Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: JFVOObAcWi6SLqI1Kf8hjH9/6vuiFFPvuxbDZVpe/RI=
Subject key identifier: 40:27:53:AC:30:07:53:3F:BE:10:70:6B:81:98:41:24:61:81:3F:DC
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 0198D4E0004ECB88B0F730C59947EC373083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: ma62UT82hUeQGjA76dCPnLYRkFefNSFjFbwdz4qJEXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:00:4e:cb:88:b0:f7:30:c5:99:47:ec:37:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=402753ac3007533fbe10706b8198412461813fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:25:a4:ed:cc:08:8c:d4:ac:ab:04:af:dc:
4e:77:78:ae:14:18:ed:dd:a4:1d:ae:1e:b0:a7:e2:
e4:bf:90:24:a3:d9:7f:94:1c:91:80:22:d7:6f:20:
da:a8:8f:5a:ad:31:5b:27:7e:e9:f2:8c:96:26:ac:
1f:f9:fd:87:63:b5:0d:60:e9:95:33:cd:83:21:1a:
7b:42:0c:33:3b:6d:97:b8:2a:12:12:8c:f4:78:df:
91:d4:24:53:b2:a7:61:ff:df:5f:eb:11:d9:67:8d:
be:d4:66:6c:e3:60:a2:8c:eb:f2:79:31:8f:18:d8:
ac:5a:21:67:bb:4f:ad:3d:ee:f8:b9:6e:53:4d:ca:
4d:b5:f9:51:23:2f:b9:c7:73:7e:ee:f0:20:89:c5:
d8:e7:06:c3:d9:90:46:7c:e7:a3:0b:5c:e8:c1:ea:
09:6d:c1:ed:fd:86:8e:91:9f:1e:92:f9:43:56:ac:
55:cc:0e:60:07:4d:09:08:20:93:e9:fa:d6:b2:e8:
31:13:38:38:15:78:e3:af:cb:6a:1f:a4:f3:3c:fa:
f8:e6:2b:bd:18:20:55:1b:bd:23:e2:81:3c:bb:d8:
f7:d2:be:0b:72:10:16:43:c5:bc:49:08:7a:c3:bf:
87:66:e3:c4:4e:9e:c2:4d:a1:35:fe:6b:ee:01:57:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:53:AC:30:07:53:3F:BE:10:70:6B:81:98:41:24:61:81:3F:DC
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:b1:a8:e2:54:13:b0:7d:6f:67:1f:9f:f1:7a:30:9c:65:
a1:d5:ec:c4:6d:01:01:71:c4:01:9a:cb:a0:3c:09:0c:3f:f4:
97:d8:91:64:53:4b:e9:5f:b0:e3:c5:5f:74:32:b9:93:b8:64:
e8:df:ec:6c:8d:63:cd:ab:d2:26:26:34:a9:0a:c5:91:fd:80:
84:c9:db:59:53:fe:e0:d3:e2:10:0d:fc:e5:b0:af:a7:12:3d:
9c:ea:ba:36:3b:34:eb:44:d4:8b:16:41:2f:55:d5:93:d1:89:
e8:5b:c6:00:64:41:a6:6e:52:f8:7c:d1:15:46:10:f0:e6:85:
e7:1a:1d:e1:a8:c9:cd:aa:4f:77:5b:91:52:e6:87:18:d7:5e:
54:93:7f:85:75:3c:91:51:b8:ad:49:f7:32:73:c3:c9:aa:30:
35:ca:a7:24:d2:1d:64:68:5e:b9:46:cc:6a:e4:32:69:b2:69:
9f:c6:b5:4c:a6:f5:69:40:23:07:30:3d:db:a9:2c:e2:95:91:
5a:94:83:44:18:0f:1b:44:39:e7:21:fc:7c:4c:68:d7:54:83:
a6:b1:da:2d:63:5e:45:fa:76:ae:16:bd:ff:85:e4:3b:8e:86:
90:dd:4a:36:37:a8:d7:58:c6:5a:55:ae:6e:c0:c8:a5:ac:c1:
8f:7e:35:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ABOy4iw9zDFmUfsNzCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjUwODIzMDMwMTQ2WhcNMjUwODI0MDMwMTQ2WjAzMTEwLwYDVQQD
Eyg0MDI3NTNhYzMwMDc1MzNmYmUxMDcwNmI4MTk4NDEyNDYxODEzZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhYlpO3MCIzUrKsEr9xOd3iuFBjt
3aQdrh6wp+Lkv5Ako9l/lByRgCLXbyDaqI9arTFbJ37p8oyWJqwf+f2HY7UNYOmV
M82DIRp7QgwzO22XuCoSEoz0eN+R1CRTsqdh/99f6xHZZ42+1GZs42CijOvyeTGP
GNisWiFnu0+tPe74uW5TTcpNtflRIy+5x3N+7vAgicXY5wbD2ZBGfOejC1zoweoJ
bcHt/YaOkZ8ekvlDVqxVzA5gB00JCCCT6frWsugxEzg4FXjjr8tqH6TzPPr45iu9
GCBVG70j4oE8u9j30r4LchAWQ8W8SQh6w7+HZuPETp7CTaE1/mvuAVcBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAnU6wwB1M/vhBwa4GYQSRhgT/cMB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/KxqOJU
E7B9b2cfn/F6MJxlodXsxG0BAXHEAZrLoDwJDD/0l9iRZFNL6V+w48VfdDK5k7hk
6N/sbI1jzavSJiY0qQrFkf2AhMnbWVP+4NPiEA385bCvpxI9nOq6Njs060TUixZB
L1XVk9GJ6FvGAGRBpm5S+HzRFUYQ8OaF5xod4ajJzapPd1uRUuaHGNdeVJN/hXU8
kVG4rUn3MnPDyaowNcqnJNIdZGheuUbMauQyabJpn8a1TKb1aUAjBzA926ks4pWR
WpSDRBgPG0Q55yH8fExo11SDprHaLWNeRfp2rha9/4XkO46GkN1KNjeo11jGWlWu
bsDIpazBj341kw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:18 2025 by rpki-client