Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File: Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier: /YSh36gt4PEIGqwSXJM2jcw8fQvZfp/9FVf1DMiJdQU=
Subject key identifier: 63:E5:94:CB:43:1A:AB:A8:40:C9:F9:3C:11:6F:5A:57:3F:DA:48:E4
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 0199345B8F505965282398E860D6C77C995D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number: 09D4
Signing time: Wed 10 Sep 2025 16:00:39 +0000
Manifest this update: Wed 10 Sep 2025 16:00:39 +0000
Manifest next update: Thu 11 Sep 2025 16:00:39 +0000
Files and hashes: 1: 05UqSuwLBRqPCroKa-NSlHo3suk.roa (hash: rVUvpxf5/0qhzBCE7eXYV4m07Wn+wX0M/lyBozQz/Xs=)
2: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (hash: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=)
3: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (hash: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=)
4: PXKLJWRK5JT5xqHPiU1wVHkKhag.roa (hash: f7UVVCkNNrYtkhi2nz2OzhGEpHRkcJKbi1gQjPZ3lQk=)
5: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: 2QMIWUzEk6V/GRia3BO1dBWz6SbBbwqR0RAG+ca+cTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:8f:50:59:65:28:23:98:e8:60:d6:c7:7c:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Sep 10 16:00:39 2025 GMT
Not After : Sep 11 16:00:39 2025 GMT
Subject: CN=63e594cb431aaba840c9f93c116f5a573fda48e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:57:b2:62:03:79:dc:18:c7:bb:34:48:00:
58:56:d3:ec:22:3c:2e:2a:17:eb:f0:a2:df:cd:72:
b1:b4:77:3e:c6:b5:8b:67:b2:9c:a1:6f:c8:d7:33:
83:0f:92:92:4d:0a:67:25:c0:4d:34:bb:54:a8:54:
35:53:17:0e:d8:aa:06:fa:53:49:b1:86:03:1c:34:
77:fe:e4:9c:cc:83:00:3c:e1:46:ee:b6:07:4b:b8:
10:2c:81:1c:8d:f9:cf:62:41:7b:ab:52:96:52:d9:
ca:21:0c:50:92:e7:0a:ab:b6:a3:49:75:f6:f8:c9:
11:37:32:ad:5e:65:f9:96:86:af:46:f1:f2:6e:a9:
18:e2:f2:09:25:01:39:84:d6:ae:1b:88:83:16:63:
27:e2:08:68:d7:b6:1e:4b:72:2b:c7:2f:1f:bc:d2:
39:1c:70:21:4d:27:e7:86:5c:67:3b:4d:85:f8:b4:
8f:c9:71:24:54:f7:7c:e5:a5:39:e4:14:10:31:b8:
16:cf:5f:73:2d:ca:8c:22:81:eb:6a:c9:18:91:d9:
26:59:35:6d:63:cf:bb:42:13:f6:75:7f:f7:2b:d3:
a0:f6:22:d4:86:2c:43:d1:8d:31:cb:c5:9c:3d:75:
88:a1:8b:9e:8c:26:f2:f6:62:3a:92:46:cd:0a:68:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E5:94:CB:43:1A:AB:A8:40:C9:F9:3C:11:6F:5A:57:3F:DA:48:E4
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:2d:f8:dc:c2:bd:d5:d3:19:a8:fa:d0:ae:28:9f:86:ec:
1d:b9:be:aa:01:03:c1:02:39:eb:78:4e:b4:28:4e:0a:a8:c8:
3b:a8:27:a9:d4:15:43:e7:ae:8f:ff:32:0a:e3:59:39:05:68:
4b:46:6d:ba:4e:c6:bd:c8:77:da:23:98:96:8e:72:c4:15:a7:
64:98:9f:6b:69:31:35:af:b2:37:94:0f:4f:ea:b7:39:45:f9:
78:c5:65:7d:bd:df:c7:77:e3:92:80:42:7b:49:71:ca:2b:18:
f4:fd:29:69:25:42:61:c0:10:a7:fe:11:40:9c:22:5b:24:9f:
10:d7:22:7d:f9:7a:89:20:be:c3:29:28:29:49:5e:ea:e0:4f:
26:43:d6:df:54:d9:f2:1f:10:85:b6:46:08:b4:dd:e9:1e:9f:
4d:fa:75:9e:95:f2:cb:b1:0e:6f:f5:bc:5c:2d:2e:5e:27:4b:
1a:75:1f:e0:4b:00:7a:34:5e:c0:ae:87:e7:d4:5b:e8:6e:ec:
1e:a0:6d:c1:58:15:c4:8d:34:75:34:35:91:e8:e6:06:85:de:
cf:44:b8:d6:f1:d9:d3:a7:c9:55:73:7d:25:55:10:5c:c3:d2:
4f:aa:9e:f7:eb:08:5b:45:e0:a1:f5:1e:3e:98:fe:5b:b0:ef:
65:aa:72:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W49QWWUoI5joYNbHfJldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl
MmNjNGEwHhcNMjUwOTEwMTYwMDM5WhcNMjUwOTExMTYwMDM5WjAzMTEwLwYDVQQD
Eyg2M2U1OTRjYjQzMWFhYmE4NDBjOWY5M2MxMTZmNWE1NzNmZGE0OGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNRXsmIDedwYx7s0SABYVtPsIjwu
Khfr8KLfzXKxtHc+xrWLZ7KcoW/I1zODD5KSTQpnJcBNNLtUqFQ1UxcO2KoG+lNJ
sYYDHDR3/uSczIMAPOFG7rYHS7gQLIEcjfnPYkF7q1KWUtnKIQxQkucKq7ajSXX2
+MkRNzKtXmX5loavRvHybqkY4vIJJQE5hNauG4iDFmMn4gho17YeS3Irxy8fvNI5
HHAhTSfnhlxnO02F+LSPyXEkVPd85aU55BQQMbgWz19zLcqMIoHraskYkdkmWTVt
Y8+7QhP2dX/3K9Og9iLUhixD0Y0xy8WcPXWIoYuejCby9mI6kkbNCmhwQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPllMtDGquoQMn5PBFvWlc/2kjkMB8GA1UdIwQY
MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt
N2JjZWZhOWY1OWU4LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4
LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt0t+NzC
vdXTGaj60K4on4bsHbm+qgEDwQI563hOtChOCqjIO6gnqdQVQ+euj/8yCuNZOQVo
S0Ztuk7Gvch32iOYlo5yxBWnZJifa2kxNa+yN5QPT+q3OUX5eMVlfb3fx3fjkoBC
e0lxyisY9P0paSVCYcAQp/4RQJwiWySfENciffl6iSC+wykoKUle6uBPJkPW31TZ
8h8QhbZGCLTd6R6fTfp1npXyy7EOb/W8XC0uXidLGnUf4EsAejRewK6H59Rb6G7s
HqBtwVgVxI00dTQ1kejmBoXez0S41vHZ06fJVXN9JVUQXMPST6qe9+sIW0XgofUe
Ppj+W7DvZapyMA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:16 2025 by rpki-client