Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: pLV2xsycu1mG4Kj491d4evI1VPLqQ6xU4j/wLcFgLUk=
Subject key identifier: 7C:28:82:8C:C8:CC:80:06:9F:4A:E2:69:E2:7A:5C:1B:DB:F3:A9:48
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019880C21164481BCCFDF2A1EE6F220ECEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 19:00:58 +0000
Manifest this update: Wed 06 Aug 2025 19:00:58 +0000
Manifest next update: Thu 07 Aug 2025 19:00:58 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: nohCdVLZG0/wYnL5URWpMw9+PBPndAm/wSjE+jTgoEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:11:64:48:1b:cc:fd:f2:a1:ee:6f:22:0e:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Aug 6 19:00:58 2025 GMT
Not After : Aug 7 19:00:58 2025 GMT
Subject: CN=7c28828cc8cc80069f4ae269e27a5c1bdbf3a948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:ff:b8:88:01:c3:45:f1:d9:e9:a9:ce:3f:
68:6d:43:51:fe:66:37:b0:92:2c:b0:b9:1c:f3:25:
21:da:6a:25:f5:27:23:e2:45:9d:d2:be:4f:d7:6a:
8e:78:72:73:27:ce:8d:45:2a:0f:f0:ab:71:ff:f8:
de:11:83:cb:0b:f6:bf:ea:84:23:bb:22:e5:2c:bc:
37:23:61:76:99:8a:06:dd:e7:78:98:e2:85:dc:85:
21:36:4e:89:ee:e5:dc:c9:7f:db:1b:0e:de:94:b6:
bf:0e:b9:9d:3b:6d:36:b1:97:29:c4:9a:75:3b:33:
cc:d7:9f:b1:2a:f2:c4:5f:6b:5e:62:68:3b:e7:e0:
32:25:5a:c8:b6:87:31:5f:85:52:33:71:a9:47:0d:
49:2d:83:ff:dd:ce:26:6e:c0:08:fb:f7:96:6e:ae:
d1:27:89:46:72:62:2d:e2:d5:02:62:cc:65:00:56:
ed:86:07:d3:40:8a:b1:ba:c2:d6:06:b5:66:d3:e2:
31:e8:a7:8a:b9:86:e3:60:b2:1e:54:20:81:26:bb:
64:21:5b:3f:e3:50:54:fe:35:1a:d8:9b:4a:02:d4:
23:8b:23:40:10:b4:cc:50:e1:b6:84:de:58:26:b1:
f0:15:02:86:f8:d8:51:5c:74:84:38:a7:dc:2a:21:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:82:8C:C8:CC:80:06:9F:4A:E2:69:E2:7A:5C:1B:DB:F3:A9:48
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:20:b0:75:81:68:38:3a:2f:74:6f:11:17:fd:da:b6:55:2f:
6a:f7:87:e3:71:b0:bf:9f:a8:f6:9e:1c:60:f5:d8:91:fa:03:
0d:d2:6b:f1:72:e8:aa:83:fe:c7:77:fd:8d:6a:a8:f8:e1:33:
8c:57:bf:2d:50:bf:23:d9:45:5b:f7:df:4c:38:79:be:8e:dd:
48:b4:39:4d:93:91:fb:b4:cd:f8:a5:7c:2b:28:ba:54:3c:16:
6c:86:9d:c3:36:e1:7b:58:b0:df:b4:ba:aa:c4:54:46:0e:4c:
0a:ef:46:45:7a:f1:ed:66:af:74:c6:f1:d8:32:98:a7:ae:6b:
1e:de:74:93:8b:06:fb:f0:3d:10:f8:48:9c:3f:29:8e:6d:ca:
80:2b:25:dd:60:f1:a9:9b:9d:90:c0:b1:5c:a1:97:7d:22:de:
2c:ad:d9:df:1e:5d:fd:20:94:84:0e:15:d6:da:34:67:de:f2:
45:c2:b8:95:a7:5d:47:aa:f5:08:22:09:89:09:70:66:c1:aa:
e7:19:ca:9d:89:32:5c:bc:9a:1d:f3:f5:e2:96:8a:52:8f:76:
03:58:bf:87:69:17:5f:3e:34:da:cd:1e:25:ec:bf:d7:c7:cb:
6e:5c:4d:51:65:03:d5:4b:b9:eb:30:7b:f2:4a:ef:37:6c:f1:
d3:75:3b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwhFkSBvM/fKh7m8iDs6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk
MmM0YjcwHhcNMjUwODA2MTkwMDU4WhcNMjUwODA3MTkwMDU4WjAzMTEwLwYDVQQD
Eyg3YzI4ODI4Y2M4Y2M4MDA2OWY0YWUyNjllMjdhNWMxYmRiZjNhOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0j/uIgBw0Xx2empzj9obUNR/mY3
sJIssLkc8yUh2mol9Scj4kWd0r5P12qOeHJzJ86NRSoP8Ktx//jeEYPLC/a/6oQj
uyLlLLw3I2F2mYoG3ed4mOKF3IUhNk6J7uXcyX/bGw7elLa/DrmdO202sZcpxJp1
OzPM15+xKvLEX2teYmg75+AyJVrItocxX4VSM3GpRw1JLYP/3c4mbsAI+/eWbq7R
J4lGcmIt4tUCYsxlAFbthgfTQIqxusLWBrVm0+Ix6KeKuYbjYLIeVCCBJrtkIVs/
41BU/jUa2JtKAtQjiyNAELTMUOG2hN5YJrHwFQKG+NhRXHSEOKfcKiGk7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwogozIzIAGn0riaeJ6XBvb86lIMB8GA1UdIwQY
MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt
MjBhY2MzOGJjOGZmLzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm
LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyCwdYFo
ODovdG8RF/3atlUvaveH43Gwv5+o9p4cYPXYkfoDDdJr8XLoqoP+x3f9jWqo+OEz
jFe/LVC/I9lFW/ffTDh5vo7dSLQ5TZOR+7TN+KV8Kyi6VDwWbIadwzbhe1iw37S6
qsRURg5MCu9GRXrx7WavdMbx2DKYp65rHt50k4sG+/A9EPhInD8pjm3KgCsl3WDx
qZudkMCxXKGXfSLeLK3Z3x5d/SCUhA4V1to0Z97yRcK4laddR6r1CCIJiQlwZsGq
5xnKnYkyXLyaHfP14paKUo92A1i/h2kXXz402s0eJey/18fLblxNUWUD1Uu56zB7
8krvN2zx03U7Zw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:14 2025 by rpki-client