Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: V16M4DOTSopws+oY07AEE7e03gBBxh2i7qy6VtiptnE=
Subject key identifier: C6:1C:34:BB:7B:60:DA:FC:3B:D7:E4:68:33:FF:38:2A:CB:B0:F2:E8
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0198D54E489961948D1D782EB122B89AFB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: PIY4zEHn6+cyTUrSnAjXY2KWov9FKC1DQ8gDjlWmdwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:48:99:61:94:8d:1d:78:2e:b1:22:b8:9a:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=c61c34bb7b60dafc3bd7e46833ff382acbb0f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:70:02:c3:da:bd:c0:69:24:a6:4b:16:92:
24:77:43:35:af:04:fe:a7:ea:12:de:31:84:20:5f:
07:28:94:b3:08:b9:90:84:f1:d9:28:25:b7:b5:74:
0a:58:e0:6e:ed:b7:ac:95:52:78:c3:6c:10:af:dd:
f7:18:39:c9:f1:94:0c:4d:92:fe:75:80:ea:57:a7:
bd:37:3b:b4:da:ff:c0:bc:c4:ee:3c:96:5d:79:c9:
5f:89:56:73:fd:77:3e:17:c7:79:3d:c5:ea:62:9a:
9d:2b:27:93:bc:15:84:7e:7c:9d:98:2a:f3:2c:37:
c4:47:01:7f:69:a1:70:fc:73:31:e3:c9:a6:5d:1d:
e8:4c:37:4c:a4:67:34:00:74:8e:7e:19:b2:44:dd:
6c:4c:cc:65:75:d4:51:96:dd:6a:09:8a:a0:80:09:
76:1f:f8:17:3e:d1:0f:12:6a:90:03:8a:ef:c0:16:
41:08:a5:98:c3:05:85:67:b0:c7:83:31:de:4d:a8:
8d:d2:76:93:7e:35:e7:7d:20:c8:5b:d9:bd:d8:9d:
43:aa:61:ee:c4:d6:37:ab:7a:de:b9:37:b4:2e:4c:
8d:3a:92:b8:c4:78:7e:5b:01:ad:90:29:d6:d8:be:
2f:7c:77:06:77:8e:13:7b:a0:55:a1:fd:40:87:82:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1C:34:BB:7B:60:DA:FC:3B:D7:E4:68:33:FF:38:2A:CB:B0:F2:E8
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:f0:d4:ad:27:e7:20:3c:7e:fd:53:d4:51:88:e4:e1:1e:
37:de:15:ac:5f:4d:71:62:67:57:9b:1f:54:20:07:21:39:cf:
9e:c0:7f:6b:bc:05:70:3c:bb:31:5e:e4:55:71:74:32:87:b4:
c5:d3:7a:3b:55:48:c5:06:74:92:2f:34:d3:b3:76:5f:f7:19:
b9:b2:79:f4:c7:db:56:cf:f6:c0:c4:86:49:04:7b:25:47:76:
3b:74:a7:65:16:a8:50:2d:1d:d6:1d:a1:ef:53:dc:b8:01:f7:
88:2c:c2:51:10:d8:b4:c9:46:13:97:3b:56:8d:80:65:88:4e:
36:cb:0b:fc:4e:3e:a7:05:42:b5:06:c4:cc:ab:ce:a8:b2:b7:
41:d5:6e:a8:33:40:46:5b:ac:85:c1:da:16:d7:79:7c:d0:a2:
cc:41:2a:11:a4:b5:0e:15:89:8d:39:1f:5d:6b:15:83:a2:33:
8c:3d:52:2d:67:47:cf:24:a8:96:22:af:8b:8c:18:ec:a4:bf:
2e:3d:bc:2c:4b:77:11:c6:bb:d3:23:b8:c3:b9:84:0c:a2:a2:
97:4d:3e:d9:3f:70:fb:a4:30:98:91:bb:30:f0:9b:3a:9b:55:
f9:1d:6c:81:0c:cb:1f:4a:17:ae:53:0c:d6:50:d8:13:a7:5f:
f9:f4:40:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkiZYZSNHXgusSK4mvszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy
MzAxODQwHhcNMjUwODIzMDUwMjE0WhcNMjUwODI0MDUwMjE0WjAzMTEwLwYDVQQD
EyhjNjFjMzRiYjdiNjBkYWZjM2JkN2U0NjgzM2ZmMzgyYWNiYjBmMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKpwAsPavcBpJKZLFpIkd0M1rwT+
p+oS3jGEIF8HKJSzCLmQhPHZKCW3tXQKWOBu7beslVJ4w2wQr933GDnJ8ZQMTZL+
dYDqV6e9Nzu02v/AvMTuPJZdeclfiVZz/Xc+F8d5PcXqYpqdKyeTvBWEfnydmCrz
LDfERwF/aaFw/HMx48mmXR3oTDdMpGc0AHSOfhmyRN1sTMxlddRRlt1qCYqggAl2
H/gXPtEPEmqQA4rvwBZBCKWYwwWFZ7DHgzHeTaiN0naTfjXnfSDIW9m92J1DqmHu
xNY3q3reuTe0LkyNOpK4xHh+WwGtkCnW2L4vfHcGd44Te6BVof1Ah4IhYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYcNLt7YNr8O9fkaDP/OCrLsPLoMB8GA1UdIwQY
MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt
OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2
LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5Dw1K0n
5yA8fv1T1FGI5OEeN94VrF9NcWJnV5sfVCAHITnPnsB/a7wFcDy7MV7kVXF0Moe0
xdN6O1VIxQZ0ki8007N2X/cZubJ59MfbVs/2wMSGSQR7JUd2O3SnZRaoUC0d1h2h
71PcuAH3iCzCURDYtMlGE5c7Vo2AZYhONssL/E4+pwVCtQbEzKvOqLK3QdVuqDNA
RlushcHaFtd5fNCizEEqEaS1DhWJjTkfXWsVg6IzjD1SLWdHzySoliKvi4wY7KS/
Lj28LEt3Eca70yO4w7mEDKKil00+2T9w+6QwmJG7MPCbOptV+R1sgQzLH0oXrlMM
1lDYE6df+fRAcg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:39 2025 by rpki-client