Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: TwTI8iyyOqPLFAJaisJoQR2qIkprvafB/MJb1ZJPr7Y=
Subject key identifier: AB:32:08:CE:BF:D4:F0:7C:A6:50:79:DF:63:21:28:52:FB:7D:27:45
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 0198D4047EAE308EED3900D146BFC107FEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 1322
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: mUMTLZzuvWtyryGOfufOVysY/7/ZiugoRf50P+QzaoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7e:ae:30:8e:ed:39:00:d1:46:bf:c1:07:fe:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=ab3208cebfd4f07ca65079df63212852fb7d2745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:15:82:05:e5:98:bb:4f:77:71:75:c5:b9:
86:39:51:64:60:a3:e4:1c:39:50:d9:22:a5:9f:f8:
b2:f2:3f:1a:7a:c8:94:43:54:c0:49:96:3a:a6:78:
82:9b:8a:8f:1d:e4:cf:b9:03:79:7e:fc:26:80:3e:
6d:bf:c7:18:a8:2b:08:44:45:e9:d8:a4:ed:a0:9c:
96:9c:b7:94:85:d5:18:cd:46:e8:30:af:a9:cd:3f:
e3:76:d9:43:61:e2:34:04:3d:85:c7:36:f1:6e:ca:
ed:6f:97:06:b0:7f:6b:c8:85:34:2e:fa:9e:f6:cb:
53:31:56:42:52:38:96:aa:ba:3a:af:33:5f:a7:b0:
37:f5:af:d7:ac:8f:7e:52:f0:36:39:4d:9b:05:95:
f0:a2:47:9f:16:2b:e4:13:5f:c4:94:11:21:4a:30:
89:88:6c:a2:29:72:64:08:0f:cf:48:ec:a8:35:51:
87:b1:a5:72:26:90:4c:c6:62:4e:bc:cf:7a:d8:df:
30:70:c2:d5:f0:32:39:62:90:c3:84:38:02:7f:06:
0a:ca:d0:ff:3f:5b:b9:2d:68:89:53:50:ae:12:64:
2f:23:56:be:91:2d:2b:c2:62:e7:55:fa:c1:0d:0b:
1b:5f:34:f8:f5:80:ea:dd:3f:a7:9e:96:02:9d:9d:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:08:CE:BF:D4:F0:7C:A6:50:79:DF:63:21:28:52:FB:7D:27:45
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:5a:07:86:fc:64:cd:90:c6:19:63:3c:7a:0e:2a:9e:68:
2a:79:62:7a:97:77:3a:b4:a4:5e:4f:00:dd:45:3a:40:c7:40:
00:6d:43:54:90:b2:4a:2f:84:33:50:40:42:27:a9:ba:9f:7b:
7e:cb:05:7d:b3:06:d6:27:77:d8:54:cb:53:be:41:9c:1e:07:
f3:6e:f2:f0:43:a2:f1:3e:12:41:be:b1:eb:ce:5e:84:9c:dd:
79:49:cd:7a:fb:c4:9a:07:31:e0:db:5a:91:cd:40:58:3a:e9:
e1:9e:16:6f:9e:68:cb:ea:82:8f:63:2a:6a:5f:ce:75:44:7f:
dd:09:96:ae:06:d5:53:30:cf:42:48:ad:f8:54:fa:f5:01:c5:
a0:b3:ca:a2:31:18:cb:73:f2:32:31:c6:ac:b3:8e:8b:1c:f4:
61:c7:de:9b:f6:86:c0:fe:be:d8:c1:02:fb:44:4f:94:cc:e8:
75:bb:3e:48:4b:f8:7f:63:4b:5c:a7:99:71:a9:b2:f6:1d:19:
6f:a2:41:83:dc:cd:53:0c:96:e2:ef:0d:5e:53:e8:c3:a9:d3:
5a:c0:f5:fe:ef:1c:20:9f:0a:50:a7:58:96:88:1d:2e:92:cc:
c0:03:b8:ad:f9:d3:8a:27:44:77:cc:7c:cc:82:67:b3:47:2c:
18:9a:37:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBH6uMI7tOQDRRr/BB/75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy
MjEwZTYwHhcNMjUwODIyMjMwMjAwWhcNMjUwODIzMjMwMjAwWjAzMTEwLwYDVQQD
EyhhYjMyMDhjZWJmZDRmMDdjYTY1MDc5ZGY2MzIxMjg1MmZiN2QyNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRYVggXlmLtPd3F1xbmGOVFkYKPk
HDlQ2SKln/iy8j8aesiUQ1TASZY6pniCm4qPHeTPuQN5fvwmgD5tv8cYqCsIREXp
2KTtoJyWnLeUhdUYzUboMK+pzT/jdtlDYeI0BD2Fxzbxbsrtb5cGsH9ryIU0Lvqe
9stTMVZCUjiWqro6rzNfp7A39a/XrI9+UvA2OU2bBZXwokefFivkE1/ElBEhSjCJ
iGyiKXJkCA/PSOyoNVGHsaVyJpBMxmJOvM962N8wcMLV8DI5YpDDhDgCfwYKytD/
P1u5LWiJU1CuEmQvI1a+kS0rwmLnVfrBDQsbXzT49YDq3T+nnpYCnZ0avQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsyCM6/1PB8plB532MhKFL7fSdFMB8GA1UdIwQY
MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt
ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3
LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKdaB4b8
ZM2QxhljPHoOKp5oKnliepd3OrSkXk8A3UU6QMdAAG1DVJCySi+EM1BAQiepup97
fssFfbMG1id32FTLU75BnB4H827y8EOi8T4SQb6x685ehJzdeUnNevvEmgcx4Nta
kc1AWDrp4Z4Wb55oy+qCj2Mqal/OdUR/3QmWrgbVUzDPQkit+FT69QHFoLPKojEY
y3PyMjHGrLOOixz0Ycfem/aGwP6+2MEC+0RPlMzodbs+SEv4f2NLXKeZcamy9h0Z
b6JBg9zNUwyW4u8NXlPow6nTWsD1/u8cIJ8KUKdYlogdLpLMwAO4rfnTiidEd8x8
zIJns0csGJo3Eg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:20 2025 by rpki-client