Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: 3OcivmeZTiRwdu+ghVEHVgV0f7zgkh2oh9DmVifI9+k=
Subject key identifier: 4C:2F:16:07:64:4A:9E:65:9A:19:8B:F1:4B:A1:59:93:48:19:44:6C
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 0198D4730DEEA63D8F5633F8820A397226FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:02:46 +0000
Manifest this update: Sat 23 Aug 2025 01:02:46 +0000
Manifest next update: Sun 24 Aug 2025 01:02:46 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: iYerMILinWpw5kxgqnCg5wHccY7vRtF07u3DYKre8Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:0d:ee:a6:3d:8f:56:33:f8:82:0a:39:72:26:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Aug 23 01:02:46 2025 GMT
Not After : Aug 24 01:02:46 2025 GMT
Subject: CN=4c2f1607644a9e659a198bf14ba159934819446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:c5:4b:b2:85:39:32:d2:f7:f6:f7:d1:33:
19:6b:8c:41:61:2d:64:a5:83:15:c5:a8:f1:eb:27:
a8:dd:95:3d:af:df:12:37:69:b6:f2:bd:73:b2:1c:
43:da:73:d0:8e:a4:fd:b4:dc:a8:4d:91:8a:0d:d4:
5d:ae:96:00:49:52:85:00:e7:96:7d:ac:d7:a9:48:
d7:5b:7f:c9:8b:6d:6e:fb:7a:59:92:8b:46:4c:9a:
e7:ea:b4:79:da:0f:2b:53:b2:66:ec:70:f7:54:81:
e2:dc:18:12:c9:e5:ad:3d:cd:6f:02:8d:94:dc:5b:
54:98:e3:2e:6d:a6:04:6e:04:51:6a:31:12:18:41:
ec:e1:15:28:f1:3a:e1:7f:ee:40:32:fc:c4:a9:64:
7b:e9:5e:69:0f:f7:d8:d9:16:6c:2f:03:6e:72:c2:
b2:c8:87:5a:5e:64:a6:ff:a2:70:ad:eb:33:22:35:
b9:ad:39:63:d1:b7:72:e2:44:db:46:23:73:98:31:
3e:93:a4:66:50:54:0d:c7:f3:62:a3:20:0d:c9:8e:
fe:aa:69:c5:c3:9a:35:b3:80:92:87:10:16:9c:4a:
05:6c:07:31:1f:7a:e9:61:71:f5:73:9d:2c:62:2b:
33:9a:a6:7a:b8:6b:64:3b:8a:74:44:1c:58:74:79:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:16:07:64:4A:9E:65:9A:19:8B:F1:4B:A1:59:93:48:19:44:6C
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:90:e5:cd:04:f9:93:fd:81:2e:b5:7a:de:4e:1b:0d:7e:18:
9d:d1:cb:a9:57:db:a0:ad:2a:ae:a5:69:f6:b1:64:cf:41:b4:
16:e1:70:71:1f:62:0e:99:fa:d6:d8:62:86:1e:e9:35:86:20:
24:bf:15:84:be:42:18:95:a5:ee:b4:97:36:5e:01:f2:cc:f1:
ac:94:5c:5e:f9:60:66:00:96:ac:20:cb:5f:6c:94:e7:ce:97:
04:0a:3d:81:a0:c6:94:ae:44:eb:53:19:1e:b3:35:4a:01:c4:
00:36:1b:86:ad:53:1d:78:7c:0e:71:21:33:69:95:4e:05:18:
0d:ce:62:41:2e:a9:9a:21:0b:0c:de:58:19:92:d7:cc:dd:24:
bd:e6:5f:b1:8a:55:54:31:f9:2c:1f:f3:08:42:58:c4:fa:f1:
f4:26:40:15:25:23:3d:19:d7:29:29:d9:85:ff:33:4c:d7:3b:
ec:07:cd:95:4c:4e:66:5d:60:97:17:d7:7f:89:12:14:c8:f8:
b6:00:f9:50:cc:0d:e8:ad:b4:ec:84:b5:f7:9e:e4:d6:e9:83:
6e:83:02:a7:3c:b5:25:3e:b5:a1:b6:8f:c8:f5:9d:17:d8:96:
a3:e7:2c:0e:b7:01:2b:9c:a1:ab:aa:5b:1b:8e:3f:33:25:bf:
bf:e6:e6:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcw3upj2PVjP4ggo5cib/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTE5ZTc1MjAwMzkyZjFhMmYwOGJlOTkwNzMyZDgwNDdi
MjhiMDkwHhcNMjUwODIzMDEwMjQ2WhcNMjUwODI0MDEwMjQ2WjAzMTEwLwYDVQQD
Eyg0YzJmMTYwNzY0NGE5ZTY1OWExOThiZjE0YmExNTk5MzQ4MTk0NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU/FS7KFOTLS9/b30TMZa4xBYS1k
pYMVxajx6yeo3ZU9r98SN2m28r1zshxD2nPQjqT9tNyoTZGKDdRdrpYASVKFAOeW
fazXqUjXW3/Ji21u+3pZkotGTJrn6rR52g8rU7Jm7HD3VIHi3BgSyeWtPc1vAo2U
3FtUmOMubaYEbgRRajESGEHs4RUo8Trhf+5AMvzEqWR76V5pD/fY2RZsLwNucsKy
yIdaXmSm/6JwreszIjW5rTlj0bdy4kTbRiNzmDE+k6RmUFQNx/NioyANyY7+qmnF
w5o1s4CShxAWnEoFbAcxH3rpYXH1c50sYiszmqZ6uGtkO4p0RBxYdHkIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwvFgdkSp5lmhmL8UuhWZNIGURsMB8GA1UdIwQY
MBaAFMURnnUgA5LxovCL6ZBzLYBHsosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2Qt
ZDgxOWNlZDVkMzVhLzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2QtZDgxOWNlZDVkMzVh
LzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopDlzQT5
k/2BLrV63k4bDX4YndHLqVfboK0qrqVp9rFkz0G0FuFwcR9iDpn61thihh7pNYYg
JL8VhL5CGJWl7rSXNl4B8szxrJRcXvlgZgCWrCDLX2yU586XBAo9gaDGlK5E61MZ
HrM1SgHEADYbhq1THXh8DnEhM2mVTgUYDc5iQS6pmiELDN5YGZLXzN0kveZfsYpV
VDH5LB/zCEJYxPrx9CZAFSUjPRnXKSnZhf8zTNc77AfNlUxOZl1glxfXf4kSFMj4
tgD5UMwN6K207IS1957k1umDboMCpzy1JT61obaPyPWdF9iWo+csDrcBK5yhq6pb
G44/MyW/v+bmKg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:21 2025 by rpki-client