Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: 6mCz7tPSLpCsv2wubkcqnOzSJxju+Sicpq09zhmlE30=
Subject key identifier: 4D:AF:2B:69:A8:A2:CF:72:D1:9F:21:8C:B9:5E:55:DF:B0:27:A2:37
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 019923310F0EABE9CA12DF1554E2ED455FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:00:41 +0000
Manifest this update: Sun 07 Sep 2025 08:00:41 +0000
Manifest next update: Mon 08 Sep 2025 08:00:41 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: wOgkgk0mYV7Ereozh5RX2ATTxDzznImLfu6Bh3E6gF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0f:0e:ab:e9:ca:12:df:15:54:e2:ed:45:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Sep 7 08:00:41 2025 GMT
Not After : Sep 8 08:00:41 2025 GMT
Subject: CN=4daf2b69a8a2cf72d19f218cb95e55dfb027a237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:5c:4a:18:9a:b7:c1:68:2c:1b:37:45:cf:
8f:e8:38:c0:54:f8:da:a6:6c:e7:2f:2b:d4:4b:0b:
41:2d:ec:8d:47:d6:da:59:d2:5c:c6:bf:48:ea:3d:
e4:1e:9d:12:6c:37:44:bd:a2:44:22:10:78:04:e0:
78:65:cb:0b:0d:2d:7c:46:fe:4c:bc:43:fa:ae:15:
da:f3:06:71:f5:9b:1d:cb:e9:e8:c5:a4:8d:fd:5f:
3e:11:88:db:b5:9d:dc:0a:c1:a0:92:28:42:59:fd:
29:d3:b0:f1:00:27:73:f6:d2:80:98:7d:39:75:05:
87:81:91:50:ae:fc:b2:7a:f5:50:ee:e6:3c:14:c9:
7a:cf:6d:c0:d3:0e:3d:35:ba:8b:c6:26:17:e5:15:
ea:7c:01:e4:09:a2:c0:c1:93:39:9b:29:31:26:1b:
0e:8a:a1:a9:43:d5:51:71:18:f0:f6:ea:34:7c:38:
ba:93:3d:70:b5:e7:bb:f1:4a:54:7b:0c:ae:dd:e1:
7c:77:09:e2:1b:3b:ba:92:fd:c5:97:4b:9f:3e:69:
35:8f:3f:dc:11:3e:9a:8e:de:f5:66:96:5a:45:bd:
cd:4c:5c:46:1b:04:ba:96:27:fc:2a:c4:1e:a7:bd:
7e:60:6a:45:1d:d9:7a:33:00:1b:42:6f:51:90:5c:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:2B:69:A8:A2:CF:72:D1:9F:21:8C:B9:5E:55:DF:B0:27:A2:37
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1f:c6:dc:5b:7c:77:8e:7e:fe:b4:79:f9:e7:58:a5:d9:97:
ee:20:46:d9:72:45:91:95:67:cb:15:d6:d3:71:ef:0c:28:de:
e2:43:e7:6e:ef:97:af:f1:83:b6:c0:6b:25:9d:d6:e7:09:57:
10:5e:9e:4f:41:92:7d:e4:a6:a0:d5:09:94:fc:e2:2f:dc:69:
b8:0e:2d:01:e9:ec:95:ba:c7:a7:53:a6:25:08:dc:74:3f:67:
ab:cc:95:ec:26:8c:41:fc:65:39:1d:87:a8:3c:3f:a3:81:b7:
11:7e:c7:02:6e:2c:26:de:50:ab:8c:f3:62:34:cc:52:d5:e7:
63:7a:2d:64:b9:ef:1b:d2:0b:00:a6:06:da:05:15:c9:45:04:
ae:e3:dc:58:ed:6f:f8:14:64:5b:15:50:15:c3:d6:3c:f4:17:
28:bb:16:ec:dc:96:7b:a1:cf:eb:c0:c7:8c:8e:05:ef:9f:11:
da:e6:5b:d6:b5:d8:a5:ba:cd:4d:a5:21:9f:23:ef:1a:48:4d:
10:30:4c:1e:55:31:f2:18:71:cf:ca:4f:08:94:04:0d:0a:91:
d3:0c:1a:7e:e7:0a:36:f4:17:e0:36:5a:11:8c:b6:40:b2:d1:
fa:2d:9c:af:0d:74:95:a9:fc:ac:db:35:27:41:1e:42:22:d5:
27:d3:2c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMQ8Oq+nKEt8VVOLtRV+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5
ZDZmYjkwHhcNMjUwOTA3MDgwMDQxWhcNMjUwOTA4MDgwMDQxWjAzMTEwLwYDVQQD
Eyg0ZGFmMmI2OWE4YTJjZjcyZDE5ZjIxOGNiOTVlNTVkZmIwMjdhMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJJcShiat8FoLBs3Rc+P6DjAVPja
pmznLyvUSwtBLeyNR9baWdJcxr9I6j3kHp0SbDdEvaJEIhB4BOB4ZcsLDS18Rv5M
vEP6rhXa8wZx9Zsdy+noxaSN/V8+EYjbtZ3cCsGgkihCWf0p07DxACdz9tKAmH05
dQWHgZFQrvyyevVQ7uY8FMl6z23A0w49NbqLxiYX5RXqfAHkCaLAwZM5mykxJhsO
iqGpQ9VRcRjw9uo0fDi6kz1wtee78UpUewyu3eF8dwniGzu6kv3Fl0ufPmk1jz/c
ET6ajt71ZpZaRb3NTFxGGwS6lif8KsQep71+YGpFHdl6MwAbQm9RkFyyNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2vK2moos9y0Z8hjLleVd+wJ6I3MB8GA1UdIwQY
MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt
OWNhOGVhOTBlNjE3LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3
LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh/G3Ft8
d45+/rR5+edYpdmX7iBG2XJFkZVnyxXW03HvDCje4kPnbu+Xr/GDtsBrJZ3W5wlX
EF6eT0GSfeSmoNUJlPziL9xpuA4tAenslbrHp1OmJQjcdD9nq8yV7CaMQfxlOR2H
qDw/o4G3EX7HAm4sJt5Qq4zzYjTMUtXnY3otZLnvG9ILAKYG2gUVyUUEruPcWO1v
+BRkWxVQFcPWPPQXKLsW7NyWe6HP68DHjI4F758R2uZb1rXYpbrNTaUhnyPvGkhN
EDBMHlUx8hhxz8pPCJQEDQqR0wwafucKNvQX4DZaEYy2QLLR+i2crw10lan8rNs1
J0EeQiLVJ9MsYA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:37 2025 by rpki-client