Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: kPEcg7MCIMgWCh9Wo75mK73kfMTgtJ+gs64+bAcELj0=
Subject key identifier: 8D:59:4A:68:82:9E:E1:93:10:7B:0E:54:F8:74:B8:0F:88:40:CB:6D
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 0199228C7CFE3970A86EE46E353C73DEC0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:00:56 +0000
Manifest this update: Sun 07 Sep 2025 05:00:56 +0000
Manifest next update: Mon 08 Sep 2025 05:00:56 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: ZgDSNuOXz+J+4eFuXMG4MokywbEUl3kzwSMtotlj41A=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7c:fe:39:70:a8:6e:e4:6e:35:3c:73:de:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Sep 7 05:00:56 2025 GMT
Not After : Sep 8 05:00:56 2025 GMT
Subject: CN=8d594a68829ee193107b0e54f874b80f8840cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:10:98:d4:ff:7a:70:20:cf:8c:b8:4a:19:
37:a2:f0:a1:95:57:06:65:9f:de:f8:65:80:65:02:
c7:2a:c3:21:8c:5b:45:71:2f:54:f8:b7:1a:84:ee:
e6:41:86:f6:aa:fb:d3:7b:f0:d5:bd:68:20:fc:10:
76:26:1e:36:08:ed:19:87:86:16:0a:d6:2e:74:0a:
1a:15:fe:90:5d:f8:9b:d9:22:21:b1:cb:bb:b9:2e:
be:99:50:91:23:cd:29:d8:8f:9f:97:52:ff:c1:a1:
54:bf:75:8e:45:d2:29:99:61:8a:4c:9e:33:4d:fa:
2e:b7:2f:88:0a:9a:45:0a:d0:56:d2:01:51:93:ef:
5a:c1:7d:06:7a:4a:d9:d0:2d:82:9f:4b:1b:9a:1a:
9b:a9:e3:74:1f:47:54:5c:eb:84:9a:25:94:a6:27:
cd:8c:8e:ce:6e:53:3d:53:30:ba:6d:b4:ac:36:be:
fd:03:2b:77:ce:b6:f9:c5:54:96:5f:27:ad:86:f9:
25:0a:e5:66:ab:b0:af:25:70:3f:ec:d1:3e:d7:8e:
4d:db:63:ea:df:fc:e9:d7:12:95:2a:0a:77:ae:f4:
b6:59:ed:a2:f2:45:34:6d:ae:f0:23:5c:a2:4b:3a:
fc:e1:4a:0f:65:ea:8f:64:90:ea:66:0c:ff:6e:2f:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:4A:68:82:9E:E1:93:10:7B:0E:54:F8:74:B8:0F:88:40:CB:6D
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c0:37:25:a4:ed:ff:cc:87:85:1f:3b:79:07:25:a3:0c:4b:
32:88:90:f0:0a:32:13:ca:17:90:13:bb:5e:70:54:7a:7f:f6:
f9:e2:c5:91:e0:d1:ad:35:a1:86:09:3f:b9:2d:ab:6c:58:e7:
8f:05:1c:34:d0:e7:a2:2d:93:f6:cf:0e:6e:15:df:29:10:88:
35:d3:03:b3:bb:03:4b:13:5b:95:5b:8c:6f:34:66:6f:6c:1b:
1f:42:19:34:92:3d:4d:04:ef:47:82:92:28:45:9c:bd:b1:cf:
9c:f8:c8:f4:f8:48:74:b9:52:cf:82:8e:40:e4:99:aa:9a:ee:
b5:1f:5f:94:17:0a:a6:e2:1a:2f:ea:62:c1:ff:7c:7b:c7:7c:
f5:1d:cd:1b:c7:ed:b0:12:1b:0b:23:a1:42:de:c8:4b:11:ed:
b3:cc:9c:2f:15:0b:fb:20:c8:ca:1b:d5:75:dc:fc:f5:36:c3:
be:d2:3f:f9:c3:dc:2e:b0:ea:6f:b3:87:d1:bf:8b:bb:3f:87:
5d:35:de:47:59:f2:dd:70:bc:71:e7:00:57:65:65:c1:1c:38:
34:43:9b:9e:07:67:32:da:e3:e0:23:c6:f8:fe:a7:3e:df:2a:
d7:e2:cd:e6:99:d9:32:7b:21:c5:f7:77:66:0d:39:fc:74:ce:
26:8b:97:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijHz+OXCobuRuNTxz3sDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjUwOTA3MDUwMDU2WhcNMjUwOTA4MDUwMDU2WjAzMTEwLwYDVQQD
Eyg4ZDU5NGE2ODgyOWVlMTkzMTA3YjBlNTRmODc0YjgwZjg4NDBjYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/0QmNT/enAgz4y4Shk3ovChlVcG
ZZ/e+GWAZQLHKsMhjFtFcS9U+LcahO7mQYb2qvvTe/DVvWgg/BB2Jh42CO0Zh4YW
CtYudAoaFf6QXfib2SIhscu7uS6+mVCRI80p2I+fl1L/waFUv3WORdIpmWGKTJ4z
Tfouty+ICppFCtBW0gFRk+9awX0GekrZ0C2Cn0sbmhqbqeN0H0dUXOuEmiWUpifN
jI7OblM9UzC6bbSsNr79Ayt3zrb5xVSWXyethvklCuVmq7CvJXA/7NE+145N22Pq
3/zp1xKVKgp3rvS2We2i8kU0ba7wI1yiSzr84UoPZeqPZJDqZgz/bi8w/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1ZSmiCnuGTEHsOVPh0uA+IQMttMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcA3JaTt
/8yHhR87eQclowxLMoiQ8AoyE8oXkBO7XnBUen/2+eLFkeDRrTWhhgk/uS2rbFjn
jwUcNNDnoi2T9s8ObhXfKRCINdMDs7sDSxNblVuMbzRmb2wbH0IZNJI9TQTvR4KS
KEWcvbHPnPjI9PhIdLlSz4KOQOSZqprutR9flBcKpuIaL+piwf98e8d89R3NG8ft
sBIbCyOhQt7ISxHts8ycLxUL+yDIyhvVddz89TbDvtI/+cPcLrDqb7OH0b+Luz+H
XTXeR1ny3XC8cecAV2VlwRw4NEObngdnMtrj4CPG+P6nPt8q1+LN5pnZMnshxfd3
Zg05/HTOJouXtw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:27 2025 by rpki-client