Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 6yDmcpH2TE2NURSQOTOC+4VR6hqgHZseQaataaVFk+g=
Subject key identifier: 09:4A:E0:BA:C5:DF:BB:07:46:17:65:F7:E8:22:DB:A3:60:7C:A0:2D
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019933B7531CE07A370D13013F74E86C78A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1454
Signing time: Wed 10 Sep 2025 13:01:16 +0000
Manifest this update: Wed 10 Sep 2025 13:01:16 +0000
Manifest next update: Thu 11 Sep 2025 13:01:16 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: oK+V76Cm2LatRAtCo5eMUV11LoYEa2bCRg5K9vRbRFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:53:1c:e0:7a:37:0d:13:01:3f:74:e8:6c:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Sep 10 13:01:16 2025 GMT
Not After : Sep 11 13:01:16 2025 GMT
Subject: CN=094ae0bac5dfbb07461765f7e822dba3607ca02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:35:63:2c:6f:e3:9e:56:73:2f:58:02:d7:
d8:32:f4:61:b0:01:d5:4b:2e:71:f2:6a:bd:d6:e1:
eb:9a:4c:db:de:0d:d9:a7:ab:24:9f:0a:29:5d:c6:
28:82:33:7b:74:70:55:b6:d1:29:9b:54:30:57:f3:
98:2d:3d:19:3f:c6:fc:d1:7b:00:ce:b0:74:b5:49:
c6:6e:39:05:d6:53:dd:8d:a7:91:b8:f4:de:54:a9:
ca:ba:ee:54:c9:26:ca:3c:a8:f1:01:c7:c0:e5:2f:
09:7f:b1:cb:82:5b:5a:18:d9:33:ae:ee:63:8e:81:
5c:88:68:86:ff:78:86:f3:af:59:e8:86:32:d2:73:
f3:06:b3:45:58:2b:8a:d1:4d:c5:e9:48:b3:63:73:
89:7e:6f:a0:2f:ef:b2:37:99:14:46:c1:df:a5:54:
8d:03:1b:cc:26:7f:3a:7d:53:07:da:20:68:72:04:
b7:ad:71:c2:16:1a:86:73:c4:2b:74:cc:1a:0a:61:
d0:9f:dc:30:11:d6:b8:f1:39:f2:b9:eb:3f:cc:23:
15:9e:4c:ad:e8:f5:99:6e:80:3e:54:02:46:92:6f:
94:de:e2:06:fb:44:89:7e:ba:f1:99:6f:5a:2e:96:
e1:97:d1:b8:37:57:80:d8:f4:d6:6b:76:4f:ae:a3:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:E0:BA:C5:DF:BB:07:46:17:65:F7:E8:22:DB:A3:60:7C:A0:2D
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:61:7a:79:2c:f0:31:01:c8:b1:84:41:c9:8f:c2:85:c3:18:
21:25:4c:cd:0d:38:06:56:3f:f0:0d:f3:0c:17:e1:0c:e0:24:
c2:7a:8f:5f:fe:b1:6a:46:1f:2b:50:3e:6e:1f:b3:c2:3d:1e:
33:1b:93:18:f7:b9:f7:ea:76:21:45:50:22:6a:35:27:5d:65:
ec:da:2e:a1:0e:4d:e0:3e:5a:d6:f7:33:57:09:87:63:0b:a1:
9c:2d:94:cb:08:dd:3c:09:15:5b:11:c1:81:50:06:e1:69:28:
d7:97:15:1c:a6:a7:63:d7:93:3d:69:34:71:f5:39:43:ac:f9:
60:3b:53:78:9c:ed:b9:7f:4b:27:89:99:23:5f:76:d0:c1:ee:
3e:c8:7d:07:34:5c:f2:7b:08:42:fd:18:5e:cd:a5:95:f0:2b:
bc:7c:3e:ac:65:08:53:d5:ca:96:d7:db:fe:29:37:b8:eb:77:
65:f4:cf:8a:0f:74:e3:db:1f:2d:57:08:04:8e:48:39:6e:9b:
4d:f5:1f:f2:2b:71:df:fb:fa:00:d5:27:cf:f5:d5:b1:e5:19:
e4:b2:c2:2a:3a:88:87:da:6f:96:2d:02:94:b2:4d:5e:13:57:
a0:2c:b8:9a:ea:61:0c:a6:0b:27:20:e7:72:77:c6:9d:02:1b:
39:f6:c4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzt1Mc4Ho3DRMBP3TobHijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl
MGZiNGUwHhcNMjUwOTEwMTMwMTE2WhcNMjUwOTExMTMwMTE2WjAzMTEwLwYDVQQD
EygwOTRhZTBiYWM1ZGZiYjA3NDYxNzY1ZjdlODIyZGJhMzYwN2NhMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRI1Yyxv455Wcy9YAtfYMvRhsAHV
Sy5x8mq91uHrmkzb3g3Zp6sknwopXcYogjN7dHBVttEpm1QwV/OYLT0ZP8b80XsA
zrB0tUnGbjkF1lPdjaeRuPTeVKnKuu5UySbKPKjxAcfA5S8Jf7HLgltaGNkzru5j
joFciGiG/3iG869Z6IYy0nPzBrNFWCuK0U3F6UizY3OJfm+gL++yN5kURsHfpVSN
AxvMJn86fVMH2iBocgS3rXHCFhqGc8QrdMwaCmHQn9wwEda48Tnyues/zCMVnkyt
6PWZboA+VAJGkm+U3uIG+0SJfrrxmW9aLpbhl9G4N1eA2PTWa3ZPrqN5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlK4LrF37sHRhdl9+gi26NgfKAtMB8GA1UdIwQY
MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut
Zjk5OTViNzhhODVmLzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm
LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomF6eSzw
MQHIsYRByY/ChcMYISVMzQ04BlY/8A3zDBfhDOAkwnqPX/6xakYfK1A+bh+zwj0e
MxuTGPe59+p2IUVQImo1J11l7NouoQ5N4D5a1vczVwmHYwuhnC2UywjdPAkVWxHB
gVAG4Wko15cVHKanY9eTPWk0cfU5Q6z5YDtTeJztuX9LJ4mZI1920MHuPsh9BzRc
8nsIQv0YXs2llfArvHw+rGUIU9XKltfb/ik3uOt3ZfTPig9049sfLVcIBI5IOW6b
TfUf8itx3/v6ANUnz/XVseUZ5LLCKjqIh9pvli0ClLJNXhNXoCy4muphDKYLJyDn
cnfGnQIbOfbEfg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:35 2025 by rpki-client