Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: FsoYdtVmoJ+iihA2MQfuhJ7T8bB8/6YuacTtyeIMjf0=
Subject key identifier: A5:DB:AA:5C:E0:CF:0B:10:9B:ED:FA:64:CC:4B:65:C3:B3:BB:7E:D4
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019872CF51C11D1F8013E1CFAC0D1371F8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: tkkeFEaQDh8FU2vh7UASFI22EeblVLtAxT68/0VE6bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:51:c1:1d:1f:80:13:e1:cf:ac:0d:13:71:f8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=a5dbaa5ce0cf0b109bedfa64cc4b65c3b3bb7ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:94:26:13:4e:16:69:bf:49:5a:0d:bc:28:
b7:da:af:37:02:c9:1d:fb:c2:cd:3c:08:cd:f7:61:
b9:d7:5a:70:f1:25:52:ee:07:64:ba:8e:4f:0b:dc:
88:2b:c1:5d:dd:b4:95:a2:20:88:8c:c7:e4:52:1e:
79:aa:c4:a9:0b:ba:e6:ae:3a:1a:7c:6b:78:1e:ec:
03:28:78:42:61:5e:ba:02:b8:1d:d2:cc:a4:d7:15:
a2:24:10:a0:83:ff:d9:cb:9f:4d:7d:d4:cc:d0:ba:
c4:37:37:a0:65:74:a3:9b:13:42:b0:f5:5f:35:10:
8d:69:86:18:e0:ea:c2:2e:77:e4:4c:16:ae:c8:a8:
e8:72:78:b7:86:a0:66:a4:53:c0:99:7c:fb:86:34:
ce:59:85:e8:0a:a1:11:6d:fc:1c:48:f9:33:f2:f7:
64:ed:f5:06:2c:4a:62:53:01:f7:a3:b5:90:1e:e4:
02:d8:1e:4b:e7:c0:ee:7b:2e:35:b4:94:5f:fc:42:
9b:88:fc:58:7c:f3:91:1c:4d:5b:0f:5e:98:77:3b:
67:18:de:4f:97:78:2f:67:42:ba:56:d6:1b:e6:1a:
02:08:34:bd:f9:c5:04:dc:fd:a4:fb:d0:d8:7b:fb:
c9:ab:47:5e:64:94:a5:19:c8:55:36:3a:b0:f8:06:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DB:AA:5C:E0:CF:0B:10:9B:ED:FA:64:CC:4B:65:C3:B3:BB:7E:D4
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:a2:af:cb:ab:75:20:70:7f:3e:ab:c2:51:93:17:d4:55:
91:45:f2:80:86:5a:28:71:66:a2:c8:8b:8d:96:d4:60:a0:bd:
0e:86:81:d3:4f:ca:f0:5d:e6:c0:90:87:24:90:c5:12:8f:50:
1d:08:52:41:bb:8d:a5:95:f7:bb:88:aa:b6:bf:7d:06:78:50:
50:28:5d:44:94:09:58:0e:43:82:19:e0:5b:bb:f7:31:a6:a0:
ed:41:5e:2c:55:03:a8:55:9c:36:a2:29:9b:17:7b:f0:e4:07:
93:31:e5:65:91:85:4d:57:47:3d:1d:8b:07:80:7f:d7:20:83:
4d:be:8c:91:52:7a:c6:c5:b5:01:eb:c2:ab:51:ce:ed:de:5f:
6b:d2:a2:c3:64:6f:0e:94:e9:d1:5f:40:36:14:aa:aa:55:c3:
f6:03:d0:fc:bb:4c:1c:f4:d6:e6:2d:b2:30:97:cb:5d:10:70:
5f:d9:5c:7e:20:19:5d:fd:fd:a8:6c:c5:d2:c6:65:bd:99:69:
18:e9:e4:f4:fc:55:1f:39:bd:67:3d:94:be:b1:33:6d:89:50:
77:74:47:b6:33:e1:a1:d4:29:51:0a:a2:00:4f:fd:2c:87:b5:
15:28:64:5c:73:20:2a:fd:31:3e:6b:14:ec:af:a8:97:2b:24:
52:87:4c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz1HBHR+AE+HPrA0TcfjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh
Y2YyNTEwHhcNMjUwODA0MDIwMDQ2WhcNMjUwODA1MDIwMDQ2WjAzMTEwLwYDVQQD
EyhhNWRiYWE1Y2UwY2YwYjEwOWJlZGZhNjRjYzRiNjVjM2IzYmI3ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApteUJhNOFmm/SVoNvCi32q83Askd
+8LNPAjN92G511pw8SVS7gdkuo5PC9yIK8Fd3bSVoiCIjMfkUh55qsSpC7rmrjoa
fGt4HuwDKHhCYV66Argd0syk1xWiJBCgg//Zy59NfdTM0LrENzegZXSjmxNCsPVf
NRCNaYYY4OrCLnfkTBauyKjocni3hqBmpFPAmXz7hjTOWYXoCqERbfwcSPkz8vdk
7fUGLEpiUwH3o7WQHuQC2B5L58Duey41tJRf/EKbiPxYfPORHE1bD16YdztnGN5P
l3gvZ0K6VtYb5hoCCDS9+cUE3P2k+9DYe/vJq0deZJSlGchVNjqw+AYxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXbqlzgzwsQm+36ZMxLZcOzu37UMB8GA1UdIwQY
MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt
MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk
LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcOir8ur
dSBwfz6rwlGTF9RVkUXygIZaKHFmosiLjZbUYKC9DoaB00/K8F3mwJCHJJDFEo9Q
HQhSQbuNpZX3u4iqtr99BnhQUChdRJQJWA5DghngW7v3Maag7UFeLFUDqFWcNqIp
mxd78OQHkzHlZZGFTVdHPR2LB4B/1yCDTb6MkVJ6xsW1AevCq1HO7d5fa9Kiw2Rv
DpTp0V9ANhSqqlXD9gPQ/LtMHPTW5i2yMJfLXRBwX9lcfiAZXf39qGzF0sZlvZlp
GOnk9PxVHzm9Zz2UvrEzbYlQd3RHtjPhodQpUQqiAE/9LIe1FShkXHMgKv0xPmsU
7K+olyskUodMLw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:10 2025 by rpki-client