Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: OdM7heieNxKYBPxJBlhmXBLNEqg19ljPhXibZG7eMa8=
Subject key identifier: 85:15:49:4A:E7:ED:6A:7E:AD:53:13:E0:54:04:9D:12:25:13:89:30
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 01992D7DF1511633246E0D3AFAAEF1220B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 05D6
Signing time: Tue 09 Sep 2025 08:00:52 +0000
Manifest this update: Tue 09 Sep 2025 08:00:52 +0000
Manifest next update: Wed 10 Sep 2025 08:00:52 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: G6B+F/sIFIswRKm9q3zcqIO7puYOxblqzomVxxSBpRQ=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7d:f1:51:16:33:24:6e:0d:3a:fa:ae:f1:22:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Sep 9 08:00:52 2025 GMT
Not After : Sep 10 08:00:52 2025 GMT
Subject: CN=8515494ae7ed6a7ead5313e054049d1225138930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:36:0d:0a:63:e3:ed:e9:45:e8:a9:0d:7b:
82:95:7e:cd:fa:6a:95:20:89:d3:a7:c2:d6:d0:27:
c7:66:66:1f:bf:8b:5f:3e:7e:7f:c3:61:a9:39:35:
29:ee:34:0d:6c:28:b6:18:3f:6c:8a:3a:b4:54:f9:
d2:8c:2b:9c:84:fc:2f:fe:bf:83:49:49:07:3a:1b:
a0:6d:75:1c:5f:2a:25:87:a7:8d:f0:67:89:74:9f:
a4:94:a8:17:50:79:7b:5e:90:59:75:b9:00:3c:88:
bb:fa:14:4c:64:a6:ca:74:2e:ba:06:ae:fd:4d:97:
48:fb:bb:9f:2b:47:ee:25:12:5b:25:e4:46:d2:6b:
4b:88:ad:89:57:c9:d4:07:27:59:93:f7:a1:9d:17:
f3:89:6c:cd:a2:39:a2:f3:14:2d:ed:c1:c1:75:3a:
23:b9:c1:76:8a:65:2c:d3:f4:a3:11:94:6c:95:92:
9d:6b:e1:6c:9c:b4:58:54:cf:32:35:8f:24:01:6c:
cf:91:a8:18:09:0e:9e:36:4c:e1:e9:a0:0b:e3:84:
4c:31:e6:35:33:f1:15:7b:98:dd:68:0d:74:01:e5:
23:58:4d:f3:2c:07:f5:8d:92:c7:84:26:15:4a:90:
5b:9a:b3:04:75:ef:56:13:b8:6f:af:09:28:05:a3:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:49:4A:E7:ED:6A:7E:AD:53:13:E0:54:04:9D:12:25:13:89:30
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:1e:e3:08:24:b9:d2:11:e8:ab:57:d3:85:4f:72:88:0e:
54:7b:b8:28:7c:1f:5b:0e:70:87:75:99:3b:94:34:9c:ae:a2:
16:d1:42:54:9a:84:c7:3d:b8:d7:e4:26:1c:83:fd:93:e0:8a:
7d:84:af:62:35:7a:ed:6c:43:da:8e:d6:77:e5:95:0a:55:e5:
97:e0:0f:6a:7b:f1:29:45:e1:83:77:fe:06:b2:ba:4f:41:95:
6f:d7:0d:25:5e:28:8d:37:f3:bc:de:7b:60:f1:3b:d7:c0:35:
d4:2d:54:50:75:24:85:73:78:1c:d8:74:6a:99:4a:60:d3:48:
f6:ad:77:8e:f3:81:38:3a:c6:89:dc:e4:1a:8f:8b:89:67:29:
6a:d8:62:a5:eb:0d:6f:ac:34:49:7b:e7:e2:59:ba:03:73:19:
91:eb:97:a9:ef:92:4e:00:d8:71:5a:f7:76:96:94:7f:42:a9:
74:00:2b:e3:00:89:05:e6:36:66:d1:5c:e2:ce:08:07:de:4c:
38:17:b8:14:d0:99:eb:ed:07:80:60:74:9b:c1:30:da:c3:58:
d7:20:a4:f9:d4:2d:7f:7d:60:85:9f:e6:33:b8:19:bb:e6:4b:
67:ef:6b:2b:ca:7b:70:e0:69:10:1c:aa:03:bd:af:73:e8:3e:
79:63:51:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktffFRFjMkbg06+q7xIgubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMWM2M2EyMzY5ZGY3ZGZlY2YzYzg1MDg1OTMzNDFjZDM2
OWIyMzcwHhcNMjUwOTA5MDgwMDUyWhcNMjUwOTEwMDgwMDUyWjAzMTEwLwYDVQQD
Eyg4NTE1NDk0YWU3ZWQ2YTdlYWQ1MzEzZTA1NDA0OWQxMjI1MTM4OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+82DQpj4+3pReipDXuClX7N+mqV
IInTp8LW0CfHZmYfv4tfPn5/w2GpOTUp7jQNbCi2GD9sijq0VPnSjCuchPwv/r+D
SUkHOhugbXUcXyolh6eN8GeJdJ+klKgXUHl7XpBZdbkAPIi7+hRMZKbKdC66Bq79
TZdI+7ufK0fuJRJbJeRG0mtLiK2JV8nUBydZk/ehnRfziWzNojmi8xQt7cHBdToj
ucF2imUs0/SjEZRslZKda+FsnLRYVM8yNY8kAWzPkagYCQ6eNkzh6aAL44RMMeY1
M/EVe5jdaA10AeUjWE3zLAf1jZLHhCYVSpBbmrMEde9WE7hvrwkoBaMqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUVSUrn7Wp+rVMT4FQEnRIlE4kwMB8GA1UdIwQY
MBaAFFwcY6I2nfff7PPIUIWTNBzTabI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUt
NjdhMThkNjJlYzJkLzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUtNjdhMThkNjJlYzJk
LzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdQe4wgk
udIR6KtX04VPcogOVHu4KHwfWw5wh3WZO5Q0nK6iFtFCVJqExz241+QmHIP9k+CK
fYSvYjV67WxD2o7Wd+WVClXll+APanvxKUXhg3f+BrK6T0GVb9cNJV4ojTfzvN57
YPE718A11C1UUHUkhXN4HNh0aplKYNNI9q13jvOBODrGidzkGo+LiWcpathipesN
b6w0SXvn4lm6A3MZkeuXqe+STgDYcVr3dpaUf0KpdAAr4wCJBeY2ZtFc4s4IB95M
OBe4FNCZ6+0HgGB0m8Ew2sNY1yCk+dQtf31ghZ/mM7gZu+ZLZ+9rK8p7cOBpEByq
A72vc+g+eWNRkA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:55:46 2025 by rpki-client