Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: Nib2Y9Uj3m67jgJi186v6A40FVBbHqiqZZrEemOpQKM=
Subject key identifier: 37:03:45:D9:26:9D:5D:DE:E0:72:B0:48:62:25:A1:BC:5D:31:72:85
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 019935DBF561F2D645DCCD8DDED57B0903EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0C2D
Signing time: Wed 10 Sep 2025 23:00:31 +0000
Manifest this update: Wed 10 Sep 2025 23:00:31 +0000
Manifest next update: Thu 11 Sep 2025 23:00:31 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: ghkhw/R8zMiEzVINd1wvICOrgIQ50DLqkpfino2ijIw=)
2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:db:f5:61:f2:d6:45:dc:cd:8d:de:d5:7b:09:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Sep 10 23:00:31 2025 GMT
Not After : Sep 11 23:00:31 2025 GMT
Subject: CN=370345d9269d5ddee072b0486225a1bc5d317285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:f4:c6:86:58:45:07:71:15:08:a6:06:89:
ce:14:f7:82:bf:bf:08:61:3c:1e:ac:a8:39:88:25:
5a:a7:99:87:7d:d5:bd:22:bc:99:7b:4a:85:e0:ee:
a6:db:9d:26:ee:43:93:76:c2:18:a3:58:5c:79:96:
b9:dd:39:48:50:34:8e:fc:48:83:81:db:6c:f2:e1:
b2:20:4b:96:c5:e7:e8:44:7a:fd:6a:10:ef:63:f3:
8c:63:16:ce:c9:ab:08:2b:eb:d3:55:b6:16:e5:3b:
11:92:bc:97:9d:51:65:aa:99:a8:2a:61:4b:10:69:
d3:af:cf:cc:0d:47:62:d5:20:09:20:ff:38:d1:c9:
43:28:d7:b5:f3:9d:ee:9a:cf:8c:77:1f:c3:ed:7f:
f4:75:c4:17:eb:34:ec:0f:5b:a9:63:e5:d1:bb:ce:
c9:81:ff:45:e4:81:4e:d3:20:cd:79:8c:a5:9e:e5:
09:2a:fc:99:ae:ef:74:fc:7d:38:51:73:b7:9c:96:
06:67:98:b7:0c:c2:77:05:b9:3c:8b:b2:fa:61:75:
32:5f:67:2d:09:98:bb:5b:0f:0e:03:1c:53:90:87:
37:8f:2f:ab:fa:64:91:20:44:af:78:f5:fa:28:e3:
89:70:1a:72:ac:41:78:eb:cd:de:a9:a5:aa:88:f4:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:45:D9:26:9D:5D:DE:E0:72:B0:48:62:25:A1:BC:5D:31:72:85
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:4b:1f:a0:9c:91:51:5b:2e:a7:5f:27:8d:4c:58:96:21:
10:bc:05:ae:97:fc:09:03:67:7c:5b:e3:4a:43:9a:fe:a8:77:
f0:bc:51:eb:c6:3f:c2:5b:f9:8b:52:64:dd:bc:ff:4f:78:f1:
85:12:69:97:d8:89:35:1d:a1:41:23:18:43:85:24:30:71:de:
11:2c:2c:df:b9:fe:d4:f0:a1:1d:e6:89:9a:8f:b9:af:b3:73:
c1:ac:f9:85:15:02:a7:83:32:1f:7c:18:a0:1b:fd:a2:86:17:
bb:6b:94:62:7b:28:61:8c:78:2a:9a:bd:f8:01:b7:89:86:27:
44:67:85:e6:ec:25:54:1a:a1:2d:6f:44:31:c8:cb:10:51:df:
10:3f:15:67:fa:f1:cd:ba:06:44:23:6d:68:12:eb:8c:a7:78:
7c:0d:c2:e9:fc:7e:6f:93:33:cc:66:c5:40:9b:f8:75:02:f3:
3e:64:6b:e7:0b:ad:1d:aa:3f:80:12:91:29:19:20:53:9f:c2:
4d:32:e0:f2:b6:5d:e3:63:93:9f:d1:72:f1:f6:ef:b0:50:43:
aa:e9:d5:2d:a0:52:ab:00:92:9e:4f:34:a9:96:7f:ac:ab:c9:
48:f4:93:84:f5:a6:05:28:67:e6:8d:db:b6:61:ba:ca:51:d3:
a9:be:40:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk12/Vh8tZF3M2N3tV7CQPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh
YWMyZDkwHhcNMjUwOTEwMjMwMDMxWhcNMjUwOTExMjMwMDMxWjAzMTEwLwYDVQQD
EygzNzAzNDVkOTI2OWQ1ZGRlZTA3MmIwNDg2MjI1YTFiYzVkMzE3Mjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45j0xoZYRQdxFQimBonOFPeCv78I
YTwerKg5iCVap5mHfdW9IryZe0qF4O6m250m7kOTdsIYo1hceZa53TlIUDSO/EiD
gdts8uGyIEuWxefoRHr9ahDvY/OMYxbOyasIK+vTVbYW5TsRkryXnVFlqpmoKmFL
EGnTr8/MDUdi1SAJIP840clDKNe1853ums+Mdx/D7X/0dcQX6zTsD1upY+XRu87J
gf9F5IFO0yDNeYylnuUJKvyZru90/H04UXO3nJYGZ5i3DMJ3Bbk8i7L6YXUyX2ct
CZi7Ww8OAxxTkIc3jy+r+mSRIESvePX6KOOJcBpyrEF4683eqaWqiPSSBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcDRdkmnV3e4HKwSGIlobxdMXKFMB8GA1UdIwQY
MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct
MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi
LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjZLH6Cc
kVFbLqdfJ41MWJYhELwFrpf8CQNnfFvjSkOa/qh38LxR68Y/wlv5i1Jk3bz/T3jx
hRJpl9iJNR2hQSMYQ4UkMHHeESws37n+1PChHeaJmo+5r7Nzwaz5hRUCp4MyH3wY
oBv9ooYXu2uUYnsoYYx4Kpq9+AG3iYYnRGeF5uwlVBqhLW9EMcjLEFHfED8VZ/rx
zboGRCNtaBLrjKd4fA3C6fx+b5MzzGbFQJv4dQLzPmRr5wutHao/gBKRKRkgU5/C
TTLg8rZd42OTn9Fy8fbvsFBDqunVLaBSqwCSnk80qZZ/rKvJSPSThPWmBShn5o3b
tmG6ylHTqb5Aig==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:18:07 2025 by rpki-client