Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: GxEZhA5IBay2OZv0gIYgGXJyHMu6omMFxo60JtHObbs=
Subject key identifier: 61:0B:D8:D5:94:8E:CB:04:9C:9E:8F:E0:7C:52:6B:A0:66:F6:71:61
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 0199C30D58DC556642647FBE7B0E2C613C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 16C8
Signing time: Wed 08 Oct 2025 09:00:55 +0000
Manifest this update: Wed 08 Oct 2025 09:00:55 +0000
Manifest next update: Thu 09 Oct 2025 09:00:55 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: UVhIrLXYnCFr1wg6ket/+iGarGHwXwyOYs6WNGOIyZc=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:0d:58:dc:55:66:42:64:7f:be:7b:0e:2c:61:3c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Oct 8 09:00:55 2025 GMT
Not After : Oct 9 09:00:55 2025 GMT
Subject: CN=610bd8d5948ecb049c9e8fe07c526ba066f67161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:18:34:e3:79:98:4b:65:be:4c:0e:59:26:
12:ac:1a:5d:f3:6b:d0:a7:10:39:c8:63:26:b2:3f:
60:1f:20:b6:8b:d1:da:98:8b:a2:42:b3:93:2e:dc:
d9:09:12:52:76:9b:7f:03:d3:88:74:32:ec:49:4d:
2a:a9:7b:36:d0:37:4a:e2:46:ff:73:bc:7d:46:dd:
dd:13:a1:c3:92:d4:66:2a:da:66:fa:32:3a:8f:05:
55:65:cc:f8:c9:4f:82:f2:ad:f6:ce:f8:c3:56:b1:
51:ef:a5:cc:e6:0a:74:8d:4a:79:84:78:9d:6f:b6:
e3:1a:03:96:20:ce:a8:70:a3:1b:a3:df:c6:da:a2:
65:3f:c8:ec:ab:f7:42:4b:81:88:db:88:87:2b:bf:
b0:8b:b0:98:1e:c7:f2:04:8f:50:61:6f:9e:44:5a:
4a:49:36:69:4c:2d:85:7d:64:e2:ab:89:bb:34:9f:
90:88:db:8c:81:b2:16:75:8f:45:18:99:35:79:44:
62:31:1d:10:7b:2b:17:0e:cc:0e:3f:6e:6e:fa:c4:
f4:de:6d:3f:39:e0:60:73:d5:1d:5b:2e:85:76:bd:
cf:99:ab:1f:15:1d:e9:17:4d:7d:31:96:56:4e:3c:
3d:c0:d0:96:fd:72:8b:f5:99:17:0d:92:e7:42:ef:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:D8:D5:94:8E:CB:04:9C:9E:8F:E0:7C:52:6B:A0:66:F6:71:61
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:21:36:28:19:a6:2f:f6:ad:3a:2e:f1:db:0a:f4:ff:a3:
fc:6d:34:8c:88:4d:4e:19:94:10:3b:97:ed:c8:8c:5a:e8:4e:
9f:19:dd:91:a1:7b:f3:57:3a:ac:c9:9f:8d:50:8c:bc:d4:a6:
4c:31:37:ad:c9:66:17:f5:d4:b6:bb:3d:db:fe:1f:20:e5:62:
53:8a:6a:9c:db:40:c8:d5:86:b5:35:dd:d4:69:8a:88:63:85:
bd:e9:25:b6:58:4b:36:54:93:20:21:0a:b1:55:df:cc:47:cd:
aa:93:df:81:0f:0a:58:c3:1b:c3:79:d5:44:ba:2f:e0:3a:5a:
a8:21:c0:62:fe:ca:3e:49:bf:78:2f:da:de:fe:46:3a:8b:44:
df:6e:78:7d:ab:56:a8:c3:56:09:d7:fe:ff:93:3f:fc:25:50:
b2:9a:0f:af:8f:8e:67:2b:b5:cf:3b:bd:c9:7f:ba:f6:d1:46:
e3:aa:9d:f8:dd:7b:d2:2f:22:7a:11:48:2a:e0:f4:98:0f:36:
0e:e5:6c:dd:62:32:b7:da:6e:97:1f:6a:bc:4b:1f:59:4a:f3:
6d:04:97:14:71:f3:fb:c2:c9:5b:bb:98:38:e5:cf:2e:e6:9b:
c5:97:40:bf:f0:c0:54:ba:0f:78:5d:f6:6b:7e:5a:96:88:6d:
81:0f:97:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnDDVjcVWZCZH++ew4sYTwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3
OGYwMDgwHhcNMjUxMDA4MDkwMDU1WhcNMjUxMDA5MDkwMDU1WjAzMTEwLwYDVQQD
Eyg2MTBiZDhkNTk0OGVjYjA0OWM5ZThmZTA3YzUyNmJhMDY2ZjY3MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuksYNON5mEtlvkwOWSYSrBpd82vQ
pxA5yGMmsj9gHyC2i9HamIuiQrOTLtzZCRJSdpt/A9OIdDLsSU0qqXs20DdK4kb/
c7x9Rt3dE6HDktRmKtpm+jI6jwVVZcz4yU+C8q32zvjDVrFR76XM5gp0jUp5hHid
b7bjGgOWIM6ocKMbo9/G2qJlP8jsq/dCS4GI24iHK7+wi7CYHsfyBI9QYW+eRFpK
STZpTC2FfWTiq4m7NJ+QiNuMgbIWdY9FGJk1eURiMR0QeysXDswOP25u+sT03m0/
OeBgc9UdWy6Fdr3PmasfFR3pF019MZZWTjw9wNCW/XKL9ZkXDZLnQu/ERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEL2NWUjssEnJ6P4HxSa6Bm9nFhMB8GA1UdIwQY
MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt
MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm
LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWUhNigZ
pi/2rTou8dsK9P+j/G00jIhNThmUEDuX7ciMWuhOnxndkaF781c6rMmfjVCMvNSm
TDE3rclmF/XUtrs92/4fIOViU4pqnNtAyNWGtTXd1GmKiGOFvekltlhLNlSTICEK
sVXfzEfNqpPfgQ8KWMMbw3nVRLov4DpaqCHAYv7KPkm/eC/a3v5GOotE3254fatW
qMNWCdf+/5M//CVQspoPr4+OZyu1zzu9yX+69tFG46qd+N170i8iehFIKuD0mA82
DuVs3WIyt9pulx9qvEsfWUrzbQSXFHHz+8LJW7uYOOXPLuabxZdAv/DAVLoPeF32
a35alohtgQ+Xsw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:27 2025 by rpki-client