Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: LkQKa4zgSHbvkU+LjFmT1vsNIQ1IdQnNZTftgydEeTA=
Subject key identifier: 73:FB:D9:40:69:ED:24:6A:6B:F3:E1:B7:F4:4D:3D:45:44:2D:20:9A
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 01993236B8F22BD5C18CAA8353D4B9F004EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 07F8
Signing time: Wed 10 Sep 2025 06:01:11 +0000
Manifest this update: Wed 10 Sep 2025 06:01:11 +0000
Manifest next update: Thu 11 Sep 2025 06:01:11 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: PGCnE5w+/FZZZSy/pMmXQHmi+bbbKKp39yf9zPkFKTY=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:b8:f2:2b:d5:c1:8c:aa:83:53:d4:b9:f0:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Sep 10 06:01:11 2025 GMT
Not After : Sep 11 06:01:11 2025 GMT
Subject: CN=73fbd94069ed246a6bf3e1b7f44d3d45442d209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:ba:81:dd:26:89:30:01:a9:47:81:62:34:
97:54:f8:9d:d2:f0:bb:c4:27:11:44:94:9f:e2:c7:
b0:43:d3:69:5d:63:6d:34:fd:c4:07:6d:28:7c:e8:
86:03:02:52:ff:c5:cf:c9:73:5a:cd:1f:5e:3a:c2:
c9:ce:e4:37:1c:9a:a7:91:0f:65:ec:bc:d1:c6:2e:
21:0a:e5:71:d4:86:27:cc:d2:e3:a5:9b:dd:64:8e:
f4:20:88:b9:ce:ff:ba:b3:a7:33:eb:19:90:ff:1b:
ed:6a:91:62:25:51:ad:b9:79:c6:d1:15:97:16:ac:
b8:1b:9e:24:4b:17:23:09:e7:e5:9c:8d:d0:d8:9e:
21:12:04:48:0e:8d:aa:9e:2b:aa:3d:5e:69:95:4c:
d1:51:d0:fc:57:85:f7:63:cf:fb:e4:48:ec:84:62:
61:3a:18:d9:bc:1e:2e:ed:1a:c7:0e:ee:cc:63:5b:
62:d1:6a:68:28:a1:89:86:21:97:94:84:cd:58:ce:
38:4c:58:56:e6:51:db:36:10:09:b7:d1:62:c9:d0:
ee:d7:c7:13:43:68:c0:a1:78:bf:33:e3:7c:cd:6e:
4f:a3:ee:85:55:25:2c:d2:c4:4a:d2:14:a9:9e:25:
a5:c6:b0:cf:03:6b:4c:e5:c0:61:71:07:f7:5f:3f:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:D9:40:69:ED:24:6A:6B:F3:E1:B7:F4:4D:3D:45:44:2D:20:9A
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:86:37:67:8e:df:87:ca:54:4a:75:a0:d0:49:67:9c:8c:
64:2b:a6:18:87:99:97:5e:17:f7:53:79:0b:05:cc:a0:fc:27:
41:2d:fd:4e:97:3d:34:c7:1a:b2:3d:2e:a2:46:c8:77:5a:a0:
80:50:e5:35:9b:29:82:3f:81:21:7f:8d:da:21:ac:a0:2a:98:
e9:3f:cf:a4:f9:fc:35:16:42:e7:22:d6:ed:cf:ce:26:ae:ba:
88:0d:a2:a8:88:bf:95:f4:c5:b2:e1:c6:c1:9f:3a:f4:ec:26:
d9:ff:1d:1f:ce:c3:29:bc:be:16:6d:0e:e5:34:63:87:7b:41:
d0:22:b9:f2:59:0a:7b:b2:4d:82:55:e2:bf:57:0c:da:64:f2:
1a:bd:f9:69:30:65:bc:10:b5:0b:33:13:b8:42:f4:16:cc:c3:
b8:b8:21:7c:50:7c:e2:5a:30:20:d2:1e:76:ee:88:50:47:39:
dd:b6:d2:12:97:05:31:92:7a:d1:73:5a:a5:65:05:a1:a9:b4:
b4:52:cc:4c:3d:54:0c:b6:24:23:a6:68:8a:57:af:b6:79:d0:
5c:ff:b7:af:48:84:25:bb:8a:19:7e:72:a8:2f:eb:49:45:b5:
c0:7e:0f:83:a1:d7:df:d6:8f:f2:56:65:a9:ae:15:ea:28:4c:
47:93:c8:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNrjyK9XBjKqDU9S58ATrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2
YzdjZGQwHhcNMjUwOTEwMDYwMTExWhcNMjUwOTExMDYwMTExWjAzMTEwLwYDVQQD
Eyg3M2ZiZDk0MDY5ZWQyNDZhNmJmM2UxYjdmNDRkM2Q0NTQ0MmQyMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+e6gd0miTABqUeBYjSXVPid0vC7
xCcRRJSf4sewQ9NpXWNtNP3EB20ofOiGAwJS/8XPyXNazR9eOsLJzuQ3HJqnkQ9l
7LzRxi4hCuVx1IYnzNLjpZvdZI70IIi5zv+6s6cz6xmQ/xvtapFiJVGtuXnG0RWX
Fqy4G54kSxcjCeflnI3Q2J4hEgRIDo2qniuqPV5plUzRUdD8V4X3Y8/75EjshGJh
OhjZvB4u7RrHDu7MY1ti0WpoKKGJhiGXlITNWM44TFhW5lHbNhAJt9FiydDu18cT
Q2jAoXi/M+N8zW5Po+6FVSUs0sRK0hSpniWlxrDPA2tM5cBhcQf3Xz+E4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP72UBp7SRqa/Pht/RNPUVELSCaMB8GA1UdIwQY
MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt
OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz
LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYuGN2eO
34fKVEp1oNBJZ5yMZCumGIeZl14X91N5CwXMoPwnQS39Tpc9NMcasj0uokbId1qg
gFDlNZspgj+BIX+N2iGsoCqY6T/PpPn8NRZC5yLW7c/OJq66iA2iqIi/lfTFsuHG
wZ869Owm2f8dH87DKby+Fm0O5TRjh3tB0CK58lkKe7JNglXiv1cM2mTyGr35aTBl
vBC1CzMTuEL0FszDuLghfFB84lowINIedu6IUEc53bbSEpcFMZJ60XNapWUFoam0
tFLMTD1UDLYkI6ZoilevtnnQXP+3r0iEJbuKGX5yqC/rSUW1wH4Pg6HX39aP8lZl
qa4V6ihMR5PIDA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:23:54 2025 by rpki-client