Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: CuGI628tPDBGm9CWGNdYGmpg/d9Ne3GVmPECQbr1VLY=
Subject key identifier: 0C:5C:F2:F0:94:54:4E:56:9D:F6:2C:82:41:D9:BC:BA:47:C9:8F:DC
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019873E203DF93040D9FDBF522D967BCBDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 13FF
Signing time: Mon 04 Aug 2025 07:00:48 +0000
Manifest this update: Mon 04 Aug 2025 07:00:48 +0000
Manifest next update: Tue 05 Aug 2025 07:00:48 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: hPWtKAUHi5YFx3IrMc1H4E1v0jrNYLfC41ZlPtFPkEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:03:df:93:04:0d:9f:db:f5:22:d9:67:bc:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Aug 4 07:00:48 2025 GMT
Not After : Aug 5 07:00:48 2025 GMT
Subject: CN=0c5cf2f094544e569df62c8241d9bcba47c98fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:e6:c7:c4:b0:28:8c:0a:e9:1a:2d:7a:6b:
d6:23:d5:ad:7c:79:a0:67:6e:08:ec:aa:fd:2c:6f:
05:86:4c:13:4b:8e:99:03:e1:e5:0c:f7:ff:1c:5d:
e3:c7:c2:97:ad:f6:40:0a:4b:0c:19:30:de:79:52:
62:c2:04:2f:e5:a3:0b:62:83:a0:3c:be:ae:78:fb:
59:fb:09:c8:6c:16:71:34:6f:ab:b0:8f:98:11:4e:
bc:25:d9:a1:ea:62:71:f2:52:c2:03:81:fa:eb:10:
23:6a:a1:06:8f:a3:fe:cf:e6:ab:0a:2a:51:c7:32:
b0:6b:4a:7e:ee:5a:81:bf:6f:e4:72:74:6e:e0:fc:
71:1c:48:76:f1:e3:a0:16:95:93:ca:8c:fc:be:3c:
63:fa:8a:06:81:ab:36:47:7e:d3:ca:2e:bc:c0:c5:
cd:34:d9:7b:01:85:55:a4:15:4f:b9:8d:53:55:10:
9f:3d:2a:26:cc:6f:4b:ef:83:87:b0:ad:b2:20:51:
1f:26:ea:6d:e2:a6:82:d7:eb:f1:86:a4:7e:b6:b8:
a7:77:17:27:0a:1e:c9:49:c9:59:6a:2e:a7:83:5f:
e1:06:e6:74:28:29:94:3a:9e:37:7d:07:ba:da:a1:
c9:55:d2:09:1f:6b:d7:b4:a6:66:ca:f1:01:7b:02:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:F2:F0:94:54:4E:56:9D:F6:2C:82:41:D9:BC:BA:47:C9:8F:DC
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:a5:59:5d:c5:75:03:49:0d:f2:11:dd:08:d0:55:d3:be:
35:c7:ab:62:03:d5:66:5c:5f:1d:fe:80:e9:51:7b:e1:4f:d2:
e3:73:c9:3b:2b:22:6c:13:ac:06:9d:54:ae:df:af:0c:4b:0d:
5a:2e:6f:3d:4c:07:3d:df:0c:50:bc:eb:9b:86:dc:4d:1e:13:
87:ab:29:c2:3a:84:c2:36:b8:d8:8a:88:2a:29:7e:a8:a9:d9:
2c:a3:18:df:ab:39:fb:55:08:a5:97:e2:f5:9e:6a:4e:cb:5d:
c1:6c:2a:b6:07:36:3d:8d:51:b7:ec:26:7b:57:b5:1c:f9:41:
ce:d4:f4:83:c8:2b:ce:fa:6c:fd:c9:e5:6d:13:da:5f:b0:a9:
b4:94:02:e9:b9:34:b7:59:0b:a8:ac:be:86:16:c0:1c:cf:95:
9b:3b:d9:e4:39:33:ee:0d:0b:f2:3f:85:91:6c:9c:ee:94:24:
8b:a7:fd:6c:00:84:dd:a8:27:14:77:54:c6:ac:38:3c:46:9b:
df:d5:fb:a8:2e:54:c4:f6:ad:5e:fd:52:10:7e:2e:76:f6:51:
e6:32:ea:15:7c:eb:2e:85:2e:5c:c8:92:e0:05:5b:d4:8e:24:
37:f0:bd:06:cc:68:c2:0b:f5:07:af:3b:65:d4:dc:31:ea:74:
d1:d2:06:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4gPfkwQNn9v1ItlnvL37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw
NjM4N2YwHhcNMjUwODA0MDcwMDQ4WhcNMjUwODA1MDcwMDQ4WjAzMTEwLwYDVQQD
EygwYzVjZjJmMDk0NTQ0ZTU2OWRmNjJjODI0MWQ5YmNiYTQ3Yzk4ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvvmx8SwKIwK6RotemvWI9WtfHmg
Z24I7Kr9LG8FhkwTS46ZA+HlDPf/HF3jx8KXrfZACksMGTDeeVJiwgQv5aMLYoOg
PL6uePtZ+wnIbBZxNG+rsI+YEU68Jdmh6mJx8lLCA4H66xAjaqEGj6P+z+arCipR
xzKwa0p+7lqBv2/kcnRu4PxxHEh28eOgFpWTyoz8vjxj+ooGgas2R37Tyi68wMXN
NNl7AYVVpBVPuY1TVRCfPSomzG9L74OHsK2yIFEfJupt4qaC1+vxhqR+trindxcn
Ch7JSclZai6ng1/hBuZ0KCmUOp43fQe62qHJVdIJH2vXtKZmyvEBewIJgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxc8vCUVE5WnfYsgkHZvLpHyY/cMB8GA1UdIwQY
MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt
ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky
LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU36lWV3F
dQNJDfIR3QjQVdO+NcerYgPVZlxfHf6A6VF74U/S43PJOysibBOsBp1Urt+vDEsN
Wi5vPUwHPd8MULzrm4bcTR4Th6spwjqEwja42IqIKil+qKnZLKMY36s5+1UIpZfi
9Z5qTstdwWwqtgc2PY1Rt+wme1e1HPlBztT0g8grzvps/cnlbRPaX7CptJQC6bk0
t1kLqKy+hhbAHM+VmzvZ5Dkz7g0L8j+FkWyc7pQki6f9bACE3agnFHdUxqw4PEab
39X7qC5UxPatXv1SEH4udvZR5jLqFXzrLoUuXMiS4AVb1I4kN/C9Bsxowgv1B687
ZdTcMep00dIGBg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:16 2025 by rpki-client