Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File: xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier: qT49bHZ8djrfMhL4gdtZHWpsJu3dsfFiN+AL0/5kSNc=
Subject key identifier: BC:72:21:2A:A6:01:67:8A:7E:03:A9:82:1B:36:3E:94:56:EB:65:E0
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0198D5BBD898E48CC7ECF81BF3D7CFE2492B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number: 1680
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: 87aJfqVO/FsYFk1dIL/4w+hEEDam6tXYX9lee2fN8Vg=)
6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d8:98:e4:8c:c7:ec:f8:1b:f3:d7:cf:e2:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=bc72212aa601678a7e03a9821b363e9456eb65e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:39:c7:2b:07:c9:0d:07:2b:86:b5:1f:48:
bb:30:e8:f7:aa:d1:de:77:48:77:b8:e9:97:77:ab:
4a:a0:74:9f:34:6e:06:42:ac:cd:ab:4d:da:f1:09:
a8:4b:46:df:67:86:9c:bf:49:83:c8:6e:ea:87:c2:
bd:8c:7e:d1:eb:ee:c1:84:b2:0c:57:cb:ad:a0:4e:
7d:36:5c:1d:c9:2a:f2:93:1c:e8:56:11:8a:9d:ec:
6c:f0:13:51:5e:eb:17:3e:4d:07:94:01:bf:e7:3f:
98:d8:8d:6a:58:1e:d2:96:36:23:75:68:22:58:b9:
21:9b:c0:c6:a7:9f:73:ad:9e:3e:f9:95:01:13:1d:
9f:3d:79:70:7a:06:3c:86:b9:c4:5c:d7:5c:69:57:
e0:76:02:24:1e:38:49:29:a3:e0:2c:42:ea:6c:02:
e0:19:89:8f:f0:c0:5b:20:ff:5a:32:bd:ea:84:d2:
cd:34:c6:65:ec:1d:5a:15:4f:dc:ae:23:ba:8f:44:
db:f2:e3:30:9e:24:ad:88:f3:1b:87:d5:12:85:9f:
a0:4c:e5:a0:24:51:ff:7c:c1:23:ed:9b:c0:1b:38:
91:39:86:a0:fe:66:4d:a8:f6:2d:00:b0:80:8e:2f:
3c:79:8a:97:45:e8:d7:d3:7f:3e:e3:13:92:a1:e4:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:21:2A:A6:01:67:8A:7E:03:A9:82:1B:36:3E:94:56:EB:65:E0
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:e3:00:48:ee:ac:94:cd:63:73:72:6c:29:cd:7e:6c:37:
d2:bc:77:3e:df:32:ab:8b:28:08:69:e1:2c:c1:4d:bb:32:03:
a8:fd:7b:31:a6:e1:52:09:88:7e:19:8a:0b:fd:84:f3:45:81:
2c:b5:a7:f8:05:8d:d3:b9:15:fd:f9:97:ce:f6:59:42:70:b2:
b4:51:12:6d:25:5c:01:34:c0:82:4c:e2:93:aa:9a:93:64:12:
2b:2f:d2:a1:fb:9b:52:06:05:77:ea:17:c7:9b:48:3b:10:3a:
eb:20:db:bd:cb:b7:d0:bf:4f:e9:ab:3d:e0:a5:c9:e6:69:78:
dd:25:79:6e:86:c5:78:ce:e2:a9:9c:54:bf:e2:f8:a8:45:7c:
ae:a3:0b:b6:d8:64:ff:f9:23:8e:53:d1:0f:30:06:b9:d9:4b:
04:8e:cb:43:75:c5:dd:d3:50:d8:d8:54:4d:b3:bc:f8:54:5c:
08:bf:a8:0e:b5:ce:3b:96:34:e3:b5:5c:4e:e2:5e:8f:05:43:
40:7c:97:9d:85:f3:bb:b7:6a:57:9f:71:27:76:2a:b9:ae:3a:
30:e1:9b:15:5f:d7:91:6e:e8:12:f8:3e:a8:09:29:8d:db:af:
d3:94:2b:22:4e:4d:86:fc:c9:38:3d:f8:26:59:e0:3a:96:6d:
f8:0a:ab:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9iY5IzH7Pgb89fP4kkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjUwODIzMDcwMTU0WhcNMjUwODI0MDcwMTU0WjAzMTEwLwYDVQQD
EyhiYzcyMjEyYWE2MDE2NzhhN2UwM2E5ODIxYjM2M2U5NDU2ZWI2NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hk5xysHyQ0HK4a1H0i7MOj3qtHe
d0h3uOmXd6tKoHSfNG4GQqzNq03a8QmoS0bfZ4acv0mDyG7qh8K9jH7R6+7BhLIM
V8utoE59NlwdySrykxzoVhGKnexs8BNRXusXPk0HlAG/5z+Y2I1qWB7SljYjdWgi
WLkhm8DGp59zrZ4++ZUBEx2fPXlwegY8hrnEXNdcaVfgdgIkHjhJKaPgLELqbALg
GYmP8MBbIP9aMr3qhNLNNMZl7B1aFU/criO6j0Tb8uMwniStiPMbh9UShZ+gTOWg
JFH/fMEj7ZvAGziROYag/mZNqPYtALCAji88eYqXRejX038+4xOSoeRkfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxyISqmAWeKfgOpghs2PpRW62XgMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdDjAEju
rJTNY3NybCnNfmw30rx3Pt8yq4soCGnhLMFNuzIDqP17MabhUgmIfhmKC/2E80WB
LLWn+AWN07kV/fmXzvZZQnCytFESbSVcATTAgkzik6qak2QSKy/SofubUgYFd+oX
x5tIOxA66yDbvcu30L9P6as94KXJ5ml43SV5bobFeM7iqZxUv+L4qEV8rqMLtthk
//kjjlPRDzAGudlLBI7LQ3XF3dNQ2NhUTbO8+FRcCL+oDrXOO5Y047VcTuJejwVD
QHyXnYXzu7dqV59xJ3Yqua46MOGbFV/XkW7oEvg+qAkpjduv05QrIk5NhvzJOD34
JlngOpZt+Aqr6w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:46 2025 by rpki-client