed:ff:8a:ed:e3:33:83:
60:f7:d7:f9:a1:29:4a:ef:de:d5:d6:09:48:e9:48:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:75:3C:46:14:0E:52:2F:3E:CC:DA:88:8B:C8:81:53:7A:B0:D9
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:b4:01:4d:54:7d:8e:ff:8d:f2:b1:28:1b:51:26:d2:d2:
90:0a:04:63:69:6d:b5:f4:b0:24:69:3a:8d:20:71:ac:67:dc:
21:5a:76:09:63:dd:a2:cf:02:51:f0:f6:a9:3a:99:5f:be:0e:
ef:60:5a:9b:63:3e:9c:08:35:cb:2e:94:94:aa:a1:a7:93:68:
19:d9:5c:47:36:53:c6:5a:11:ac:39:d2:5b:b1:17:55:95:dc:
e1:5d:da:9a:23:fe:f6:e2:eb:fa:1a:2a:7b:75:d2:57:38:4a:
39:41:42:ba:f6:88:c8:ad:12:b5:a8:bc:35:0a:70:02:48:1d:
a4:c0:e0:3f:48:92:03:63:39:a7:d5:a9:d2:6e:85:b1:e8:7f:
87:a7:bd:b4:38:5b:b5:eb:54:3b:15:13:b9:18:04:1f:75:bd:
fe:4a:e7:df:c4:d5:d9:fa:d3:70:b5:5e:49:5f:33:79:32:fd:
14:91:08:f2:76:49:35:05:f9:1d:34:6a:15:e7:93:68:bc:49:
23:92:36:ee:80:6d:22:74:c1:ce:cb:78:ca:cf:d5:26:d8:c2:
9e:1b:cd:07:02:c8:9b:ee:fa:85:81:85:ef:40:ec:7e:28:8e:
79:15:dc:bb:8c:56:e1:bc:fd:aa:5b:6b:2f:07:4d:81:74:40:
56:b7:69:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkEziSg4hvxR7hraZjMrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2MyZjdkNzkwYTgzMDBhN2RkMzUxOWUwZmI4ODdmYTRk
ZTAyNjAwHhcNMjUwODA5MTYwMDU1WhcNMjUwODEwMTYwMDU1WjAzMTEwLwYDVQQD
Eyg1OTM5NzUzYzQ2MTQwZTUyMmYzZWNjZGE4ODhiYzg4MTUzN2FiMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYIxbjBoY+IPK5PPVqGPJpjgr6Ca
dPrlsmy09QwPrdeHAL1UcWLY8+JS9B1N1Cp1pRy07voiGojoEdA5YRwYX9R+okuX
LCTZMDnVtCiqFhKjhz8GFTqvP17JuohVsEtJvtkZ/863auQV9w3pbtsiCLalG38y
i0ZJqQskB5uByWFd23nt8WnDkH1xa3FsLSWawwWtnuA3OBgXlaWhv0qXMTpQz4FM
FKfxgbL0b4vwYq+fF+U7BoEsJGx4PDsecf7m/gtPfD2L6Um44kY8MBG7crPMf1SE
PZFFzrhJFlAn8WnUM6MpL35lie3/iu3jM4Ng99f5oSlK797V1glI6UhU/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk5dTxGFA5SLz7M2oiLyIFTerDZMB8GA1UdIwQY
MBaAFF3ML315CoMAp901GeD7iH+k3gJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEt
YmY3MTQ0OWQ5N2RkLzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEtYmY3MTQ0OWQ5N2Rk
LzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoq0AU1U
fY7/jfKxKBtRJtLSkAoEY2lttfSwJGk6jSBxrGfcIVp2CWPdos8CUfD2qTqZX74O
72Bam2M+nAg1yy6UlKqhp5NoGdlcRzZTxloRrDnSW7EXVZXc4V3amiP+9uLr+hoq
e3XSVzhKOUFCuvaIyK0Stai8NQpwAkgdpMDgP0iSA2M5p9Wp0m6Fseh/h6e9tDhb
tetUOxUTuRgEH3W9/krn38TV2frTcLVeSV8zeTL9FJEI8nZJNQX5HTRqFeeTaLxJ
I5I27oBtInTBzst4ys/VJtjCnhvNBwLIm+76hYGF70DsfiiOeRXcu4xW4bz9qltr
LwdNgXRAVrdpXg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:38 2025 by rpki-client