Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File: Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier: AUQQwIL6d3ExtH27KFiJmkBuOafbNdfY7OlGH2df+8U=
Subject key identifier: A3:16:05:87:6E:35:F2:0B:07:85:A0:A2:08:B6:BC:3B:9F:70:47:BB
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 0198D5BC29C6300EDC4354465A9628634BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number: 09A3
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: 05UqSuwLBRqPCroKa-NSlHo3suk.roa (hash: rVUvpxf5/0qhzBCE7eXYV4m07Wn+wX0M/lyBozQz/Xs=)
2: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (hash: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=)
3: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (hash: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=)
4: PXKLJWRK5JT5xqHPiU1wVHkKhag.roa (hash: f7UVVCkNNrYtkhi2nz2OzhGEpHRkcJKbi1gQjPZ3lQk=)
5: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: WXu+mDKf6b8lSyxm+zjI/HKhCwQpD8+LDaIbmbJQv90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:29:c6:30:0e:dc:43:54:46:5a:96:28:63:4b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=a31605876e35f20b0785a0a208b6bc3b9f7047bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:9f:40:07:ff:9e:69:06:3f:4b:ad:69:6c:
66:b0:2b:1e:d8:7f:0d:53:69:18:27:e6:80:50:0d:
38:a2:89:b5:e3:56:96:a9:56:ff:59:7e:5a:98:3f:
07:17:d9:3c:a3:fc:59:ae:24:32:20:5b:16:56:72:
52:74:49:4a:54:e6:58:28:59:4a:e3:8a:6d:f8:3f:
bd:38:44:fb:27:df:69:f1:03:18:c0:ad:7f:d7:20:
19:ea:c9:a4:50:d6:da:2d:5d:25:27:a8:77:f0:7a:
2d:6a:5a:b1:69:1b:9f:6e:6e:20:ea:32:e2:e2:b9:
03:9a:2c:af:8d:25:6e:69:6e:b6:07:97:ec:b9:e7:
e0:e2:b3:0d:14:7f:86:e5:f0:96:0a:33:63:c8:84:
f3:e1:6b:32:b1:95:a6:47:ab:d0:ae:d4:84:82:3b:
d1:ca:55:33:4a:60:0d:7f:f3:dc:8d:1f:43:3b:e4:
d3:f1:0a:5f:46:24:d8:c6:19:b3:3e:07:77:5e:9c:
5e:36:d3:69:05:10:eb:06:39:76:47:72:ac:3b:36:
e5:83:9d:d6:34:f9:ae:2c:1b:11:c2:f7:b2:bd:2e:
93:7f:25:62:4f:8c:d4:ca:7d:f4:31:c0:23:7a:b0:
75:be:87:78:66:20:d6:b7:1c:1d:18:c2:86:43:01:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:05:87:6E:35:F2:0B:07:85:A0:A2:08:B6:BC:3B:9F:70:47:BB
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ef:b7:24:e8:17:16:07:76:1d:88:4e:24:69:4d:06:c7:59:
fa:16:16:9e:2a:69:3e:bf:65:14:1a:d6:71:54:08:9d:2a:0a:
7c:19:79:d5:86:53:2f:e7:50:ad:d0:0b:02:48:2b:b4:d1:86:
20:f7:63:40:49:f3:88:55:5e:22:40:fd:20:33:9f:46:a0:04:
32:14:7b:f4:28:c6:5e:81:8e:32:1b:63:1a:e7:63:aa:dc:7a:
c9:d8:4b:82:fc:33:77:43:c4:d2:e5:90:e3:f5:2d:89:13:fc:
04:d9:52:f1:71:2f:d4:fa:29:c0:46:c2:5d:1c:a1:16:fc:42:
d7:d4:86:26:1e:f9:a7:f3:76:ab:a2:1c:62:9c:5b:a8:bb:a9:
20:55:20:06:e8:5c:ef:20:79:53:33:5c:6f:7c:c0:6d:d8:7f:
66:7a:f3:81:89:ef:a6:8a:29:f5:e2:b8:02:e2:f2:88:77:dc:
3e:c9:c8:89:5c:9a:a5:0f:fd:0f:45:d5:af:f6:e2:35:36:e7:
e5:43:fd:95:c2:05:99:12:f1:59:92:6b:0a:97:bb:08:b3:35:
45:84:82:59:65:db:35:fa:c5:26:c7:09:ad:68:9c:18:cd:07:
cf:d2:9b:9f:92:de:92:be:b7:9b:be:a5:51:a1:ea:da:ef:6c:
42:3c:aa:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCnGMA7cQ1RGWpYoY0vuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl
MmNjNGEwHhcNMjUwODIzMDcwMjE0WhcNMjUwODI0MDcwMjE0WjAzMTEwLwYDVQQD
EyhhMzE2MDU4NzZlMzVmMjBiMDc4NWEwYTIwOGI2YmMzYjlmNzA0N2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZOfQAf/nmkGP0utaWxmsCse2H8N
U2kYJ+aAUA04oom141aWqVb/WX5amD8HF9k8o/xZriQyIFsWVnJSdElKVOZYKFlK
44pt+D+9OET7J99p8QMYwK1/1yAZ6smkUNbaLV0lJ6h38HotalqxaRufbm4g6jLi
4rkDmiyvjSVuaW62B5fsuefg4rMNFH+G5fCWCjNjyITz4WsysZWmR6vQrtSEgjvR
ylUzSmANf/PcjR9DO+TT8QpfRiTYxhmzPgd3XpxeNtNpBRDrBjl2R3KsOzblg53W
NPmuLBsRwveyvS6TfyViT4zUyn30McAjerB1vod4ZiDWtxwdGMKGQwHm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMWBYduNfILB4Wgogi2vDufcEe7MB8GA1UdIwQY
MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt
N2JjZWZhOWY1OWU4LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4
LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc++3JOgX
Fgd2HYhOJGlNBsdZ+hYWnippPr9lFBrWcVQInSoKfBl51YZTL+dQrdALAkgrtNGG
IPdjQEnziFVeIkD9IDOfRqAEMhR79CjGXoGOMhtjGudjqtx6ydhLgvwzd0PE0uWQ
4/UtiRP8BNlS8XEv1PopwEbCXRyhFvxC19SGJh75p/N2q6IcYpxbqLupIFUgBuhc
7yB5UzNcb3zAbdh/ZnrzgYnvpoop9eK4AuLyiHfcPsnIiVyapQ/9D0XVr/biNTbn
5UP9lcIFmRLxWZJrCpe7CLM1RYSCWWXbNfrFJscJrWicGM0Hz9Kbn5Lekr63m76l
UaHq2u9sQjyqdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:34 2025 by rpki-client