Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: 7pybxE3b8YkcDEabycfZ+dPf8h3r0c8zaOHwB/kYVtg=
Subject key identifier: F0:0B:D8:F8:FF:F3:75:11:FE:C8:BF:C3:69:05:33:8A:D7:66:D5:19
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0198D5836BD29C8BF7F7F06DAC1EC148FA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 0432
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: LZMHvAXuKWbAoUa6m4fkLVkjuu0fYrBTPuNXJNdY48U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6b:d2:9c:8b:f7:f7:f0:6d:ac:1e:c1:48:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=f00bd8f8fff37511fec8bfc36905338ad766d519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:78:87:43:fa:b4:f3:ad:c5:4e:ee:e2:f3:
8d:b4:eb:d3:de:49:b5:eb:e8:ce:0b:30:9c:ea:30:
ec:dd:f3:70:36:1e:a0:9c:04:29:0e:94:1e:3c:f7:
7e:36:ea:de:38:02:8c:69:9b:f4:9d:0b:9a:0b:30:
a5:fd:ec:5a:8a:bf:2f:1d:ed:26:90:27:9e:d7:c5:
98:99:23:95:28:f9:1c:ff:bf:a7:2d:8e:c8:f3:ea:
dc:e1:a4:7c:f9:0b:5b:ce:f1:5f:44:48:c6:7b:8e:
23:96:17:1f:a2:ad:e5:8e:29:5d:2a:b1:e2:80:e6:
12:cd:76:c8:4e:92:c4:16:a4:c0:e2:0f:48:8a:f8:
eb:7e:23:64:eb:d2:2a:eb:29:52:1d:f4:70:20:65:
28:50:18:50:25:d7:fc:fb:99:02:80:f7:ea:38:55:
cb:d2:ef:72:09:de:84:6f:17:3f:8d:38:43:68:2e:
45:30:4a:4a:cc:4a:c7:b2:0d:de:f8:ec:28:69:04:
13:33:c3:e4:f7:71:de:6f:57:82:35:cf:a7:df:dd:
db:c8:e3:5b:55:00:96:47:55:7e:fe:8f:b7:92:13:
2b:a8:c5:f6:0e:cc:80:c7:83:32:42:20:7a:71:b6:
8b:60:a3:f1:0b:c8:bd:aa:33:97:0b:e7:ad:c0:bc:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0B:D8:F8:FF:F3:75:11:FE:C8:BF:C3:69:05:33:8A:D7:66:D5:19
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e7:66:7e:ef:56:47:03:a2:61:38:0d:4f:18:39:cf:dd:32:
30:8a:af:61:a4:82:6b:9f:db:61:2f:40:02:49:1f:2f:0d:e8:
53:63:8e:d4:43:91:bd:36:5a:65:ee:30:77:e6:c0:a9:59:e0:
8f:f5:7d:fa:20:1f:71:64:db:0f:bb:23:11:4c:53:93:75:f4:
49:ec:97:06:4c:0c:a2:b5:96:8e:96:ec:fa:5c:44:77:2b:f5:
4e:54:c1:b3:95:d8:17:2e:2b:45:00:47:33:55:1d:ba:ed:90:
22:8e:d1:b3:41:6d:b1:d3:8b:73:65:f4:bc:bf:8c:d1:d4:67:
b2:89:36:d3:91:6a:70:8f:b8:11:0d:d8:c6:f9:66:ea:fc:83:
80:34:9f:e3:45:86:5d:5d:e5:2e:c7:dd:d5:d5:6b:7c:fc:84:
61:e6:13:c6:36:c3:d2:c2:5a:f3:15:8e:03:86:e4:84:a6:11:
54:65:da:87:81:b7:ba:48:86:c4:2a:89:38:1c:26:2b:29:39:
80:f5:c7:0e:fb:a4:93:12:28:a6:a5:55:e8:e4:4d:6a:d6:00:
5b:91:c6:cf:81:a3:cb:1d:ba:0d:9f:24:d2:02:38:fc:25:3c:
50:57:cd:82:01:57:5f:1e:2d:e8:8a:5f:0a:e4:03:c0:9e:5f:
8a:4d:03:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2vSnIv39/BtrB7BSPo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx
YTg4MjUwHhcNMjUwODIzMDYwMDE2WhcNMjUwODI0MDYwMDE2WjAzMTEwLwYDVQQD
EyhmMDBiZDhmOGZmZjM3NTExZmVjOGJmYzM2OTA1MzM4YWQ3NjZkNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobp4h0P6tPOtxU7u4vONtOvT3km1
6+jOCzCc6jDs3fNwNh6gnAQpDpQePPd+NureOAKMaZv0nQuaCzCl/exair8vHe0m
kCee18WYmSOVKPkc/7+nLY7I8+rc4aR8+QtbzvFfREjGe44jlhcfoq3ljildKrHi
gOYSzXbITpLEFqTA4g9IivjrfiNk69Iq6ylSHfRwIGUoUBhQJdf8+5kCgPfqOFXL
0u9yCd6Ebxc/jThDaC5FMEpKzErHsg3e+OwoaQQTM8Pk93Heb1eCNc+n393byONb
VQCWR1V+/o+3khMrqMX2DsyAx4MyQiB6cbaLYKPxC8i9qjOXC+etwLzpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAL2Pj/83UR/si/w2kFM4rXZtUZMB8GA1UdIwQY
MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt
ZDEyYTkwYmY1MDJlLzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl
LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaudmfu9W
RwOiYTgNTxg5z90yMIqvYaSCa5/bYS9AAkkfLw3oU2OO1EORvTZaZe4wd+bAqVng
j/V9+iAfcWTbD7sjEUxTk3X0SeyXBkwMorWWjpbs+lxEdyv1TlTBs5XYFy4rRQBH
M1Uduu2QIo7Rs0FtsdOLc2X0vL+M0dRnsok205FqcI+4EQ3Yxvlm6vyDgDSf40WG
XV3lLsfd1dVrfPyEYeYTxjbD0sJa8xWOA4bkhKYRVGXah4G3ukiGxCqJOBwmKyk5
gPXHDvukkxIopqVV6ORNatYAW5HGz4Gjyx26DZ8k0gI4/CU8UFfNggFXXx4t6Ipf
CuQDwJ5fik0DRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:56 2025 by rpki-client