Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: FsxOTNpxyQ0LacJg7fRQjUDgwFEftKHvuMfwfHu4N+E=
Subject key identifier: 2C:02:E7:AA:3C:22:DA:09:D6:6F:DF:D3:DA:FE:08:B0:A8:21:AA:45
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 0198D850244D34BD9D892A3B777998D3C189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 1433
Signing time: Sat 23 Aug 2025 19:03:07 +0000
Manifest this update: Sat 23 Aug 2025 19:03:07 +0000
Manifest next update: Sun 24 Aug 2025 19:03:07 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: gwt1fJjtY43q5IrDWYpWLTPcfJBDLUJT+pGV9vjipSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:24:4d:34:bd:9d:89:2a:3b:77:79:98:d3:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Aug 23 19:03:07 2025 GMT
Not After : Aug 24 19:03:07 2025 GMT
Subject: CN=2c02e7aa3c22da09d66fdfd3dafe08b0a821aa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:24:a8:3b:da:b8:7c:56:21:92:a6:2b:21:
e6:33:17:66:7c:64:b5:61:ce:d1:e1:fb:ee:c6:bf:
b8:ec:1e:cf:c7:85:a3:32:e8:6d:51:6d:35:c1:db:
f5:2e:79:e3:f0:d9:25:cc:e5:29:c4:ee:44:92:ef:
58:5a:75:b0:81:84:21:a2:90:2b:e6:8e:c6:31:57:
5a:1e:6f:f0:06:c7:17:1f:88:41:b6:09:5c:db:11:
bb:46:ec:90:2d:df:1f:be:b5:48:aa:19:59:c7:64:
d3:84:6d:11:f0:7b:4b:7a:c0:a2:93:8a:b5:38:88:
ae:92:87:df:48:d1:89:65:17:e3:de:b2:37:97:79:
b5:0a:8f:e1:22:77:5b:05:d9:fc:d2:08:13:e9:5c:
0c:c9:65:f1:c9:27:f9:16:1b:ac:62:24:5e:81:e3:
e4:ec:4b:6e:ec:28:37:61:27:1b:5f:57:9f:ac:36:
28:45:91:9a:23:6f:ba:32:37:d2:58:8a:aa:48:45:
cf:24:3c:03:bf:e4:fb:06:42:4c:14:b8:3a:da:49:
5d:a9:8e:c5:43:3e:4c:67:d4:38:3c:20:fe:2d:ca:
76:d1:b2:ca:07:60:c1:d8:d4:41:0d:86:10:3c:93:
86:d5:ec:f4:d2:02:44:74:31:73:64:9e:16:d2:69:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:E7:AA:3C:22:DA:09:D6:6F:DF:D3:DA:FE:08:B0:A8:21:AA:45
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:1f:cd:02:82:18:88:6a:9c:7c:ff:1b:b6:a0:20:7d:e9:
57:0b:54:0d:dc:c3:97:a9:0c:f2:4c:8b:5c:eb:a4:e3:47:1c:
dc:5b:a6:bc:a2:de:44:2a:f9:f1:68:ff:02:11:fc:a6:12:23:
c8:93:d3:22:7d:0c:6d:32:b5:65:65:85:e0:7d:cd:eb:86:6c:
c6:3d:53:ab:57:0b:2b:bb:7c:42:80:10:08:23:90:dc:18:30:
6f:4a:4a:ef:f0:58:44:81:b4:1d:1e:23:a4:42:e4:b2:10:4d:
30:07:9c:7e:c1:84:3a:6a:6c:92:88:1f:ba:cd:de:f4:79:24:
98:48:60:68:25:ec:63:a5:6d:37:c9:f9:22:a7:77:73:31:48:
70:4c:0b:84:af:93:ed:9c:54:f3:b6:e9:f0:f8:dc:78:a3:57:
e3:e7:c3:63:39:df:09:71:27:6c:96:14:2e:30:78:fe:e7:cb:
c3:6c:ef:46:61:61:5d:3b:47:90:bc:9c:55:d0:d7:d8:d1:02:
1f:4b:db:4d:fc:d1:08:d0:5d:fc:45:85:8c:7b:c6:d4:64:f2:
90:4e:29:9d:fa:cc:94:f1:e6:22:bb:c3:3b:69:df:29:ff:e8:
11:29:1c:dd:21:14:71:65:7a:a1:44:58:3c:e4:bc:28:f6:a3:
95:38:13:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUCRNNL2diSo7d3mY08GJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw
NjM4N2YwHhcNMjUwODIzMTkwMzA3WhcNMjUwODI0MTkwMzA3WjAzMTEwLwYDVQQD
EygyYzAyZTdhYTNjMjJkYTA5ZDY2ZmRmZDNkYWZlMDhiMGE4MjFhYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KYkqDvauHxWIZKmKyHmMxdmfGS1
Yc7R4fvuxr+47B7Px4WjMuhtUW01wdv1Lnnj8NklzOUpxO5Eku9YWnWwgYQhopAr
5o7GMVdaHm/wBscXH4hBtglc2xG7RuyQLd8fvrVIqhlZx2TThG0R8HtLesCik4q1
OIiukoffSNGJZRfj3rI3l3m1Co/hIndbBdn80ggT6VwMyWXxySf5FhusYiRegePk
7Etu7Cg3YScbX1efrDYoRZGaI2+6MjfSWIqqSEXPJDwDv+T7BkJMFLg62kldqY7F
Qz5MZ9Q4PCD+Lcp20bLKB2DB2NRBDYYQPJOG1ez00gJEdDFzZJ4W0mn4CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwC56o8ItoJ1m/f09r+CLCoIapFMB8GA1UdIwQY
MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt
ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky
LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnkfzQKC
GIhqnHz/G7agIH3pVwtUDdzDl6kM8kyLXOuk40cc3FumvKLeRCr58Wj/AhH8phIj
yJPTIn0MbTK1ZWWF4H3N64Zsxj1Tq1cLK7t8QoAQCCOQ3Bgwb0pK7/BYRIG0HR4j
pELkshBNMAecfsGEOmpskogfus3e9HkkmEhgaCXsY6VtN8n5Iqd3czFIcEwLhK+T
7ZxU87bp8PjceKNX4+fDYznfCXEnbJYULjB4/ufLw2zvRmFhXTtHkLycVdDX2NEC
H0vbTfzRCNBd/EWFjHvG1GTykE4pnfrMlPHmIrvDO2nfKf/oESkc3SEUcWV6oURY
POS8KPajlTgTkg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:25:47 2025 by rpki-client