Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: 7w0ZGxQ/RKH9X04nTUVpzLHY44X+ycsVukRLe5DBKms=
Subject key identifier: A8:46:D7:03:A4:72:3E:D7:DC:FA:2D:46:AB:9E:62:BB:C1:E2:0F:2B
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01989336AF51BE9F42DF43B90F87F63BADD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0677
Signing time: Sun 10 Aug 2025 09:01:31 +0000
Manifest this update: Sun 10 Aug 2025 09:01:31 +0000
Manifest next update: Mon 11 Aug 2025 09:01:31 +0000
Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: fnqoCaoGrKq/Mmx+obmAA/TD5x/j6cUAte8aJf1H1YU=)
3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:af:51:be:9f:42:df:43:b9:0f:87:f6:3b:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Aug 10 09:01:31 2025 GMT
Not After : Aug 11 09:01:31 2025 GMT
Subject: CN=a846d703a4723ed7dcfa2d46ab9e62bbc1e20f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:d1:21:2f:6f:d7:42:ec:6e:5f:33:87:ec:
0c:2a:00:3f:30:01:cb:40:98:d6:3e:2e:bb:29:b5:
17:fe:2c:3d:3a:0a:8a:53:26:db:aa:ec:42:ec:21:
29:78:67:cf:c5:c8:6d:5a:37:81:9f:9c:b8:e1:df:
8c:33:38:79:39:50:50:51:e3:33:09:f0:28:3b:e8:
82:04:09:59:77:a3:d4:32:25:15:38:46:0c:31:84:
1b:a1:0d:51:76:a0:32:37:05:f7:16:2a:4b:d3:70:
44:e8:1c:e6:36:0d:ca:70:8b:92:90:c1:87:c6:0e:
79:5f:f9:17:05:c8:98:4e:8d:b0:4f:de:1c:a8:4b:
79:fe:c4:46:97:80:94:18:82:b5:bd:eb:17:b6:be:
f9:d2:35:25:de:09:eb:9c:b1:80:13:3c:22:1e:b1:
94:2b:c4:e8:f4:45:2f:7f:64:d0:bd:ab:e0:d9:e8:
2f:53:4f:95:d7:45:1e:a0:f6:85:61:ea:59:33:cf:
ea:20:4d:ef:ed:a3:bc:0d:f4:8a:6f:40:d2:64:88:
e3:f5:b2:86:13:f3:c1:62:e4:c2:75:69:2e:e3:92:
77:d8:10:3c:6f:77:96:e4:b6:63:bb:22:67:52:7f:
6a:fb:04:5d:2c:7e:aa:e4:4c:0f:2f:ca:83:0a:37:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:D7:03:A4:72:3E:D7:DC:FA:2D:46:AB:9E:62:BB:C1:E2:0F:2B
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:81:b2:2b:27:b0:71:6d:ee:08:d9:ae:d7:4b:f7:55:81:b5:
4b:63:8e:36:8c:39:29:8e:f3:9c:eb:a4:df:82:0f:e3:53:fa:
44:e9:79:42:8d:41:77:27:d1:da:3f:fc:5c:d3:08:4e:12:96:
8f:ab:b0:42:5c:cb:20:d7:98:72:f1:3a:82:8f:44:c3:08:25:
ba:4b:81:30:41:ac:1f:b2:67:98:e0:c0:ec:8c:e1:8c:d6:67:
66:f8:d4:22:84:d8:71:b6:a0:75:70:16:0e:67:b9:27:fe:74:
2d:94:66:97:12:80:29:e1:4a:ac:0f:1d:ea:22:c1:7a:41:02:
5a:ff:b9:a3:cc:cb:f5:0e:ec:0c:ad:de:46:97:65:b2:05:43:
a9:6f:04:27:0d:54:79:6e:79:ee:6e:6c:8a:dc:47:6e:64:8e:
7d:d7:dd:e2:29:40:ea:a3:96:3d:44:df:0b:43:6d:3e:02:31:
4f:d0:96:6a:38:c3:f4:78:74:97:92:fd:ad:d0:c2:d4:34:61:
50:af:d7:60:94:05:3e:56:fd:77:1d:c1:cd:9f:5d:9c:db:a0:
98:8d:28:f9:03:62:ad:bc:b8:84:33:4a:02:6b:00:05:9c:05:
f2:fa:be:24:8e:ce:0d:31:ff:3f:6c:a2:05:76:d6:a7:c4:1d:
1c:49:47:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNq9Rvp9C30O5D4f2O63WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj
NzVlZDQwHhcNMjUwODEwMDkwMTMxWhcNMjUwODExMDkwMTMxWjAzMTEwLwYDVQQD
EyhhODQ2ZDcwM2E0NzIzZWQ3ZGNmYTJkNDZhYjllNjJiYmMxZTIwZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNDRIS9v10Lsbl8zh+wMKgA/MAHL
QJjWPi67KbUX/iw9OgqKUybbquxC7CEpeGfPxchtWjeBn5y44d+MMzh5OVBQUeMz
CfAoO+iCBAlZd6PUMiUVOEYMMYQboQ1RdqAyNwX3FipL03BE6BzmNg3KcIuSkMGH
xg55X/kXBciYTo2wT94cqEt5/sRGl4CUGIK1vesXtr750jUl3gnrnLGAEzwiHrGU
K8To9EUvf2TQvavg2egvU0+V10UeoPaFYepZM8/qIE3v7aO8DfSKb0DSZIjj9bKG
E/PBYuTCdWku45J32BA8b3eW5LZjuyJnUn9q+wRdLH6q5EwPL8qDCjf+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhG1wOkcj7X3PotRqueYrvB4g8rMB8GA1UdIwQY
MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt
YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4
LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYGyKyew
cW3uCNmu10v3VYG1S2OONow5KY7znOuk34IP41P6ROl5Qo1BdyfR2j/8XNMIThKW
j6uwQlzLINeYcvE6go9EwwglukuBMEGsH7JnmODA7IzhjNZnZvjUIoTYcbagdXAW
Dme5J/50LZRmlxKAKeFKrA8d6iLBekECWv+5o8zL9Q7sDK3eRpdlsgVDqW8EJw1U
eW557m5sitxHbmSOfdfd4ilA6qOWPUTfC0NtPgIxT9CWajjD9Hh0l5L9rdDC1DRh
UK/XYJQFPlb9dx3BzZ9dnNugmI0o+QNirby4hDNKAmsABZwF8vq+JI7ODTH/P2yi
BXbWp8QdHElHXg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:12 2025 by rpki-client