Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: Cj1Aq27Kn+1j9x/X1cGHpJCyp0tLWhphqD/60Aaifoc=
Subject key identifier: 72:EE:DE:DF:79:67:66:65:02:F9:DF:07:E9:6A:18:66:A9:43:B0:4C
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 01993047DA1E72B0A4BAC3D62E90A8C8527D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 05AE
Signing time: Tue 09 Sep 2025 21:00:39 +0000
Manifest this update: Tue 09 Sep 2025 21:00:39 +0000
Manifest next update: Wed 10 Sep 2025 21:00:39 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: c8ZQtUljxu6Q7nkO5/r/09nqZcc03EIVc2HuxLAw+Pc=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:da:1e:72:b0:a4:ba:c3:d6:2e:90:a8:c8:52:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Sep 9 21:00:39 2025 GMT
Not After : Sep 10 21:00:39 2025 GMT
Subject: CN=72eededf7967666502f9df07e96a1866a943b04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:b1:48:36:c8:a4:19:ff:5b:f4:f3:61:30:
3c:44:d2:f0:b3:a6:d7:e2:fd:73:c3:31:40:24:ab:
f6:5e:40:9a:29:8c:b3:b3:ea:76:f4:54:bc:2f:40:
9f:77:8e:7f:d1:41:3c:17:0e:4e:08:d8:ed:70:db:
ff:33:38:7c:69:f5:de:dd:e6:53:7c:f2:97:14:c0:
f1:d2:47:8f:78:2e:72:ff:31:e7:f2:13:da:96:bc:
cf:6a:52:e6:83:b9:c0:a4:b9:e3:51:c0:9a:87:fe:
6d:a1:de:93:2f:6a:14:29:c6:0f:11:79:6d:c9:35:
99:ae:03:ea:9b:9c:49:59:3e:77:99:94:c8:4f:a6:
91:4a:d2:d4:91:2d:32:2a:d9:b1:fd:b8:ee:e4:d2:
30:f8:75:1c:0e:74:2b:e2:05:ba:8f:1a:b9:07:a1:
f5:f8:e3:78:eb:cb:c9:7e:69:2f:be:5c:85:ad:7d:
78:0e:67:9a:10:53:25:65:b4:35:77:5e:e7:70:20:
0c:a8:2f:23:d0:2c:ca:af:1b:9f:a0:8d:b1:27:dd:
6a:d1:95:9b:2c:73:92:55:c8:48:50:3d:7f:3b:80:
db:64:b3:33:cf:11:08:72:f9:20:23:2a:1b:d8:5f:
a8:62:9d:47:9c:84:87:fe:8b:cc:03:0d:ce:9b:df:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EE:DE:DF:79:67:66:65:02:F9:DF:07:E9:6A:18:66:A9:43:B0:4C
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6c:0c:a4:24:ab:12:8d:fb:f5:30:66:d1:47:9f:81:54:b7:
08:e3:e3:52:bd:34:31:b7:d5:4e:3e:13:73:8e:76:f5:b4:9a:
8e:37:f9:c1:94:98:dc:17:d0:59:3f:c2:0e:d6:ee:9c:ed:38:
7e:ff:b6:cc:55:47:97:fc:94:bf:b2:4c:8f:3b:2b:cb:40:d8:
60:b6:2c:0e:a7:1d:0f:ba:16:a9:b8:5e:90:d2:a6:c4:56:f3:
f1:0a:2f:82:83:fb:a1:8f:0f:45:ce:6d:06:80:0e:a8:e1:80:
b1:11:67:58:a4:d1:d7:84:81:2e:a6:7c:fb:a2:e0:06:69:21:
1a:b4:50:ea:54:3d:5c:1f:b2:6d:2d:b2:68:11:e3:0e:2b:57:
8b:b6:a9:c8:b7:00:7d:c8:cf:f8:5b:f5:44:b2:6d:e3:fb:03:
c1:83:a9:fa:f6:bd:ae:54:34:f9:95:44:d6:57:5a:46:5f:f8:
d1:14:ca:19:32:36:26:a2:8b:1b:a0:72:09:2e:7f:db:b3:f5:
80:9d:c3:80:2f:1c:a0:69:4a:52:c3:d0:31:eb:4f:82:41:75:
44:80:70:3f:cb:4b:7d:93:06:96:15:b5:35:95:de:c5:43:74:
9d:2c:89:f3:29:7e:63:da:9a:be:71:61:37:8f:81:49:d0:fe:
62:d6:30:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwR9oecrCkusPWLpCoyFJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjUwOTA5MjEwMDM5WhcNMjUwOTEwMjEwMDM5WjAzMTEwLwYDVQQD
Eyg3MmVlZGVkZjc5Njc2NjY1MDJmOWRmMDdlOTZhMTg2NmE5NDNiMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbKxSDbIpBn/W/TzYTA8RNLws6bX
4v1zwzFAJKv2XkCaKYyzs+p29FS8L0Cfd45/0UE8Fw5OCNjtcNv/Mzh8afXe3eZT
fPKXFMDx0kePeC5y/zHn8hPalrzPalLmg7nApLnjUcCah/5tod6TL2oUKcYPEXlt
yTWZrgPqm5xJWT53mZTIT6aRStLUkS0yKtmx/bju5NIw+HUcDnQr4gW6jxq5B6H1
+ON468vJfmkvvlyFrX14DmeaEFMlZbQ1d17ncCAMqC8j0CzKrxufoI2xJ91q0ZWb
LHOSVchIUD1/O4DbZLMzzxEIcvkgIyob2F+oYp1HnISH/ovMAw3Om98NrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLu3t95Z2ZlAvnfB+lqGGapQ7BMMB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2wMpCSr
Eo379TBm0UefgVS3COPjUr00MbfVTj4Tc4529bSajjf5wZSY3BfQWT/CDtbunO04
fv+2zFVHl/yUv7JMjzsry0DYYLYsDqcdD7oWqbhekNKmxFbz8QovgoP7oY8PRc5t
BoAOqOGAsRFnWKTR14SBLqZ8+6LgBmkhGrRQ6lQ9XB+ybS2yaBHjDitXi7apyLcA
fcjP+Fv1RLJt4/sDwYOp+va9rlQ0+ZVE1ldaRl/40RTKGTI2JqKLG6ByCS5/27P1
gJ3DgC8coGlKUsPQMetPgkF1RIBwP8tLfZMGlhW1NZXexUN0nSyJ8yl+Y9qavnFh
N4+BSdD+YtYwNA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:30:55 2025 by rpki-client