Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: 1rv+rdBmNPp+auElWhpUXMiWy7eO4fulFR4mgNXakXw=
Subject key identifier: 1B:98:C5:0C:62:16:54:C9:7C:E2:DC:B7:1E:99:87:1F:C3:D2:23:E7
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 01989E5EB304115C71C2AC1BC92217FBD79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 09A0
Signing time: Tue 12 Aug 2025 13:01:02 +0000
Manifest this update: Tue 12 Aug 2025 13:01:02 +0000
Manifest next update: Wed 13 Aug 2025 13:01:02 +0000
Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=)
2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=)
3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: Wr2EGFOZj9pF36Mz3v/JIfwEKEroGIh2jz4OLPGoM9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:b3:04:11:5c:71:c2:ac:1b:c9:22:17:fb:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Aug 12 13:01:02 2025 GMT
Not After : Aug 13 13:01:02 2025 GMT
Subject: CN=1b98c50c621654c97ce2dcb71e99871fc3d223e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6d:d2:32:95:61:b6:54:70:6a:0a:a9:30:9d:
37:7f:f9:fe:fa:c8:e3:69:7d:8d:97:af:60:c9:f3:
a4:e1:74:f4:41:ba:9a:09:8b:98:ea:51:20:8e:f7:
f9:4c:c6:d8:90:3b:78:74:bf:e7:e9:79:76:ab:93:
3a:70:e0:17:2a:1e:82:78:24:16:3b:6b:2f:7e:42:
67:62:37:a0:3a:45:f2:e9:cf:ac:6f:94:fd:0d:83:
61:33:14:86:3f:6f:e7:fb:f6:4c:ba:02:07:34:79:
d4:53:65:a8:51:20:b9:1b:ce:a3:c8:e1:57:ca:28:
a5:82:98:0a:53:e1:89:d3:7b:54:1a:bd:da:0d:40:
3c:b4:77:1d:85:42:c6:54:94:c5:d7:28:08:62:bb:
da:39:7d:12:6e:e4:b2:c8:d7:f5:fb:79:ba:63:c5:
6c:05:6e:da:16:91:38:f3:4e:78:ac:a1:70:64:22:
69:87:ce:7d:0b:8f:dd:d2:01:35:6c:e1:24:02:30:
95:92:e5:36:ef:5d:ac:da:91:66:6d:73:d9:03:01:
da:e4:7f:4f:8b:12:5e:0c:e6:56:c2:60:46:25:d6:
53:57:7f:02:62:b1:a4:5a:85:d9:3b:24:cc:95:16:
83:55:a0:ca:d8:1e:56:65:c5:ad:21:99:6f:76:e6:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:C5:0C:62:16:54:C9:7C:E2:DC:B7:1E:99:87:1F:C3:D2:23:E7
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:40:64:0d:3f:97:24:24:5c:c4:2a:9c:88:86:95:4a:09:c6:
b0:ca:c7:29:26:ae:a1:7f:a8:1c:37:89:99:b9:ce:a6:9f:61:
6b:49:4e:46:f4:e0:73:ea:14:56:9d:86:c6:2a:8b:e0:38:9d:
a6:d1:04:03:59:aa:a5:56:38:b7:ed:09:ce:cf:1f:1e:88:ed:
e9:52:88:50:81:33:37:74:b0:79:61:44:79:e3:d2:79:61:d3:
24:9f:78:c3:8c:3f:d7:27:15:62:08:c4:a9:6f:f9:c4:5b:f1:
ea:04:07:71:19:b3:d4:00:1a:ee:ca:75:f3:d6:a5:85:6d:29:
fe:ec:e9:74:6c:37:bc:c3:93:3a:3d:f2:c3:7b:7d:ce:1c:ce:
5e:a3:53:1c:3b:f4:bc:8f:30:bb:b0:39:dc:6e:4f:e9:a5:2a:
ed:f9:d6:a1:5c:e5:39:1b:c3:f0:b9:e6:3b:59:be:c5:ca:2c:
6d:89:3d:ee:d2:3a:a8:58:1b:e6:98:89:37:69:eb:80:14:8f:
55:fc:89:70:06:f5:57:24:98:3f:a3:4f:5c:f3:df:40:a5:db:
be:8d:70:46:b3:0f:a9:4d:ee:62:18:66:b0:00:e6:31:c6:53:
a9:1d:cb:a9:b8:6e:db:71:0b:f4:f5:50:41:3a:0e:25:67:c7:
5d:18:d4:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXrMEEVxxwqwbySIX+9ecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi
NGIxMjgwHhcNMjUwODEyMTMwMTAyWhcNMjUwODEzMTMwMTAyWjAzMTEwLwYDVQQD
EygxYjk4YzUwYzYyMTY1NGM5N2NlMmRjYjcxZTk5ODcxZmMzZDIyM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW3SMpVhtlRwagqpMJ03f/n++sjj
aX2Nl69gyfOk4XT0QbqaCYuY6lEgjvf5TMbYkDt4dL/n6Xl2q5M6cOAXKh6CeCQW
O2svfkJnYjegOkXy6c+sb5T9DYNhMxSGP2/n+/ZMugIHNHnUU2WoUSC5G86jyOFX
yiilgpgKU+GJ03tUGr3aDUA8tHcdhULGVJTF1ygIYrvaOX0SbuSyyNf1+3m6Y8Vs
BW7aFpE48054rKFwZCJph859C4/d0gE1bOEkAjCVkuU2712s2pFmbXPZAwHa5H9P
ixJeDOZWwmBGJdZTV38CYrGkWoXZOyTMlRaDVaDK2B5WZcWtIZlvduZplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuYxQxiFlTJfOLctx6Zhx/D0iPnMB8GA1UdIwQY
MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt
N2I0MTBiNzgxZGVmLzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm
LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUBkDT+X
JCRcxCqciIaVSgnGsMrHKSauoX+oHDeJmbnOpp9ha0lORvTgc+oUVp2GxiqL4Did
ptEEA1mqpVY4t+0Jzs8fHojt6VKIUIEzN3SweWFEeePSeWHTJJ94w4w/1ycVYgjE
qW/5xFvx6gQHcRmz1AAa7sp189alhW0p/uzpdGw3vMOTOj3yw3t9zhzOXqNTHDv0
vI8wu7A53G5P6aUq7fnWoVzlORvD8LnmO1m+xcosbYk97tI6qFgb5piJN2nrgBSP
VfyJcAb1VySYP6NPXPPfQKXbvo1wRrMPqU3uYhhmsADmMcZTqR3Lqbhu23EL9PVQ
QToOJWfHXRjUWQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:35:02 2025 by rpki-client