Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: ViW1lJbH/Kusofa5W5nLy/o6JYvDbkf9UaoXafinxDQ=
Subject key identifier: D9:D6:C9:58:85:55:2A:5C:04:7A:82:EA:46:B0:3C:43:86:66:51:32
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 0198D4E0A1173F0FB9FBD46FCCD42ADC9597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=)
2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=)
3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: hhVQbXyheR5fVKCDzkBreNSM7ftk7Bd3plNWHz7FVNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a1:17:3f:0f:b9:fb:d4:6f:cc:d4:2a:dc:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=d9d6c95885552a5c047a82ea46b03c4386665132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:55:3c:92:3d:bb:f0:96:57:e6:e6:2d:4e:
37:b5:e0:12:3a:18:0b:03:38:11:da:f9:c7:3d:a0:
35:b4:34:3d:03:bc:f6:e8:df:67:17:03:f7:70:bd:
70:2d:29:cc:43:14:a3:51:b0:46:28:16:ba:85:d2:
26:6f:c4:2d:dd:c1:e6:26:82:a4:d7:ce:a2:97:b3:
23:ea:bd:5f:e9:ff:0a:0b:40:a6:86:50:36:be:e0:
76:11:2f:a6:ec:28:bd:ea:6d:89:5a:92:61:a7:52:
15:d3:23:cc:30:02:2b:fb:5c:5b:08:5c:77:1f:bd:
59:b6:5d:8b:71:0b:34:3c:07:2f:4f:46:5b:ab:04:
13:92:aa:38:1d:2a:51:2c:75:e7:7c:f7:7a:6a:76:
ed:d9:8e:4e:87:d9:73:44:ae:cc:03:ed:b5:52:27:
50:ef:48:10:cd:47:80:60:54:61:1e:c8:b2:c5:e5:
d4:97:43:33:a1:a2:41:8b:e1:67:71:be:42:a1:d1:
18:bc:26:b6:9b:75:e1:f5:92:d7:01:56:fe:33:d8:
26:ca:2d:46:30:d8:31:32:86:8b:cb:cc:9a:ae:d3:
c0:92:4f:47:31:60:95:a8:5c:5b:7b:e0:e0:ea:97:
18:3b:dd:f1:6a:80:fc:78:f1:7f:04:c5:65:22:84:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:C9:58:85:55:2A:5C:04:7A:82:EA:46:B0:3C:43:86:66:51:32
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8d:4f:9a:ae:c4:c4:c9:43:5e:45:d4:1e:ee:36:9a:a4:6c:
b7:65:e6:25:a9:a4:96:b1:53:c0:c8:ee:d4:89:9e:9f:f5:1e:
28:cd:57:d8:0e:14:b5:18:b6:6f:91:fa:fd:1a:af:3e:79:5d:
72:f9:c7:c1:43:ba:35:95:4f:82:4d:7f:21:3e:30:62:23:6a:
61:f8:aa:06:5c:11:8d:5b:12:03:20:20:2d:12:5c:39:6b:04:
04:8c:36:3c:e8:da:82:8e:c7:2d:70:2f:b3:43:eb:09:4c:d0:
f8:7a:0b:4d:94:05:a3:30:55:39:7f:72:e6:9a:4d:68:a3:1b:
4f:41:f4:68:42:11:7e:3d:3e:47:c9:85:79:ee:82:91:88:ba:
3c:4e:77:8e:52:ed:98:8b:ad:e8:2d:32:bf:21:33:73:9c:9d:
b5:70:42:5b:75:dd:b6:62:e4:90:ec:33:14:bf:3c:eb:15:e4:
da:01:6e:45:37:d0:a4:5e:c8:ff:60:a0:e8:ec:d7:c0:af:08:
81:43:cc:46:b4:eb:8b:64:f9:ec:c6:b0:65:9b:a2:15:78:d6:
f6:a4:81:a4:58:d3:44:79:f2:c9:05:f0:1a:a7:52:d1:e0:44:
57:e0:24:3c:99:fb:8c:85:57:3c:8b:11:35:c2:00:3f:69:d9:
55:f4:d1:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4KEXPw+5+9RvzNQq3JWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz
ZTA2MWMwHhcNMjUwODIzMDMwMjI3WhcNMjUwODI0MDMwMjI3WjAzMTEwLwYDVQQD
EyhkOWQ2Yzk1ODg1NTUyYTVjMDQ3YTgyZWE0NmIwM2M0Mzg2NjY1MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuItVPJI9u/CWV+bmLU43teASOhgL
AzgR2vnHPaA1tDQ9A7z26N9nFwP3cL1wLSnMQxSjUbBGKBa6hdImb8Qt3cHmJoKk
186il7Mj6r1f6f8KC0CmhlA2vuB2ES+m7Ci96m2JWpJhp1IV0yPMMAIr+1xbCFx3
H71Ztl2LcQs0PAcvT0ZbqwQTkqo4HSpRLHXnfPd6anbt2Y5Oh9lzRK7MA+21UidQ
70gQzUeAYFRhHsiyxeXUl0MzoaJBi+Fncb5CodEYvCa2m3Xh9ZLXAVb+M9gmyi1G
MNgxMoaLy8yartPAkk9HMWCVqFxbe+Dg6pcYO93xaoD8ePF/BMVlIoTaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnWyViFVSpcBHqC6kawPEOGZlEyMB8GA1UdIwQY
MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt
YmVlZWJlZGZmYzk1LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1
LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho1Pmq7E
xMlDXkXUHu42mqRst2XmJamklrFTwMju1Imen/UeKM1X2A4UtRi2b5H6/RqvPnld
cvnHwUO6NZVPgk1/IT4wYiNqYfiqBlwRjVsSAyAgLRJcOWsEBIw2POjago7HLXAv
s0PrCUzQ+HoLTZQFozBVOX9y5ppNaKMbT0H0aEIRfj0+R8mFee6CkYi6PE53jlLt
mIut6C0yvyEzc5ydtXBCW3XdtmLkkOwzFL886xXk2gFuRTfQpF7I/2Cg6OzXwK8I
gUPMRrTri2T57MawZZuiFXjW9qSBpFjTRHnyyQXwGqdS0eBEV+AkPJn7jIVXPIsR
NcIAP2nZVfTRlQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:40 2025 by rpki-client