Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: aMsSEK2NU0fGOdqWfvgFkpBWQJwMrFjLqoWJbPmkf+M=
Subject key identifier: FC:FB:B6:89:35:97:C0:9C:02:66:4E:A5:F7:EE:A2:4F:2A:FB:0B:BA
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0199225590503ACD9BA6154D838FCAE76EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 04:00:56 +0000
Manifest this update: Sun 07 Sep 2025 04:00:56 +0000
Manifest next update: Mon 08 Sep 2025 04:00:56 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: idn9tp9R40cTh2lxUfBFbllktVlr/eBOakdCHJH9fa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:90:50:3a:cd:9b:a6:15:4d:83:8f:ca:e7:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Sep 7 04:00:56 2025 GMT
Not After : Sep 8 04:00:56 2025 GMT
Subject: CN=fcfbb6893597c09c02664ea5f7eea24f2afb0bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:0f:07:08:57:de:ca:6f:3a:5c:a8:9f:ad:
cb:55:8f:fb:2d:dc:be:12:9a:85:c6:fa:8f:0f:38:
ca:10:b7:6a:7a:33:3d:a4:74:71:f3:5c:46:26:cf:
77:5b:69:26:70:ac:63:f1:26:0e:a1:51:24:04:ff:
f8:f7:97:f5:c6:25:25:e5:e3:87:34:cd:58:6c:e9:
1c:7a:3f:71:c0:38:da:27:eb:2a:e3:70:26:1c:dc:
b9:9b:6f:d5:55:9e:2a:0c:34:48:9b:2f:d0:8e:85:
83:c4:5c:4b:b4:20:b6:0b:9d:a2:17:51:9e:a8:09:
03:ba:ca:35:6a:dc:38:c4:e7:86:56:36:4e:61:e3:
62:d6:fc:39:8c:bb:c6:3f:4b:42:1e:b0:4c:ff:b2:
73:00:28:67:4a:fd:28:77:70:df:fe:9a:73:3e:49:
fb:86:b2:32:0f:7c:0c:ea:2a:e6:df:09:97:e7:d6:
68:00:c8:98:b3:70:b2:23:23:af:c0:e4:eb:ed:ec:
30:d0:9b:ec:24:1d:d6:eb:7a:da:54:d0:ed:71:8f:
c5:b5:e5:7f:fd:28:c0:44:ab:98:58:e1:27:f1:f6:
d3:31:60:75:2e:12:03:f1:37:83:4b:d6:46:41:2a:
92:4e:4e:a3:ed:be:6b:21:ae:2f:4d:e7:3f:3b:1f:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:B6:89:35:97:C0:9C:02:66:4E:A5:F7:EE:A2:4F:2A:FB:0B:BA
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:fd:70:3a:2e:5b:84:f9:67:be:98:e5:6d:96:7a:78:c3:
c2:09:4b:54:04:26:dc:6f:02:55:c9:93:db:ea:a6:08:e9:96:
5a:c9:c2:f2:c3:39:2e:cb:33:23:0e:d5:2c:0c:69:51:b8:5f:
e7:97:e9:7b:08:61:5c:0b:95:27:0f:7d:8c:bc:13:ae:99:c5:
f7:5e:f2:b2:fc:c4:fb:44:21:5a:56:ec:bb:12:3b:2a:12:8d:
22:04:11:de:e6:2a:90:52:a9:18:72:9a:5f:cc:dc:29:c4:34:
32:19:9c:03:5d:fc:49:dd:ed:9a:68:40:38:8e:58:e2:a9:44:
3e:29:68:4e:9a:ba:a8:fd:79:ce:c0:6a:f8:1f:b9:7d:30:1d:
99:87:ca:bf:85:70:a8:bf:9c:fd:34:e6:cc:9f:7b:14:b0:f2:
d0:59:0c:d5:1b:5b:b9:1b:d5:1b:09:fe:20:d2:9a:58:1e:04:
e4:ec:8e:44:93:75:94:93:6e:a2:1b:e9:b0:52:6a:df:3e:ef:
62:c4:4d:d9:4e:eb:87:f6:da:55:fc:f3:76:e0:a8:33:91:33:
ec:01:cd:62:d2:10:ac:36:84:7d:5c:dc:68:6e:da:00:32:d4:
26:01:79:2d:5b:c6:ca:34:b8:44:55:36:0d:a3:f8:f8:57:69:
ee:d1:6e:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVZBQOs2bphVNg4/K5268MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjc5MzllZDcwYzhhZWEzMWJlNDkzZTc4ZTg4ZjQ4NjFm
NTMxMjEwHhcNMjUwOTA3MDQwMDU2WhcNMjUwOTA4MDQwMDU2WjAzMTEwLwYDVQQD
EyhmY2ZiYjY4OTM1OTdjMDljMDI2NjRlYTVmN2VlYTI0ZjJhZmIwYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsEPBwhX3spvOlyon63LVY/7Ldy+
EpqFxvqPDzjKELdqejM9pHRx81xGJs93W2kmcKxj8SYOoVEkBP/495f1xiUl5eOH
NM1YbOkcej9xwDjaJ+sq43AmHNy5m2/VVZ4qDDRImy/QjoWDxFxLtCC2C52iF1Ge
qAkDuso1atw4xOeGVjZOYeNi1vw5jLvGP0tCHrBM/7JzAChnSv0od3Df/ppzPkn7
hrIyD3wM6irm3wmX59ZoAMiYs3CyIyOvwOTr7eww0JvsJB3W63raVNDtcY/FteV/
/SjARKuYWOEn8fbTMWB1LhID8TeDS9ZGQSqSTk6j7b5rIa4vTec/Ox98PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz7tok1l8CcAmZOpffuok8q+wu6MB8GA1UdIwQY
MBaAFFy3k57XDIrqMb5JPnjoj0hh9TEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYt
MmVkYWZjNjBmMmRmLzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYtMmVkYWZjNjBmMmRm
LzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBr9cDou
W4T5Z76Y5W2WenjDwglLVAQm3G8CVcmT2+qmCOmWWsnC8sM5LsszIw7VLAxpUbhf
55fpewhhXAuVJw99jLwTrpnF917ysvzE+0QhWlbsuxI7KhKNIgQR3uYqkFKpGHKa
X8zcKcQ0MhmcA138Sd3tmmhAOI5Y4qlEPiloTpq6qP15zsBq+B+5fTAdmYfKv4Vw
qL+c/TTmzJ97FLDy0FkM1RtbuRvVGwn+INKaWB4E5OyORJN1lJNuohvpsFJq3z7v
YsRN2U7rh/baVfzzduCoM5Ez7AHNYtIQrDaEfVzcaG7aADLUJgF5LVvGyjS4RFU2
DaP4+Fdp7tFuAA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:15 2025 by rpki-client