Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: bnfU/wqTv2xqM7qfvsoFvLuHsiYaopozSmLT7GIDpms=
Subject key identifier: 94:E6:5F:79:D6:EF:2F:B3:86:59:DB:96:A1:DB:CD:90:32:E9:F6:19
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 019921B0D86CFA333B7E57EBD5493937B508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 1324
Signing time: Sun 07 Sep 2025 01:01:01 +0000
Manifest this update: Sun 07 Sep 2025 01:01:01 +0000
Manifest next update: Mon 08 Sep 2025 01:01:01 +0000
Files and hashes: 1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: 1Xdx05fYkEDH5ewfUPxHw3l6vVCZy66eOqfvcUrTXIc=)
2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d8:6c:fa:33:3b:7e:57:eb:d5:49:39:37:b5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Sep 7 01:01:01 2025 GMT
Not After : Sep 8 01:01:01 2025 GMT
Subject: CN=94e65f79d6ef2fb38659db96a1dbcd9032e9f619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:e2:ba:99:fe:13:ae:61:10:83:55:3a:a7:
4b:37:11:f5:c6:d3:3b:ea:d4:10:5b:99:b1:7d:6b:
4c:bc:6f:45:2b:4c:4d:08:2a:c6:56:b6:bf:1d:e3:
da:d6:87:40:7c:d3:25:6f:7d:3d:58:ca:e0:9d:44:
e5:59:c9:90:de:32:e4:cb:69:e3:cb:81:d4:28:b4:
e9:10:11:09:b4:ce:6b:a2:7e:08:99:d7:98:e7:5c:
b9:8e:dd:48:44:03:01:90:30:70:3f:1f:27:74:dc:
a1:e7:05:cb:48:63:8d:43:3b:69:91:13:71:bd:02:
6e:37:65:a9:5b:d3:04:f0:38:73:4f:04:60:94:95:
fe:3c:ef:2b:cb:b8:f0:ff:95:88:ab:9d:84:90:06:
50:11:b5:e2:75:43:e5:fe:00:3d:f3:33:1c:47:11:
7d:72:a9:35:90:66:84:87:53:05:60:da:d8:42:92:
ee:f7:06:36:6c:d3:b9:5e:c9:ea:66:f8:61:50:2e:
aa:c9:18:c5:c2:38:7a:a0:e1:44:af:05:cc:ac:24:
72:b1:a1:03:aa:d2:30:11:58:0e:d2:57:1c:21:e0:
f2:55:16:61:ee:ce:bd:f7:6b:77:47:48:9a:5b:b7:
a2:ab:2d:7a:7f:e5:70:20:f4:88:b6:b1:01:8b:56:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E6:5F:79:D6:EF:2F:B3:86:59:DB:96:A1:DB:CD:90:32:E9:F6:19
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:63:0e:a5:1c:94:07:c4:fe:d7:1b:b1:69:3a:76:e0:ea:e5:
a2:86:69:6c:36:d1:a3:20:9b:19:38:71:bd:7b:05:ef:5c:a4:
52:64:0e:70:fa:52:3a:cb:3f:6e:cc:da:96:60:0f:41:b1:14:
46:39:53:1f:6c:e5:40:75:ea:6a:f2:d2:99:73:26:f4:08:01:
2b:15:c2:27:ba:e4:63:86:38:a4:74:a0:5a:67:de:d0:8b:1b:
a8:0b:ed:be:f9:53:40:67:9b:fb:5a:35:e1:7f:81:f1:8d:0c:
2e:63:f3:d6:0d:c0:c7:3e:06:41:8d:94:ef:ca:c7:fb:26:45:
3a:98:4c:b1:be:c0:2b:6c:ef:c9:25:a5:b3:eb:03:8d:81:66:
30:b8:43:06:4b:65:dd:9b:21:f2:ca:99:fd:a0:f3:7c:c9:57:
ba:84:74:6e:8e:17:05:a3:f5:aa:71:c6:39:4a:d5:2a:c5:61:
b4:ca:8a:4d:e0:6a:7a:bb:f2:9b:3c:67:59:c2:0e:3e:19:9b:
51:3b:09:cf:15:b5:d4:06:b2:44:de:42:91:d8:d2:2c:b0:52:
47:15:d6:df:00:4d:94:ca:5e:3b:29:ac:10:7b:0b:e8:b3:c9:
1c:9e:e4:54:dd:3a:12:81:f6:1c:7d:81:00:12:3e:92:d9:a2:
0c:7d:25:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsNhs+jM7flfr1Uk5N7UIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmE1ZjUyYjAwMmY2Mjg2YzFkNWViMjU3YmI1ZTg1MzM0
MmEyODQwHhcNMjUwOTA3MDEwMTAxWhcNMjUwOTA4MDEwMTAxWjAzMTEwLwYDVQQD
Eyg5NGU2NWY3OWQ2ZWYyZmIzODY1OWRiOTZhMWRiY2Q5MDMyZTlmNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtPiupn+E65hEINVOqdLNxH1xtM7
6tQQW5mxfWtMvG9FK0xNCCrGVra/HePa1odAfNMlb309WMrgnUTlWcmQ3jLky2nj
y4HUKLTpEBEJtM5ron4ImdeY51y5jt1IRAMBkDBwPx8ndNyh5wXLSGONQztpkRNx
vQJuN2WpW9ME8DhzTwRglJX+PO8ry7jw/5WIq52EkAZQEbXidUPl/gA98zMcRxF9
cqk1kGaEh1MFYNrYQpLu9wY2bNO5XsnqZvhhUC6qyRjFwjh6oOFErwXMrCRysaED
qtIwEVgO0lccIeDyVRZh7s6992t3R0iaW7eiqy16f+VwIPSItrEBi1a0gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTmX3nW7y+zhlnblqHbzZAy6fYZMB8GA1UdIwQY
MBaAFFxqX1KwAvYobB1esle7XoUzQqKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUt
MDk2YzljMDdhZTE4LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUtMDk2YzljMDdhZTE4
LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImMOpRyU
B8T+1xuxaTp24OrlooZpbDbRoyCbGThxvXsF71ykUmQOcPpSOss/bszalmAPQbEU
RjlTH2zlQHXqavLSmXMm9AgBKxXCJ7rkY4Y4pHSgWmfe0IsbqAvtvvlTQGeb+1o1
4X+B8Y0MLmPz1g3Axz4GQY2U78rH+yZFOphMsb7AK2zvySWls+sDjYFmMLhDBktl
3Zsh8sqZ/aDzfMlXuoR0bo4XBaP1qnHGOUrVKsVhtMqKTeBqervymzxnWcIOPhmb
UTsJzxW11AayRN5CkdjSLLBSRxXW3wBNlMpeOymsEHsL6LPJHJ7kVN06EoH2HH2B
ABI+ktmiDH0lSQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client