Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: Z23SteVbipjhzNtmPOfdirDkv1hLT0UxwjlXZFwjwm0=
Subject key identifier: 35:DA:4B:51:1D:3C:C6:2B:9E:DE:45:51:FA:96:D8:48:25:54:D1:53
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019896372C5C9A273FE254660516ED12CAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0C33
Signing time: Sun 10 Aug 2025 23:00:54 +0000
Manifest this update: Sun 10 Aug 2025 23:00:54 +0000
Manifest next update: Mon 11 Aug 2025 23:00:54 +0000
Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: Vlay04RGxFjCFh8SNrzktA3qnj2bQ1S6dzN/Y6+cKQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:2c:5c:9a:27:3f:e2:54:66:05:16:ed:12:ca:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Aug 10 23:00:54 2025 GMT
Not After : Aug 11 23:00:54 2025 GMT
Subject: CN=35da4b511d3cc62b9ede4551fa96d8482554d153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:ca:f6:89:db:fa:d6:e7:01:28:3d:41:43:
d3:84:e5:40:2f:8d:34:8c:e0:2e:f1:f5:0f:e8:4e:
c2:fa:ad:5d:d4:1b:29:0f:dd:3b:79:2a:f0:92:dc:
39:2d:0a:e5:f1:b5:5d:7f:75:f6:70:91:90:e7:a3:
a5:1b:76:9a:a3:52:18:ab:5c:d2:16:91:98:6a:4d:
01:50:a2:1b:ff:5a:b3:bf:43:d1:f0:4e:92:02:d9:
58:ef:b6:56:48:e0:3d:cc:90:84:37:37:54:e4:60:
eb:ca:ae:92:9a:13:2e:cd:cb:d3:32:68:09:e8:d1:
23:99:f5:97:62:f9:c6:aa:2f:7b:04:0e:f9:eb:26:
0f:e8:3a:61:c4:3d:33:f4:48:ae:fc:1a:3c:51:bf:
16:73:1f:93:31:c1:31:c2:d4:c7:41:a7:7d:08:da:
76:ef:96:69:9a:f1:a8:4e:0a:8e:60:d7:74:10:45:
f5:b1:e1:64:4e:46:f9:97:04:91:bc:52:72:df:9c:
54:4b:a8:95:7c:41:c0:c9:be:cb:ba:43:f9:e7:4c:
43:9a:86:3a:ca:e4:38:53:31:8c:d5:a8:7c:4e:9e:
61:7c:fc:ae:83:ec:0a:51:88:61:0b:bc:cb:49:1d:
0b:8f:c3:a8:e1:02:e0:a6:2f:77:35:25:7b:bf:20:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:4B:51:1D:3C:C6:2B:9E:DE:45:51:FA:96:D8:48:25:54:D1:53
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bc:b9:92:c7:29:d5:2b:09:14:00:e1:b0:22:87:4c:b1:0c:
0f:d2:29:55:d3:81:48:0b:4f:06:dd:6d:eb:83:47:9b:d6:00:
9d:d9:39:af:7a:e0:72:6c:6b:44:fa:27:cf:43:57:11:3f:c8:
aa:76:2e:91:f0:0f:24:91:6e:b7:b1:19:6e:ab:7d:2d:22:74:
41:c2:68:43:10:6a:5d:2c:3e:d6:a0:4b:5c:17:cd:a0:10:c5:
20:38:06:0e:14:24:29:87:59:0b:a6:2e:cd:71:46:f2:13:f6:
4e:4f:4e:89:e5:24:fc:b9:0c:de:8e:06:f8:6e:7a:c5:0b:6a:
e3:47:56:0f:1e:58:57:8e:2a:3b:73:a8:51:11:b0:91:bb:12:
ce:47:be:1a:83:3d:63:04:a2:55:f8:bb:0c:bb:16:af:2a:52:
aa:89:2c:ba:d8:8f:64:e8:6b:8b:9d:2e:6e:31:74:05:c6:55:
41:d0:29:33:5e:29:b1:e2:35:62:ff:5e:dd:5a:d3:ae:aa:47:
f5:25:50:64:c7:fc:b4:8d:66:d6:db:f4:7a:5c:81:f5:c9:82:
31:3c:62:73:cf:b7:26:ba:c1:75:c6:6c:b1:4b:f6:80:e4:d6:
12:25:a9:2f:1e:e6:af:d8:8d:01:7e:a3:1b:ac:fd:5c:33:9d:
0a:21:9b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNyxcmic/4lRmBRbtEsr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk
NGVkOTYwHhcNMjUwODEwMjMwMDU0WhcNMjUwODExMjMwMDU0WjAzMTEwLwYDVQQD
EygzNWRhNGI1MTFkM2NjNjJiOWVkZTQ1NTFmYTk2ZDg0ODI1NTRkMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HvK9onb+tbnASg9QUPThOVAL400
jOAu8fUP6E7C+q1d1BspD907eSrwktw5LQrl8bVdf3X2cJGQ56OlG3aao1IYq1zS
FpGYak0BUKIb/1qzv0PR8E6SAtlY77ZWSOA9zJCENzdU5GDryq6SmhMuzcvTMmgJ
6NEjmfWXYvnGqi97BA756yYP6DphxD0z9Eiu/Bo8Ub8Wcx+TMcExwtTHQad9CNp2
75ZpmvGoTgqOYNd0EEX1seFkTkb5lwSRvFJy35xUS6iVfEHAyb7LukP550xDmoY6
yuQ4UzGM1ah8Tp5hfPyug+wKUYhhC7zLSR0Lj8Oo4QLgpi93NSV7vyA/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXaS1EdPMYrnt5FUfqW2EglVNFTMB8GA1UdIwQY
MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt
Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1
LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7y5kscp
1SsJFADhsCKHTLEMD9IpVdOBSAtPBt1t64NHm9YAndk5r3rgcmxrRPonz0NXET/I
qnYukfAPJJFut7EZbqt9LSJ0QcJoQxBqXSw+1qBLXBfNoBDFIDgGDhQkKYdZC6Yu
zXFG8hP2Tk9OieUk/LkM3o4G+G56xQtq40dWDx5YV44qO3OoURGwkbsSzke+GoM9
YwSiVfi7DLsWrypSqoksutiPZOhri50ubjF0BcZVQdApM14pseI1Yv9e3VrTrqpH
9SVQZMf8tI1m1tv0elyB9cmCMTxic8+3JrrBdcZssUv2gOTWEiWpLx7mr9iNAX6j
G6z9XDOdCiGbzg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:17:51 2025 by rpki-client