Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: RahOU24hYgJykZnybQIORxGwGoE9XAqN5p8nh5EIdkc=
Subject key identifier: 89:4B:75:42:A8:81:01:19:B4:38:92:9C:33:D2:50:6D:EF:EF:A6:F2
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0198D58387BB80394744A8A19CA875CCFF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 157B
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: c4cfvnooemeuFzQQoRmdEuvRMEi4dH4b7i0+idOFawM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:87:bb:80:39:47:44:a8:a1:9c:a8:75:cc:ff:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=894b7542a8810119b438929c33d2506defefa6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:4e:fd:b0:34:72:cb:dd:34:4a:0e:47:b2:
5c:c5:dd:70:1f:36:06:c7:98:2f:e4:35:1d:68:f2:
2c:3d:57:0f:9b:4a:ae:08:78:ce:12:47:6d:b1:45:
db:13:6b:9c:d4:89:44:4c:f0:96:0b:1b:58:d1:61:
7a:dc:88:ff:3e:8f:c1:f9:4d:3c:bf:af:57:69:72:
94:2d:6a:9a:5c:62:d2:3d:05:7c:ea:cc:79:86:2d:
80:7e:b4:03:bd:18:25:3b:88:1d:32:76:42:b8:08:
21:3f:37:28:df:86:ef:99:86:8c:f3:f4:3e:a7:e1:
78:26:64:c8:1a:68:b2:f1:d6:cf:9e:b4:36:3d:37:
f1:cc:f9:2b:04:4d:8f:cd:c6:8a:38:7a:66:12:89:
ca:a4:79:5c:50:7c:8d:78:c9:25:85:8f:82:5e:46:
01:e4:38:87:6b:0c:37:d2:72:2b:e5:d8:ce:2d:24:
44:55:3d:fa:e9:de:2d:e7:9a:e2:8e:74:1b:6a:0a:
23:cb:c0:91:51:e7:05:23:ba:c0:99:51:ae:8a:31:
40:c3:6f:68:fb:7a:d1:6e:89:ab:94:40:57:1a:7b:
ff:47:2b:22:63:a3:b3:a9:f2:82:27:94:b6:f0:51:
4e:35:0c:9f:22:05:e7:b3:1c:c9:a2:20:05:87:0e:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:75:42:A8:81:01:19:B4:38:92:9C:33:D2:50:6D:EF:EF:A6:F2
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:78:5e:89:7a:c3:c8:84:eb:41:7f:e3:f0:72:f4:84:56:
dc:27:55:d6:a4:fb:84:40:b0:0c:b9:71:5a:23:35:8d:22:2f:
5c:44:24:d6:51:f5:6c:d9:71:35:44:50:1b:55:83:c6:d6:3f:
67:58:54:99:37:be:53:68:a5:e0:61:e4:45:3a:84:79:b1:3d:
d9:0e:be:fc:a5:55:fb:f8:3e:ab:03:5a:1b:30:40:aa:5e:5d:
6c:94:b0:b5:56:f5:73:36:65:92:1c:8c:48:fe:57:62:f4:f9:
5c:a4:21:36:9f:ed:a1:dc:45:e4:9d:9b:65:bf:5c:b5:86:17:
7b:b1:a6:1a:de:f7:3c:38:c4:ee:03:70:23:ce:5a:a9:3e:11:
c6:bc:40:b7:db:c1:e2:fa:06:bc:96:36:79:e3:04:0c:63:37:
27:be:4e:55:5d:02:a6:a3:4b:70:de:74:d9:16:84:da:92:ec:
bd:b8:6e:f5:d5:09:ef:d8:36:1e:4b:72:ef:36:4d:bc:3f:d9:
73:d8:f2:04:8f:d5:01:5b:a9:06:47:52:24:d9:66:4c:bc:3a:
fd:fd:3a:60:14:4a:12:86:d0:e5:48:42:a9:10:4e:2f:26:78:
19:f7:4c:cd:8d:da:59:5a:fa:d5:cb:b1:d1:94:48:3d:75:c9:
69:b4:cb:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4e7gDlHRKihnKh1zP+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwODIzMDYwMDIzWhcNMjUwODI0MDYwMDIzWjAzMTEwLwYDVQQD
Eyg4OTRiNzU0MmE4ODEwMTE5YjQzODkyOWMzM2QyNTA2ZGVmZWZhNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vdO/bA0csvdNEoOR7Jcxd1wHzYG
x5gv5DUdaPIsPVcPm0quCHjOEkdtsUXbE2uc1IlETPCWCxtY0WF63Ij/Po/B+U08
v69XaXKULWqaXGLSPQV86sx5hi2AfrQDvRglO4gdMnZCuAghPzco34bvmYaM8/Q+
p+F4JmTIGmiy8dbPnrQ2PTfxzPkrBE2PzcaKOHpmEonKpHlcUHyNeMklhY+CXkYB
5DiHaww30nIr5djOLSREVT366d4t55rijnQbagojy8CRUecFI7rAmVGuijFAw29o
+3rRbomrlEBXGnv/RysiY6OzqfKCJ5S28FFONQyfIgXnsxzJoiAFhw4noQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlLdUKogQEZtDiSnDPSUG3v76byMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIt4Xol6
w8iE60F/4/By9IRW3CdV1qT7hECwDLlxWiM1jSIvXEQk1lH1bNlxNURQG1WDxtY/
Z1hUmTe+U2il4GHkRTqEebE92Q6+/KVV+/g+qwNaGzBAql5dbJSwtVb1czZlkhyM
SP5XYvT5XKQhNp/todxF5J2bZb9ctYYXe7GmGt73PDjE7gNwI85aqT4RxrxAt9vB
4voGvJY2eeMEDGM3J75OVV0CpqNLcN502RaE2pLsvbhu9dUJ79g2Hkty7zZNvD/Z
c9jyBI/VAVupBkdSJNlmTLw6/f06YBRKEobQ5UhCqRBOLyZ4GfdMzY3aWVr61cux
0ZRIPXXJabTLbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:58 2025 by rpki-client