Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: knxqOTBoPAt7hpqHELwAeAUKcyt1BMizeh4WCd2r6UM=
Subject key identifier: B3:7C:AE:2A:37:CB:F0:74:F7:92:04:6A:6B:3B:9D:B9:39:C1:FC:26
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019927EA514D4507CC25123617D6F0477969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0466
Signing time: Mon 08 Sep 2025 06:01:31 +0000
Manifest this update: Mon 08 Sep 2025 06:01:31 +0000
Manifest next update: Tue 09 Sep 2025 06:01:31 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: BoenUHb9dgaCFKFxVUZuMypbl3cWx6eTBBssXpTvtJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ea:51:4d:45:07:cc:25:12:36:17:d6:f0:47:79:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Sep 8 06:01:31 2025 GMT
Not After : Sep 9 06:01:31 2025 GMT
Subject: CN=b37cae2a37cbf074f792046a6b3b9db939c1fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:3f:57:8e:be:1e:4b:5f:5c:df:5a:5b:8c:
d7:ae:1d:ca:b0:a2:dc:e9:0d:23:f0:c7:a4:91:bb:
b9:94:e2:79:02:81:b6:88:2f:37:f5:01:3f:5e:9b:
f9:04:c7:fb:a1:fd:4b:bb:26:2f:08:cf:2e:7f:46:
68:45:bf:d2:4d:1f:54:70:c0:9a:ab:62:d5:93:a2:
4b:37:97:f0:6e:43:04:e1:72:70:e9:09:8a:ac:86:
e9:d5:c6:f3:e2:91:7c:75:13:78:fc:03:38:d9:de:
b6:17:3b:64:59:d2:49:21:69:62:0a:ca:d2:6a:da:
db:4c:6f:c5:d5:54:f4:07:15:d9:19:0e:0e:d8:5e:
65:da:69:bd:c4:89:c6:ad:c7:8a:e5:6f:31:2c:c5:
4a:ed:08:9e:59:71:6f:05:3e:52:95:a8:2a:d6:fc:
26:78:02:83:57:29:39:22:a5:19:29:ac:ea:f0:a7:
46:ac:42:2d:70:39:db:e5:17:1b:b6:b4:b1:6f:b3:
ca:e1:b1:1f:48:f8:bb:eb:02:76:bc:a2:11:44:02:
aa:b5:d8:3e:89:7a:4a:7f:80:24:59:87:87:6e:f3:
bf:bd:5b:48:b3:c7:19:89:82:fb:53:72:2b:a6:03:
ba:1c:a5:c8:4a:a8:22:66:37:69:c3:24:da:9c:4f:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:AE:2A:37:CB:F0:74:F7:92:04:6A:6B:3B:9D:B9:39:C1:FC:26
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:33:42:7b:12:12:b6:64:57:e7:2e:d4:af:5e:48:10:30:50:
f8:4a:e8:da:af:65:38:f9:e7:9c:1b:7f:e3:4d:63:96:93:b8:
03:fb:10:b1:9f:ab:6d:36:d5:4d:fc:d7:e6:60:fd:9b:d7:56:
d7:03:8b:ba:28:d1:fc:d8:42:7b:e0:4b:bd:58:72:df:49:12:
b7:55:4d:b0:b7:03:41:5a:f9:04:1d:fd:9d:66:44:2a:70:12:
8d:89:72:02:86:b2:4a:3d:e0:80:2c:8d:a5:d8:0f:84:a2:00:
40:14:b6:30:be:59:f0:af:ec:46:06:8f:b3:73:d8:c4:d6:ee:
09:4e:9d:64:bb:ef:02:07:4a:e8:52:35:36:de:9e:eb:83:31:
cd:53:b8:f3:a1:75:32:89:16:b5:c4:1b:ef:05:48:e7:bf:f1:
72:8f:98:e4:89:ba:ab:6b:a1:61:6f:34:75:6f:e1:6c:8e:27:
b2:80:8a:65:68:40:13:38:fa:ad:a5:7b:45:e3:c5:5e:16:c7:
d2:ea:45:2f:fb:49:cc:b1:15:a6:b1:a7:e8:c9:18:7b:e4:da:
80:1d:f9:ae:37:25:1f:26:91:06:6a:12:76:73:b3:5c:70:09:
8f:c9:5c:3b:5c:ca:e0:c9:2a:19:8e:09:20:6f:03:62:9e:83:
98:e8:b8:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkn6lFNRQfMJRI2F9bwR3lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjUwOTA4MDYwMTMxWhcNMjUwOTA5MDYwMTMxWjAzMTEwLwYDVQQD
EyhiMzdjYWUyYTM3Y2JmMDc0Zjc5MjA0NmE2YjNiOWRiOTM5YzFmYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wI/V46+HktfXN9aW4zXrh3KsKLc
6Q0j8Mekkbu5lOJ5AoG2iC839QE/Xpv5BMf7of1LuyYvCM8uf0ZoRb/STR9UcMCa
q2LVk6JLN5fwbkME4XJw6QmKrIbp1cbz4pF8dRN4/AM42d62FztkWdJJIWliCsrS
atrbTG/F1VT0BxXZGQ4O2F5l2mm9xInGrceK5W8xLMVK7QieWXFvBT5Slagq1vwm
eAKDVyk5IqUZKazq8KdGrEItcDnb5RcbtrSxb7PK4bEfSPi76wJ2vKIRRAKqtdg+
iXpKf4AkWYeHbvO/vVtIs8cZiYL7U3IrpgO6HKXISqgiZjdpwyTanE8lewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN8rio3y/B095IEams7nbk5wfwmMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTNCexIS
tmRX5y7Ur15IEDBQ+Ero2q9lOPnnnBt/401jlpO4A/sQsZ+rbTbVTfzX5mD9m9dW
1wOLuijR/NhCe+BLvVhy30kSt1VNsLcDQVr5BB39nWZEKnASjYlyAoaySj3ggCyN
pdgPhKIAQBS2ML5Z8K/sRgaPs3PYxNbuCU6dZLvvAgdK6FI1Nt6e64MxzVO486F1
MokWtcQb7wVI57/xco+Y5Im6q2uhYW80dW/hbI4nsoCKZWhAEzj6raV7RePFXhbH
0upFL/tJzLEVprGn6MkYe+TagB35rjclHyaRBmoSdnOzXHAJj8lcO1zK4MkqGY4J
IG8DYp6DmOi4IQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 14:35:27 2025 by rpki-client