Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: pg2yx+ffkrqJrP5DiuGP0yh8+96jzlXWp2288vGWm4Y=
Subject key identifier: F0:F2:5E:31:5B:6C:07:70:1D:D9:54:C4:C8:00:C8:F9:56:83:E3:59
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 019921B1882D73F3D0F40329DC1EC31DA254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 0A7D
Signing time: Sun 07 Sep 2025 01:01:46 +0000
Manifest this update: Sun 07 Sep 2025 01:01:46 +0000
Manifest next update: Mon 08 Sep 2025 01:01:46 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: XJH/gZlu8eVkRqXpPGO1NXm0hk52lavAPkxmF2MN/6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:88:2d:73:f3:d0:f4:03:29:dc:1e:c3:1d:a2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Sep 7 01:01:46 2025 GMT
Not After : Sep 8 01:01:46 2025 GMT
Subject: CN=f0f25e315b6c07701dd954c4c800c8f95683e359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:90:ef:eb:9c:1e:27:b3:e7:24:5b:cf:7b:
2d:cf:9a:76:68:74:c7:af:ba:42:58:3a:3e:04:bb:
84:ea:9b:25:99:a6:13:10:56:0c:e2:48:9a:41:80:
cd:22:d6:8a:b8:2d:08:07:14:dc:69:a1:9b:3f:2c:
b2:f0:40:d4:1f:4c:22:9f:b3:7b:61:9e:3e:47:6e:
9b:de:eb:64:c2:3c:cb:a7:af:8a:cd:19:66:b8:fc:
04:3e:ec:c5:f0:80:b4:49:2c:cc:f7:6e:62:61:50:
e7:d8:69:11:0d:65:33:e3:f0:04:f0:eb:f0:e4:a8:
ef:17:f8:45:f7:5b:2d:01:c7:0b:a9:95:7c:6d:be:
e5:3e:b8:e5:8d:6f:fb:b9:93:d9:cd:8d:f3:ff:cb:
78:f2:8e:25:e2:51:4a:e0:56:78:86:ef:4f:64:48:
52:6b:8a:86:c6:7b:fb:8c:9e:32:1c:4e:c9:7f:70:
ab:9e:c3:ab:b7:d5:60:7d:d0:8b:ad:01:bc:07:7e:
c1:3d:b2:80:d2:cd:0d:91:63:af:48:59:0c:d3:6d:
9a:22:4d:eb:cb:b5:84:47:5d:3f:9a:cc:28:c3:80:
bf:0f:b5:59:b3:95:de:2d:83:1f:e2:5a:06:ed:9b:
90:64:f8:87:ba:d5:12:cd:1b:58:e2:f0:95:a5:b6:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:5E:31:5B:6C:07:70:1D:D9:54:C4:C8:00:C8:F9:56:83:E3:59
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:66:7f:99:38:b0:3a:8a:04:e5:6c:a8:58:50:f1:8a:c6:bc:
9e:e1:34:34:34:59:ff:5c:20:29:9a:ef:de:7a:9c:cd:32:9e:
aa:53:2f:0a:ea:e7:56:cb:ab:5c:1b:c5:4f:f6:96:b5:f4:d3:
9f:84:2c:c0:54:dd:63:2e:39:e0:a7:77:f7:ca:3c:d1:09:2e:
d4:2e:2f:9f:cc:f4:0a:23:93:6e:01:a2:21:8c:ad:7e:72:6e:
2b:e0:d0:4c:4e:6b:a3:c8:a6:8a:01:39:e4:62:1a:50:96:53:
3c:5a:e3:46:b5:97:f8:b8:ea:b7:c9:08:66:1e:49:e0:d9:12:
85:b9:61:2e:6f:62:94:04:e7:21:e8:6f:33:c4:0f:23:1d:1d:
05:ff:20:66:3c:50:c2:10:ad:29:4e:92:e9:11:13:8d:94:44:
ee:35:0d:35:0e:16:19:4e:f2:79:9f:5b:7c:11:ce:c9:0e:6d:
bd:9c:d0:95:59:71:87:61:9a:ae:3f:4e:4a:51:26:5b:4e:d1:
26:dd:d7:d7:c5:9a:63:4e:db:2c:91:0e:02:c2:8a:45:ab:ba:
71:9a:3d:c0:4a:5c:7c:03:b4:af:df:c3:1f:0f:a6:35:ee:eb:
b6:8d:0f:ac:22:9f:30:1a:1c:fb:f8:0a:e2:ca:44:a8:25:7e:
fb:1c:71:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsYgtc/PQ9AMp3B7DHaJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2FhNDQ3ZjA5YmNiMGRkZjhhZmMxMGM3M2U4ZTkxYmJm
MDhlNTUwHhcNMjUwOTA3MDEwMTQ2WhcNMjUwOTA4MDEwMTQ2WjAzMTEwLwYDVQQD
EyhmMGYyNWUzMTViNmMwNzcwMWRkOTU0YzRjODAwYzhmOTU2ODNlMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0qQ7+ucHiez5yRbz3stz5p2aHTH
r7pCWDo+BLuE6pslmaYTEFYM4kiaQYDNItaKuC0IBxTcaaGbPyyy8EDUH0win7N7
YZ4+R26b3utkwjzLp6+KzRlmuPwEPuzF8IC0SSzM925iYVDn2GkRDWUz4/AE8Ovw
5KjvF/hF91stAccLqZV8bb7lPrjljW/7uZPZzY3z/8t48o4l4lFK4FZ4hu9PZEhS
a4qGxnv7jJ4yHE7Jf3CrnsOrt9VgfdCLrQG8B37BPbKA0s0NkWOvSFkM022aIk3r
y7WER10/mswow4C/D7VZs5XeLYMf4loG7ZuQZPiHutUSzRtY4vCVpbZE1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDyXjFbbAdwHdlUxMgAyPlWg+NZMB8GA1UdIwQY
MBaAFF7KpEfwm8sN34r8EMc+jpG78I5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDIt
OTNjNDRhYzg0MTRlLzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDItOTNjNDRhYzg0MTRl
LzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6mZ/mTiw
OooE5WyoWFDxisa8nuE0NDRZ/1wgKZrv3nqczTKeqlMvCurnVsurXBvFT/aWtfTT
n4QswFTdYy454Kd398o80Qku1C4vn8z0CiOTbgGiIYytfnJuK+DQTE5ro8imigE5
5GIaUJZTPFrjRrWX+Ljqt8kIZh5J4NkShblhLm9ilATnIehvM8QPIx0dBf8gZjxQ
whCtKU6S6RETjZRE7jUNNQ4WGU7yeZ9bfBHOyQ5tvZzQlVlxh2Garj9OSlEmW07R
Jt3X18WaY07bLJEOAsKKRau6cZo9wEpcfAO0r9/DHw+mNe7rto0PrCKfMBoc+/gK
4spEqCV++xxxhA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:44 2025 by rpki-client