Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: GkyGQDGyvOsiYDBi/ods60Ku0XOSWEZkfS8QhbMLB4A=
Subject key identifier: 22:CC:1B:42:B6:99:39:D7:5B:E5:FC:AB:11:27:2D:0F:8A:61:F0:7F
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0198D4DFF43C83053D1F2AA53B34E7C372E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: Xs1B+OaQ4UGgfW2QsBfY7L5peBEKBFJiV7XD6ojt31I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f4:3c:83:05:3d:1f:2a:a5:3b:34:e7:c3:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=22cc1b42b69939d75be5fcab11272d0f8a61f07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:65:a7:1c:ce:d3:ce:8f:3b:9c:8d:f7:b4:
20:c8:0d:61:a8:26:8c:f6:c8:28:6c:0e:ed:51:40:
96:14:c4:c1:cc:f0:10:ea:61:74:5a:fc:4e:5e:94:
60:b1:eb:bf:32:89:69:5e:2d:00:d8:0b:44:3c:53:
8c:b4:9b:e3:9e:7e:08:a0:e0:5e:53:60:e8:a1:76:
da:ee:e8:9e:5a:58:92:17:d6:fa:19:b4:77:77:ef:
d5:1d:93:49:26:e1:e9:25:24:d7:5e:a5:54:2b:6c:
3b:c1:68:8a:ef:bd:92:d2:38:8b:5e:2a:b1:09:e7:
30:26:0f:3b:67:7b:3d:74:92:8a:5f:44:c5:ab:da:
80:87:13:88:d3:95:21:28:4f:4c:aa:e5:a1:b3:9f:
ef:64:83:e9:86:d2:ff:f7:96:54:db:4e:b2:8b:0a:
9a:4c:f7:74:ad:96:84:e7:6a:51:6e:2c:76:c3:56:
d2:da:7e:38:0a:dc:7e:27:9a:5b:4f:65:be:d1:94:
44:8e:d6:57:e6:32:a4:09:86:fa:22:74:ac:ca:f1:
78:d5:43:21:0e:df:df:2d:e2:94:25:e2:b2:ed:f4:
00:4c:c8:f4:53:d2:18:b0:57:3c:c6:06:1b:0a:10:
96:f2:36:ef:09:f8:b8:fd:de:5c:02:75:a7:ff:1e:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CC:1B:42:B6:99:39:D7:5B:E5:FC:AB:11:27:2D:0F:8A:61:F0:7F
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e7:f4:a5:70:2b:18:89:6b:43:a6:06:08:24:46:46:58:d4:
a4:f8:32:66:21:84:53:71:18:28:33:d3:82:19:95:00:22:dc:
9b:fe:18:82:d1:06:c0:17:43:72:b8:bc:6f:b3:57:12:e7:9a:
f4:a1:a1:f2:7d:d6:38:9c:dc:6b:af:a4:d6:cf:89:05:1c:3d:
3a:64:0a:e3:1c:92:a5:30:ee:7c:d2:2b:58:d9:df:f0:79:b8:
d8:09:4e:ba:2d:29:93:de:31:bc:e0:6b:2e:3a:89:ac:7e:19:
b4:8b:f5:b7:bf:ef:17:98:2d:e9:61:0f:18:ad:6f:9e:be:ba:
5a:74:8a:6d:1a:d9:a6:22:c3:dc:5b:a9:4b:fd:db:92:c8:5d:
8f:e2:6a:03:81:a4:b4:f4:93:61:ea:91:bd:dd:56:9a:ba:84:
c0:0f:bd:c6:d3:32:4b:61:2f:8c:6f:47:b7:18:03:3b:89:64:
5a:55:00:28:ac:52:de:93:cb:e5:18:b1:3d:3a:44:f6:8d:1e:
cb:26:0b:b4:e2:36:0f:8a:d8:81:9d:5e:92:89:28:34:0c:84:
79:f1:ab:b5:51:e5:c5:b1:ab:83:23:0f:04:cb:34:1c:0c:65:
7a:5e:51:43:5a:6d:39:01:aa:c7:61:43:71:78:12:d4:1c:c2:
f8:66:fc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/Q8gwU9HyqlOzTnw3LhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjUwODIzMDMwMTQzWhcNMjUwODI0MDMwMTQzWjAzMTEwLwYDVQQD
EygyMmNjMWI0MmI2OTkzOWQ3NWJlNWZjYWIxMTI3MmQwZjhhNjFmMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPZlpxzO086PO5yN97QgyA1hqCaM
9sgobA7tUUCWFMTBzPAQ6mF0WvxOXpRgseu/MolpXi0A2AtEPFOMtJvjnn4IoOBe
U2DooXba7uieWliSF9b6GbR3d+/VHZNJJuHpJSTXXqVUK2w7wWiK772S0jiLXiqx
CecwJg87Z3s9dJKKX0TFq9qAhxOI05UhKE9MquWhs5/vZIPphtL/95ZU206yiwqa
TPd0rZaE52pRbix2w1bS2n44Ctx+J5pbT2W+0ZREjtZX5jKkCYb6InSsyvF41UMh
Dt/fLeKUJeKy7fQATMj0U9IYsFc8xgYbChCW8jbvCfi4/d5cAnWn/x5bhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLMG0K2mTnXW+X8qxEnLQ+KYfB/MB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbef0pXAr
GIlrQ6YGCCRGRljUpPgyZiGEU3EYKDPTghmVACLcm/4YgtEGwBdDcri8b7NXEuea
9KGh8n3WOJzca6+k1s+JBRw9OmQK4xySpTDufNIrWNnf8Hm42AlOui0pk94xvOBr
LjqJrH4ZtIv1t7/vF5gt6WEPGK1vnr66WnSKbRrZpiLD3FupS/3bkshdj+JqA4Gk
tPSTYeqRvd1WmrqEwA+9xtMyS2EvjG9HtxgDO4lkWlUAKKxS3pPL5RixPTpE9o0e
yyYLtOI2D4rYgZ1ekokoNAyEefGrtVHlxbGrgyMPBMs0HAxlel5RQ1ptOQGqx2FD
cXgS1BzC+Gb8eg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:57 2025 by rpki-client