Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: HD4WQ80UVh57rKGCuD8CycsjpjnIp3xarHXE6MsVeIo=
Subject key identifier: B1:DB:F5:7D:5C:51:52:88:7E:94:C8:29:BD:B4:19:71:0B:46:EF:BE
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 0198A083E66214AA31CBF3B3114EFE9DF8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 23:00:55 +0000
Manifest this update: Tue 12 Aug 2025 23:00:55 +0000
Manifest next update: Wed 13 Aug 2025 23:00:55 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: Uwpm5WHm6m3Gt3JAd07kq6Qe6b1Vn17amRDZdRPytwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:e6:62:14:aa:31:cb:f3:b3:11:4e:fe:9d:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Aug 12 23:00:55 2025 GMT
Not After : Aug 13 23:00:55 2025 GMT
Subject: CN=b1dbf57d5c5152887e94c829bdb419710b46efbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:0b:a2:46:f0:04:cb:16:12:4b:24:f9:cf:
9d:d1:26:0b:21:2c:4a:b3:96:94:66:66:9b:2c:a5:
cc:5b:1f:2f:1a:d7:d6:6a:da:c8:30:b8:23:75:9b:
64:93:65:1f:4a:c8:9c:bd:27:1f:71:47:24:46:2c:
1c:83:da:ad:49:72:80:a4:2d:d5:c7:17:9f:4d:11:
94:44:d0:f7:73:1b:ec:2c:b9:cd:f5:66:b1:0c:0c:
d7:09:eb:3a:13:a7:71:c0:8c:a1:14:01:bd:d1:db:
75:39:d3:04:23:1e:55:49:cc:fb:ea:0e:f4:27:bd:
09:87:ac:a9:ca:4c:8a:f5:10:e4:fc:fc:b8:f7:70:
e7:32:f5:70:40:9d:69:47:9f:c6:ee:a5:3a:c4:9e:
ce:6c:92:99:42:75:40:65:9b:42:fe:88:0b:2d:00:
bb:11:36:a9:19:ae:a1:67:ce:8b:29:13:2e:c0:c5:
69:c5:3a:d8:02:30:51:fa:2a:bd:81:38:24:d2:bf:
7a:68:ce:99:53:18:0c:38:fa:6b:25:a6:fa:22:e9:
86:e5:17:b3:4d:6b:bf:e5:62:aa:f5:61:df:ec:96:
0f:0c:19:2b:91:86:9c:ac:27:d5:ee:ac:11:b7:f8:
0e:56:fa:38:11:84:4e:1e:1e:7e:24:5d:c4:e7:47:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:F5:7D:5C:51:52:88:7E:94:C8:29:BD:B4:19:71:0B:46:EF:BE
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9d:34:41:34:6f:30:4e:c3:6f:54:f8:0b:d9:de:2c:55:9f:
93:46:d1:72:96:0c:83:2c:d1:88:c7:b9:1f:91:21:c5:36:00:
c9:f1:1d:21:4c:55:72:73:27:63:07:2e:76:4f:71:c2:36:a0:
73:b1:79:1c:8b:7e:d8:e1:50:63:97:38:3b:a4:1e:42:cb:c8:
b4:05:09:0d:91:3e:a8:a9:de:dd:15:bb:84:cb:85:f4:24:d2:
42:8a:cc:5d:d3:9b:7b:54:da:99:f9:83:fe:a1:2a:b6:3d:80:
d5:1f:0e:c2:9b:69:46:27:9d:0f:96:fc:76:54:a9:f0:6c:13:
ad:73:36:df:b8:f0:34:dc:46:9c:06:74:56:66:87:b0:74:10:
2e:c3:e5:a1:cf:a9:94:46:b3:90:50:4f:7c:40:c5:92:57:cf:
36:fc:0a:40:17:4c:79:9b:29:35:f9:59:97:61:6b:ea:a6:fc:
e4:47:bc:58:5d:61:ed:9b:c2:4d:97:eb:0f:4b:f2:45:e1:78:
f4:aa:ef:1d:2d:42:47:4b:ec:00:ea:2b:f0:a5:2f:71:c4:5b:
ff:bb:a3:5d:21:68:9a:ec:5d:83:a3:c3:39:ae:d8:7b:06:0e:
ab:94:01:7b:c9:12:74:d0:15:c9:c1:c8:f1:71:b1:c0:35:32:
80:74:c3:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigg+ZiFKoxy/OzEU7+nfjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmE1ZjJiNDY4ZGIzNWViNTYyYmQzN2UxZjM2ZWNlYTgx
M2NjYWMwHhcNMjUwODEyMjMwMDU1WhcNMjUwODEzMjMwMDU1WjAzMTEwLwYDVQQD
EyhiMWRiZjU3ZDVjNTE1Mjg4N2U5NGM4MjliZGI0MTk3MTBiNDZlZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi8LokbwBMsWEksk+c+d0SYLISxK
s5aUZmabLKXMWx8vGtfWatrIMLgjdZtkk2UfSsicvScfcUckRiwcg9qtSXKApC3V
xxefTRGURND3cxvsLLnN9WaxDAzXCes6E6dxwIyhFAG90dt1OdMEIx5VScz76g70
J70Jh6ypykyK9RDk/Py493DnMvVwQJ1pR5/G7qU6xJ7ObJKZQnVAZZtC/ogLLQC7
ETapGa6hZ86LKRMuwMVpxTrYAjBR+iq9gTgk0r96aM6ZUxgMOPprJab6IumG5Rez
TWu/5WKq9WHf7JYPDBkrkYacrCfV7qwRt/gOVvo4EYROHh5+JF3E50fFYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHb9X1cUVKIfpTIKb20GXELRu++MB8GA1UdIwQY
MBaAFMZqXytGjbNetWK9N+Hzbs6oE8ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4Nzgt
MzFmNGNjMTJkNjIwLzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4NzgtMzFmNGNjMTJkNjIw
LzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp00QTRv
ME7Db1T4C9neLFWfk0bRcpYMgyzRiMe5H5EhxTYAyfEdIUxVcnMnYwcudk9xwjag
c7F5HIt+2OFQY5c4O6QeQsvItAUJDZE+qKne3RW7hMuF9CTSQorMXdObe1TamfmD
/qEqtj2A1R8OwptpRiedD5b8dlSp8GwTrXM237jwNNxGnAZ0VmaHsHQQLsPloc+p
lEazkFBPfEDFklfPNvwKQBdMeZspNflZl2Fr6qb85Ee8WF1h7ZvCTZfrD0vyReF4
9KrvHS1CR0vsAOor8KUvccRb/7ujXSFomuxdg6PDOa7YewYOq5QBe8kSdNAVycHI
8XGxwDUygHTDeQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:57 2025 by rpki-client