Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: pdZFg8tS1t1feQHMpLJINANFpWPJcJsJl/bXLbJZ9Ak=
Subject key identifier: 49:3D:3C:3A:65:FD:57:02:BF:24:0B:35:FC:0E:87:6A:93:CD:2D:18
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0198D660D5A5CA59996D29DBD84DE66DAB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: QCEbTsrP/ONOH1QeXEl8VW+KafYyCLxjfre8Vm+2JxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d5:a5:ca:59:99:6d:29:db:d8:4d:e6:6d:ab:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=493d3c3a65fd5702bf240b35fc0e876a93cd2d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:9e:f8:12:79:e7:f3:39:3f:14:31:91:bb:
cd:46:70:03:d5:01:df:a3:88:5b:c8:b8:82:83:5d:
6b:7d:3e:e5:c8:96:99:95:36:82:42:d6:6d:bd:b7:
73:08:13:28:ac:58:73:7a:83:6b:f2:2b:40:01:ad:
52:06:c3:60:90:84:f4:74:a6:58:70:06:fe:63:7d:
e7:2d:f8:37:16:c2:a4:32:c5:70:05:17:16:bf:01:
d0:a5:94:63:7a:31:43:89:16:0b:88:87:2b:eb:e4:
86:24:53:0b:31:1d:24:e9:b0:7a:c8:ac:29:ab:72:
6f:75:ca:15:03:cd:8e:11:a6:a5:06:89:13:5a:73:
f1:f0:89:c6:6c:de:fd:9a:13:0e:16:b4:e8:a0:c9:
b5:4d:c7:79:9d:69:d7:07:bf:54:6f:d3:93:12:ab:
fc:77:75:1b:17:f3:f8:20:91:e5:f0:62:81:20:da:
7f:20:e7:ae:fc:27:9d:a1:03:6f:cf:4d:50:28:47:
42:bc:5b:c1:9e:ff:d6:d4:eb:8c:54:d4:c8:ad:ff:
d2:3d:13:9f:dc:ef:7c:89:29:64:57:2b:51:dc:19:
0f:f6:2d:bb:36:9c:2c:76:d9:ca:aa:ad:11:bc:61:
0a:07:97:cb:e2:36:c4:e6:dc:13:82:76:f3:c6:8c:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3D:3C:3A:65:FD:57:02:BF:24:0B:35:FC:0E:87:6A:93:CD:2D:18
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:b5:6f:a0:2a:57:24:4b:22:c0:0b:3c:17:b7:57:60:f5:
61:85:32:79:42:57:cb:56:f3:55:d1:69:5e:48:4b:78:26:ed:
ad:3e:1e:68:f5:2c:5c:4b:3b:99:d3:f3:de:2f:23:2f:34:f4:
38:43:0b:e0:d3:95:a2:2b:de:e5:6a:c0:ba:c1:be:4b:3b:69:
74:89:0b:3d:d1:8c:18:70:ef:de:20:22:50:95:96:65:37:6b:
ab:cd:58:b1:c6:8c:c1:c5:cf:2d:33:d0:ae:00:a1:cf:fe:a0:
31:91:a4:bb:bb:09:30:87:f5:0e:8b:49:e4:51:5f:09:79:4a:
71:b1:68:ef:92:15:5f:53:57:6d:93:1c:d2:bb:1a:26:98:fb:
39:a7:6c:11:70:ec:5c:f9:d4:7d:97:e9:29:24:88:36:41:1b:
3e:04:7e:75:bf:a3:74:74:76:90:be:27:04:5f:1a:1b:b5:de:
1c:49:6d:30:1c:3c:57:57:ba:02:cc:d3:ea:62:bf:7a:24:d9:
73:b8:41:c9:e4:65:02:af:7e:6f:25:3b:16:43:54:9f:f1:c6:
66:17:7b:db:ee:66:aa:5d:3c:a6:6e:7c:e0:7f:43:30:89:f1:
75:7d:25:06:b4:ce:dc:73:32:ca:8e:a3:fd:a3:fa:d1:d6:45:
14:60:4f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYNWlylmZbSnb2E3mbauaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy
YzNjZDcwHhcNMjUwODIzMTAwMjA2WhcNMjUwODI0MTAwMjA2WjAzMTEwLwYDVQQD
Eyg0OTNkM2MzYTY1ZmQ1NzAyYmYyNDBiMzVmYzBlODc2YTkzY2QyZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvOe+BJ55/M5PxQxkbvNRnAD1QHf
o4hbyLiCg11rfT7lyJaZlTaCQtZtvbdzCBMorFhzeoNr8itAAa1SBsNgkIT0dKZY
cAb+Y33nLfg3FsKkMsVwBRcWvwHQpZRjejFDiRYLiIcr6+SGJFMLMR0k6bB6yKwp
q3JvdcoVA82OEaalBokTWnPx8InGbN79mhMOFrTooMm1Tcd5nWnXB79Ub9OTEqv8
d3UbF/P4IJHl8GKBINp/IOeu/CedoQNvz01QKEdCvFvBnv/W1OuMVNTIrf/SPROf
3O98iSlkVytR3BkP9i27NpwsdtnKqq0RvGEKB5fL4jbE5twTgnbzxowEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk9PDpl/VcCvyQLNfwOh2qTzS0YMB8GA1UdIwQY
MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt
OWYxNTBjOGVhOTcxLzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx
LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSm1b6Aq
VyRLIsALPBe3V2D1YYUyeUJXy1bzVdFpXkhLeCbtrT4eaPUsXEs7mdPz3i8jLzT0
OEML4NOVoive5WrAusG+SztpdIkLPdGMGHDv3iAiUJWWZTdrq81YscaMwcXPLTPQ
rgChz/6gMZGku7sJMIf1DotJ5FFfCXlKcbFo75IVX1NXbZMc0rsaJpj7OadsEXDs
XPnUfZfpKSSINkEbPgR+db+jdHR2kL4nBF8aG7XeHEltMBw8V1e6AszT6mK/eiTZ
c7hByeRlAq9+byU7FkNUn/HGZhd72+5mql08pm584H9DMInxdX0lBrTO3HMyyo6j
/aP60dZFFGBPBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:02 2025 by rpki-client