Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: HYy6XY/1459Ov+VzJyiNa9zjpSXl1d9zz14uA4/Gnqg=
Subject key identifier: 98:B1:21:1A:D9:FC:A7:72:F5:E3:C1:9D:C9:16:57:A5:F6:C8:41:BC
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 0198835545F00288D77243B07E980EB3A013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 147A
Signing time: Thu 07 Aug 2025 07:01:00 +0000
Manifest this update: Thu 07 Aug 2025 07:01:00 +0000
Manifest next update: Fri 08 Aug 2025 07:01:00 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: ED7tz/q9QoqHWkKjjLqiusCq0fdfAx8/GwrOPYBay1M=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:45:f0:02:88:d7:72:43:b0:7e:98:0e:b3:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Aug 7 07:01:00 2025 GMT
Not After : Aug 8 07:01:00 2025 GMT
Subject: CN=98b1211ad9fca772f5e3c19dc91657a5f6c841bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:49:d2:96:00:7e:d2:d0:34:7d:e7:a9:3e:
39:81:bc:55:f1:c4:0f:85:b8:5c:b4:1f:24:1f:02:
d1:f0:c4:7c:0d:53:3c:37:f0:8b:1b:ad:97:5b:4a:
0e:26:5d:61:a8:7d:9b:02:e6:51:3c:e2:03:52:68:
b3:58:54:ca:52:6e:a9:a8:b8:b5:c1:a2:76:3e:aa:
04:e0:2e:f7:ae:64:03:8b:39:3d:9e:70:40:8c:51:
b2:3d:53:ad:7b:e6:2b:79:0b:9a:74:77:e8:8b:38:
26:93:a4:02:c7:7a:91:6f:ae:59:d1:74:b0:d9:bb:
f4:90:58:45:90:d7:ab:0e:6d:a8:ec:a2:e8:3e:b5:
82:a7:3b:ee:29:2a:97:aa:aa:e5:ed:47:3a:48:c3:
f5:4a:39:c5:e6:c9:5c:bb:b8:bd:81:bb:93:80:fd:
52:e3:a8:c5:47:84:ae:2e:e5:c5:d3:c0:49:89:e6:
03:74:ed:2e:54:5d:12:89:59:19:8a:0f:66:f7:f5:
05:f4:cd:20:d8:37:df:5a:e7:17:3c:ee:ce:73:98:
59:73:1b:58:9f:79:a9:80:8b:2f:ec:bd:0f:2f:8f:
05:87:f2:26:d3:1d:a9:dc:34:04:fb:96:d8:a3:f6:
4c:2a:e3:ed:f3:9e:a8:3e:b2:b2:29:11:77:4e:68:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:21:1A:D9:FC:A7:72:F5:E3:C1:9D:C9:16:57:A5:F6:C8:41:BC
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:18:7a:a8:5c:85:76:b1:51:eb:dc:98:f3:66:28:d6:b4:
9c:56:03:13:90:f6:d2:be:23:02:f6:c1:d3:62:31:eb:f9:c3:
72:a5:15:a6:ad:69:64:94:50:13:ce:0a:cb:bd:4d:f9:6b:bc:
1f:66:05:a3:6e:55:76:8f:97:f4:27:2f:65:5d:4e:4d:92:1e:
7c:83:19:ce:6b:0e:2a:91:46:12:99:e5:72:6e:3f:b5:6e:d0:
1d:9d:55:b6:90:f3:66:91:f4:31:49:0c:94:55:1c:38:c6:8b:
0f:4c:34:dd:41:5e:70:ed:2f:ed:1b:c7:1a:0d:b0:e3:ae:d0:
63:62:f4:f2:63:51:19:89:a6:fd:9a:f1:15:f4:e3:5f:e6:77:
21:c6:a2:5a:8c:3c:01:a0:dd:fa:62:59:50:99:12:24:de:37:
ac:eb:7d:03:96:99:5a:00:d1:c7:87:36:76:b6:40:ac:45:f3:
7e:43:62:8a:5c:c0:91:af:8f:45:1e:61:da:10:a0:ef:0e:e0:
4a:10:3c:7b:65:ff:34:13:34:1f:48:9f:86:94:cf:f1:d3:8c:
8d:e7:95:02:5b:a9:d6:29:01:0c:1d:17:0c:96:8c:6e:2b:b3:
79:c3:b8:85:fc:38:66:8c:58:f8:23:d8:02:58:f4:3a:fc:c2:
3c:9f:b6:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVUXwAojXckOwfpgOs6ATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWMyMTg4MTFkOTI5NGFkNjMxMjUzYTQ0NWVkMWQzOTVh
OTYzOWYwHhcNMjUwODA3MDcwMTAwWhcNMjUwODA4MDcwMTAwWjAzMTEwLwYDVQQD
Eyg5OGIxMjExYWQ5ZmNhNzcyZjVlM2MxOWRjOTE2NTdhNWY2Yzg0MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA201J0pYAftLQNH3nqT45gbxV8cQP
hbhctB8kHwLR8MR8DVM8N/CLG62XW0oOJl1hqH2bAuZRPOIDUmizWFTKUm6pqLi1
waJ2PqoE4C73rmQDizk9nnBAjFGyPVOte+YreQuadHfoizgmk6QCx3qRb65Z0XSw
2bv0kFhFkNerDm2o7KLoPrWCpzvuKSqXqqrl7Uc6SMP1SjnF5slcu7i9gbuTgP1S
46jFR4SuLuXF08BJieYDdO0uVF0SiVkZig9m9/UF9M0g2DffWucXPO7Oc5hZcxtY
n3mpgIsv7L0PL48Fh/Im0x2p3DQE+5bYo/ZMKuPt856oPrKyKRF3Tmhj4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJixIRrZ/Kdy9ePBnckWV6X2yEG8MB8GA1UdIwQY
MBaAFP8cIYgR2SlK1jElOkRe0dOVqWOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt
YTBhNjBiYjljZDliLzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli
LzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuEYeqhc
hXaxUevcmPNmKNa0nFYDE5D20r4jAvbB02Ix6/nDcqUVpq1pZJRQE84Ky71N+Wu8
H2YFo25Vdo+X9CcvZV1OTZIefIMZzmsOKpFGEpnlcm4/tW7QHZ1VtpDzZpH0MUkM
lFUcOMaLD0w03UFecO0v7RvHGg2w467QY2L08mNRGYmm/ZrxFfTjX+Z3IcaiWow8
AaDd+mJZUJkSJN43rOt9A5aZWgDRx4c2drZArEXzfkNiilzAka+PRR5h2hCg7w7g
ShA8e2X/NBM0H0ifhpTP8dOMjeeVAlup1ikBDB0XDJaMbiuzecO4hfw4ZoxY+CPY
Alj0OvzCPJ+2cw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:01 2025 by rpki-client