Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: J1pInLoZ8eyqMV1lbHHPkcZ/DEhuHuCPYBTGPU5HGq4=
Subject key identifier: 16:3F:29:6E:83:28:7E:9A:D7:BD:64:5C:18:4F:14:ED:15:91:0F:4D
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 01988B7C5604456505AF659DA288655D0069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 152F
Signing time: Fri 08 Aug 2025 21:00:37 +0000
Manifest this update: Fri 08 Aug 2025 21:00:37 +0000
Manifest next update: Sat 09 Aug 2025 21:00:37 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: yKoS4NVBXCGxEO0csjNOTJVzcUIEua+sVmGx0gBMywc=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:56:04:45:65:05:af:65:9d:a2:88:65:5d:00:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Aug 8 21:00:37 2025 GMT
Not After : Aug 9 21:00:37 2025 GMT
Subject: CN=163f296e83287e9ad7bd645c184f14ed15910f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:f5:cc:ce:ad:44:31:c0:4c:e0:0f:c6:15:
69:4e:1e:e2:34:96:52:c2:9b:32:69:24:3c:9a:9b:
ea:db:a4:e0:22:df:d8:25:f6:e0:02:d4:f0:61:b9:
d3:55:ba:c3:a7:cc:f5:5d:7f:62:3c:7e:59:c5:a7:
b1:cc:8a:57:d7:9c:8d:75:f6:99:28:74:1e:4d:11:
ef:e0:d3:94:22:c0:9d:a0:bf:71:c5:03:93:3f:0c:
28:ae:b0:d1:14:fc:8f:54:a6:a9:24:7b:8e:2d:bc:
d9:89:16:65:85:18:e6:0b:4e:f8:49:53:af:9d:db:
89:df:0a:e1:e7:26:e4:e0:fa:e1:44:77:f3:91:4f:
6f:24:a7:d2:ac:64:b1:9c:02:cd:c4:6c:91:05:28:
db:a1:63:9d:4f:20:f2:8e:42:fa:0c:59:5f:39:82:
7d:c0:eb:be:5b:b4:a3:c2:cc:68:1b:78:88:6d:5e:
cb:7a:c1:be:a8:a8:59:1a:39:88:03:0a:38:c6:42:
64:aa:f0:cb:7a:f9:39:66:95:6d:6c:0e:f5:7b:bf:
a4:81:36:fd:89:ab:8b:d9:06:a3:ed:ae:08:dc:77:
ac:1b:90:1d:da:24:4d:4a:db:af:f2:f0:27:d5:fc:
a4:7f:a8:de:53:fb:07:be:b3:f1:9d:40:72:2d:92:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3F:29:6E:83:28:7E:9A:D7:BD:64:5C:18:4F:14:ED:15:91:0F:4D
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a5:51:d2:49:dd:23:82:85:53:58:3b:74:69:ab:4d:c1:03:
1a:d4:dd:39:9d:2b:15:2f:e9:48:10:c8:90:ac:14:0d:38:a7:
35:8d:bd:c2:70:05:91:c4:24:88:c2:af:ca:88:0c:d5:83:5a:
00:b7:91:51:86:5b:aa:15:ac:74:dc:6d:77:7c:31:95:d9:d0:
12:8a:16:dc:e5:24:13:23:5e:ee:1e:81:5a:a6:1f:f4:ad:92:
af:b1:b1:c9:ed:75:46:e3:da:4e:48:87:5e:3b:1b:83:33:ba:
42:d0:55:b7:b2:c5:46:4e:b0:01:52:27:9f:70:ca:3a:89:fc:
77:77:8c:97:65:c9:8f:20:0d:6b:57:ac:40:53:97:ab:fa:76:
3e:d8:35:b9:34:8d:af:e5:e1:ba:8d:36:56:03:df:2e:c7:97:
36:17:17:5b:45:12:e4:36:81:54:d6:af:c6:a6:ca:4b:bc:af:
7d:fc:b3:33:fc:98:e1:41:ca:7c:67:b8:28:32:09:68:a0:3d:
83:30:3f:31:3e:4a:5f:88:54:cd:66:f9:bc:b2:ef:6c:99:e0:
cc:29:15:1e:f9:2c:63:3f:64:af:ac:4f:ce:7f:a5:b4:ff:9a:
73:7a:7d:87:78:cf:67:59:e1:ab:23:52:8c:c9:8f:fd:75:d5:
3f:ec:6a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfFYERWUFr2WdoohlXQBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmM0MTI3MjFjMGM2ZTdhNGM1NzY3YWU5OGM0NTIxZGVm
NTE1MDEwHhcNMjUwODA4MjEwMDM3WhcNMjUwODA5MjEwMDM3WjAzMTEwLwYDVQQD
EygxNjNmMjk2ZTgzMjg3ZTlhZDdiZDY0NWMxODRmMTRlZDE1OTEwZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcr1zM6tRDHATOAPxhVpTh7iNJZS
wpsyaSQ8mpvq26TgIt/YJfbgAtTwYbnTVbrDp8z1XX9iPH5ZxaexzIpX15yNdfaZ
KHQeTRHv4NOUIsCdoL9xxQOTPwworrDRFPyPVKapJHuOLbzZiRZlhRjmC074SVOv
nduJ3wrh5ybk4PrhRHfzkU9vJKfSrGSxnALNxGyRBSjboWOdTyDyjkL6DFlfOYJ9
wOu+W7SjwsxoG3iIbV7LesG+qKhZGjmIAwo4xkJkqvDLevk5ZpVtbA71e7+kgTb9
iauL2Qaj7a4I3HesG5Ad2iRNStuv8vAn1fykf6jeU/sHvrPxnUByLZKRFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY/KW6DKH6a171kXBhPFO0VkQ9NMB8GA1UdIwQY
MBaAFD/8QSchwMbnpMV2eumMRSHe9RUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUt
MjIxMThiMzYxNDkwLzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUtMjIxMThiMzYxNDkw
LzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6VR0knd
I4KFU1g7dGmrTcEDGtTdOZ0rFS/pSBDIkKwUDTinNY29wnAFkcQkiMKvyogM1YNa
ALeRUYZbqhWsdNxtd3wxldnQEooW3OUkEyNe7h6BWqYf9K2Sr7Gxye11RuPaTkiH
XjsbgzO6QtBVt7LFRk6wAVInn3DKOon8d3eMl2XJjyANa1esQFOXq/p2Ptg1uTSN
r+Xhuo02VgPfLseXNhcXW0US5DaBVNavxqbKS7yvffyzM/yY4UHKfGe4KDIJaKA9
gzA/MT5KX4hUzWb5vLLvbJngzCkVHvksYz9kr6xPzn+ltP+ac3p9h3jPZ1nhqyNS
jMmP/XXVP+xqyw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:51 2025 by rpki-client