Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: s/Ukd2pBmiKPkxQYYJKxG7P4BwVen/CtZH/sxpSGOjQ=
Subject key identifier: E3:A0:4D:15:23:54:59:24:31:87:D1:B5:AF:EB:A8:87:A6:CC:5A:B8
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 0198D583B136817CDC44CDE25840FBA3EA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa (hash: gMyDoTfbghGyh3Yg7Wcs9Qgp2ODCZ1LcJvPzyuFIMbU=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: g/SoAkbfbyoLSxIfcDVmvNxyowyOuqLryzCpp9Hq3BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b1:36:81:7c:dc:44:cd:e2:58:40:fb:a3:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=e3a04d15235459243187d1b5afeba887a6cc5ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:73:47:2e:91:0a:a6:3b:e0:ff:d4:d2:b2:
b4:cc:56:48:9b:03:50:07:2d:07:62:f9:33:ba:3c:
c0:de:61:cf:12:44:2b:48:c0:e9:fc:64:b9:6b:8b:
20:c1:91:d5:92:17:11:de:e1:5d:4e:2e:5b:48:cc:
45:d6:48:ea:d5:50:6e:30:17:b1:e8:4e:a2:71:e8:
01:5b:a8:65:01:31:8b:7d:29:fc:a5:cb:39:c6:e1:
a3:65:d4:0b:dc:aa:97:57:bb:e1:33:d4:1a:82:cb:
b6:78:9a:f5:ca:00:97:8a:76:7e:b7:ad:cb:b0:e7:
35:13:77:39:ee:bc:12:88:6b:07:b5:25:b5:3e:7f:
f1:19:b9:99:da:63:dc:68:72:1a:5f:94:12:50:ec:
83:68:9d:90:e6:a2:0e:b9:be:95:5a:73:67:a6:c0:
ee:3a:69:f1:df:42:5c:7a:13:68:41:41:50:72:5b:
f6:97:9a:f7:67:24:ec:c9:8c:35:5f:e5:0f:a2:b4:
ab:a5:c6:93:60:54:9b:db:1a:40:f8:5d:31:fd:47:
02:fb:d1:77:29:18:22:b9:8d:64:8e:c2:e7:75:5e:
68:4e:01:2f:55:13:88:27:56:23:16:a0:74:64:3e:
e0:29:d5:89:8d:fb:81:3b:03:47:0d:ec:bf:47:74:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:4D:15:23:54:59:24:31:87:D1:B5:AF:EB:A8:87:A6:CC:5A:B8
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:d8:19:cd:21:da:36:3d:c9:29:2c:6a:c4:b9:e5:89:df:
67:34:08:bd:ae:49:dd:f0:9c:05:c3:12:fc:e6:dc:41:28:1e:
e8:ed:ab:06:da:b0:aa:cf:f4:05:1a:de:09:7b:b5:c3:01:5f:
c4:d4:72:e9:33:85:86:11:18:cb:49:f3:d6:1c:25:db:8d:9e:
6a:f5:b5:02:2e:2f:83:4e:41:b7:e9:83:c8:40:03:f6:07:07:
e3:de:fb:09:fa:46:82:df:9e:93:f7:f5:a9:41:b2:17:17:46:
df:d4:3e:d9:6a:2a:a1:a1:4e:d4:ac:47:7c:50:8f:3f:00:6e:
0e:e9:70:b8:ac:b7:ec:23:a0:61:59:ed:06:8f:22:53:79:24:
3f:e3:cf:99:6b:59:c5:2d:16:b0:4a:10:51:c5:27:3b:db:11:
7f:ba:07:33:83:64:ca:e9:9e:35:c5:cc:b9:b2:1e:12:95:d0:
2a:f8:ce:98:a0:8d:d2:8b:a3:88:37:d7:85:74:53:45:92:8e:
30:f0:00:fb:60:1c:fe:29:61:e8:38:dd:9a:f9:b7:1a:db:32:
6c:ff:5f:46:47:c8:1d:70:8b:dd:b4:ab:91:53:bc:22:91:c6:
3e:81:cc:1c:b1:d4:cd:77:28:10:50:47:a8:f9:bc:f7:40:57:
d2:99:e3:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7E2gXzcRM3iWED7o+pTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDE4NjUzZmJmYjZmZDU3MzJkYzk0MGMxZDY1ZDc3YWIw
YmJmYTMwHhcNMjUwODIzMDYwMDM0WhcNMjUwODI0MDYwMDM0WjAzMTEwLwYDVQQD
EyhlM2EwNGQxNTIzNTQ1OTI0MzE4N2QxYjVhZmViYTg4N2E2Y2M1YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvRzRy6RCqY74P/U0rK0zFZImwNQ
By0HYvkzujzA3mHPEkQrSMDp/GS5a4sgwZHVkhcR3uFdTi5bSMxF1kjq1VBuMBex
6E6icegBW6hlATGLfSn8pcs5xuGjZdQL3KqXV7vhM9Qagsu2eJr1ygCXinZ+t63L
sOc1E3c57rwSiGsHtSW1Pn/xGbmZ2mPcaHIaX5QSUOyDaJ2Q5qIOub6VWnNnpsDu
Omnx30JcehNoQUFQclv2l5r3ZyTsyYw1X+UPorSrpcaTYFSb2xpA+F0x/UcC+9F3
KRgiuY1kjsLndV5oTgEvVROIJ1YjFqB0ZD7gKdWJjfuBOwNHDey/R3QCjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOgTRUjVFkkMYfRta/rqIemzFq4MB8GA1UdIwQY
MBaAFMbRhlP7+2/Vcy3JQMHWXXerC7+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2Yt
NWM2NTAyYmZmYTFmLzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2YtNWM2NTAyYmZmYTFm
LzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2DYGc0h
2jY9ySksasS55YnfZzQIva5J3fCcBcMS/ObcQSge6O2rBtqwqs/0BRreCXu1wwFf
xNRy6TOFhhEYy0nz1hwl242eavW1Ai4vg05Bt+mDyEAD9gcH4977CfpGgt+ek/f1
qUGyFxdG39Q+2WoqoaFO1KxHfFCPPwBuDulwuKy37COgYVntBo8iU3kkP+PPmWtZ
xS0WsEoQUcUnO9sRf7oHM4NkyumeNcXMubIeEpXQKvjOmKCN0oujiDfXhXRTRZKO
MPAA+2Ac/ilh6Djdmvm3GtsybP9fRkfIHXCL3bSrkVO8IpHGPoHMHLHUzXcoEFBH
qPm890BX0pnjxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:03 2025 by rpki-client