Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: DioTL2GSbT7mw5qebGNLRK9WU8klLGcc6JCbk23zoro=
Subject key identifier: 51:F6:0C:95:F3:D8:6B:BE:D0:F0:9C:EE:F8:7F:6E:D5:60:C7:7C:39
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0198D4E01DBCC9426F5111F6830C70785865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 13B6
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: OuWk/r7BO7kN+9wJXJhJ8rGr5QRJCd5Lv3lzLaBOXgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1d:bc:c9:42:6f:51:11:f6:83:0c:70:78:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=51f60c95f3d86bbed0f09ceef87f6ed560c77c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:fc:1e:a0:ea:26:5c:91:00:af:5c:73:2b:
3e:ff:38:f6:45:03:59:a4:02:49:dd:76:70:98:7f:
4f:a5:b5:a2:b4:9b:d4:d6:ce:bd:28:ff:bb:6d:95:
dd:65:5e:d9:39:45:7d:db:bb:16:a1:9d:7a:0d:a3:
36:ad:4d:b5:38:33:c9:4b:46:02:ec:79:4b:fa:c0:
18:14:cf:7c:dd:41:f4:96:3f:de:c8:b0:45:e2:6e:
f5:66:51:cf:1b:60:5d:78:81:e9:55:33:97:60:02:
56:6a:e6:40:67:64:93:28:53:46:3b:1c:4f:5e:46:
b7:0f:ba:4a:94:33:34:b1:25:38:04:c1:f4:7f:63:
4d:ae:4a:54:18:ae:db:f2:30:c0:58:a4:a6:6d:66:
82:8e:ef:62:d9:5f:01:d1:7f:49:6b:1f:0b:a8:e1:
c9:fa:b2:07:b4:df:e6:06:5e:93:b4:b6:34:47:35:
46:32:26:5f:80:8c:89:e9:ad:ae:38:e2:2f:ce:9a:
40:d4:d9:b3:63:c8:c2:01:6d:05:33:41:21:ff:71:
1b:f3:7a:4c:1f:e8:61:f9:54:b2:ee:0e:04:6c:60:
b9:05:5b:6e:84:dc:66:28:60:3b:6b:ec:77:65:13:
53:19:ea:3e:55:e6:86:de:97:3f:00:cb:2c:ab:94:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F6:0C:95:F3:D8:6B:BE:D0:F0:9C:EE:F8:7F:6E:D5:60:C7:7C:39
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c2:e5:53:d6:fc:86:4e:90:51:3f:a2:71:35:10:61:da:a0:
8c:66:d7:ba:91:5e:1d:7a:3b:0b:29:bf:d5:c9:00:74:5d:43:
fc:ef:08:49:8b:eb:8a:62:3e:86:93:80:a7:95:b9:ce:2f:c6:
1e:62:bb:3f:73:cf:25:63:cd:f8:14:27:7a:18:26:00:02:9f:
8c:51:f9:4a:51:0d:03:01:66:ce:5f:9a:0b:37:0a:50:61:ca:
f0:69:b6:bb:67:eb:61:74:31:5c:0e:6b:4f:b5:1d:ec:ce:11:
25:67:58:68:1c:71:61:c5:18:0c:fc:58:a2:48:50:d8:11:64:
c7:10:9e:7c:e4:bd:2d:81:91:53:72:ca:e7:18:e5:8b:02:bd:
57:05:1f:6d:9e:b9:5a:f2:b4:5c:da:15:81:03:d9:cf:19:bf:
5b:ac:df:1b:93:51:88:18:05:39:ec:d3:0c:36:1e:58:62:f5:
bd:ff:8e:a9:88:bd:25:38:aa:42:89:56:fc:d4:98:97:61:f3:
4d:44:0e:5e:24:0e:4b:b5:27:ba:88:4f:09:2e:aa:a1:b3:58:
76:d2:49:48:7f:79:49:a4:40:0a:8e:40:77:03:9a:7c:30:25:
62:55:38:cc:76:d8:5b:6d:c1:8b:62:ef:10:f1:b8:a4:b9:42:
c8:98:63:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4B28yUJvURH2gwxweFhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjUwODIzMDMwMTU0WhcNMjUwODI0MDMwMTU0WjAzMTEwLwYDVQQD
Eyg1MWY2MGM5NWYzZDg2YmJlZDBmMDljZWVmODdmNmVkNTYwYzc3YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoT8HqDqJlyRAK9ccys+/zj2RQNZ
pAJJ3XZwmH9PpbWitJvU1s69KP+7bZXdZV7ZOUV927sWoZ16DaM2rU21ODPJS0YC
7HlL+sAYFM983UH0lj/eyLBF4m71ZlHPG2BdeIHpVTOXYAJWauZAZ2STKFNGOxxP
Xka3D7pKlDM0sSU4BMH0f2NNrkpUGK7b8jDAWKSmbWaCju9i2V8B0X9Jax8LqOHJ
+rIHtN/mBl6TtLY0RzVGMiZfgIyJ6a2uOOIvzppA1NmzY8jCAW0FM0Eh/3Eb83pM
H+hh+VSy7g4EbGC5BVtuhNxmKGA7a+x3ZRNTGeo+VeaG3pc/AMssq5SHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH2DJXz2Gu+0PCc7vh/btVgx3w5MB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMLlU9b8
hk6QUT+icTUQYdqgjGbXupFeHXo7Cym/1ckAdF1D/O8ISYvrimI+hpOAp5W5zi/G
HmK7P3PPJWPN+BQnehgmAAKfjFH5SlENAwFmzl+aCzcKUGHK8Gm2u2frYXQxXA5r
T7Ud7M4RJWdYaBxxYcUYDPxYokhQ2BFkxxCefOS9LYGRU3LK5xjliwK9VwUfbZ65
WvK0XNoVgQPZzxm/W6zfG5NRiBgFOezTDDYeWGL1vf+OqYi9JTiqQolW/NSYl2Hz
TUQOXiQOS7UnuohPCS6qobNYdtJJSH95SaRACo5AdwOafDAlYlU4zHbYW23Bi2Lv
EPG4pLlCyJhjRw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:47 2025 by rpki-client