Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: hr/a4XVYGJtCpyJZeCMk3TtV0bK9jscZK3Qs/opDKhc=
Subject key identifier: F4:33:0E:29:00:A4:19:9E:DE:BB:14:DE:48:89:F5:F3:9B:52:93:56
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 019848533441FA141A721F57062ED50D6320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 11FC
Signing time: Sat 26 Jul 2025 20:01:08 +0000
Manifest this update: Sat 26 Jul 2025 20:01:08 +0000
Manifest next update: Sun 27 Jul 2025 20:01:08 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: VAytNX090X/8bFt7IchUGI4R0SV+4g26qFbDYTZADOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:34:41:fa:14:1a:72:1f:57:06:2e:d5:0d:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Jul 26 20:01:08 2025 GMT
Not After : Jul 27 20:01:08 2025 GMT
Subject: CN=f4330e2900a4199edebb14de4889f5f39b529356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:e7:63:18:86:f1:fd:99:43:18:81:d1:dc:
2f:bf:c7:9a:5b:61:9c:3e:a5:4e:cf:a1:4e:d4:c4:
5c:be:8c:ce:ac:0e:f7:f1:27:c8:b7:38:f0:85:1a:
01:e9:c9:94:9d:ca:dd:e1:3f:a2:d3:dd:39:20:ed:
20:e8:e7:c4:67:99:c4:63:60:95:42:48:0d:6d:ab:
94:db:c6:21:fd:16:47:53:30:10:54:01:d3:96:13:
a2:2a:ea:27:c7:9b:fd:fc:5a:f6:67:64:f8:eb:bd:
05:4a:73:46:ca:89:bf:c7:47:c8:88:b8:a5:12:1a:
0b:db:6e:6a:f3:d2:39:6c:c7:b1:7b:79:94:07:50:
c6:02:67:a2:68:bd:23:82:c6:ae:44:60:97:98:ea:
ab:2c:24:aa:3c:0b:8e:d6:71:6c:2d:a5:be:8c:ee:
eb:b7:58:e4:f8:88:3b:58:69:9f:e6:fc:df:c3:a5:
c7:f1:a8:ed:c1:89:02:1a:8e:77:2c:9d:3c:5f:9f:
79:99:fc:16:48:0a:7f:b7:83:6a:a9:b7:9b:11:e7:
82:ed:eb:1b:6c:4e:71:4a:95:5c:89:cd:66:8a:a4:
25:12:ab:45:5f:2a:f9:d6:78:48:0b:df:e3:ff:cb:
f4:90:fb:cc:67:ee:30:bd:3e:3b:f3:a0:87:96:56:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:0E:29:00:A4:19:9E:DE:BB:14:DE:48:89:F5:F3:9B:52:93:56
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d1:6a:32:0e:f1:a5:0a:c3:7c:29:8b:5a:6a:d7:aa:d4:cf:
b6:42:c8:f4:45:8d:15:db:06:ff:62:1c:d6:b2:bf:bf:f5:75:
e6:81:6d:62:db:21:1e:bf:a0:46:4c:92:9f:37:c5:b7:2b:57:
0a:0e:75:14:76:f7:cf:c5:21:0c:17:fe:d1:18:d5:e7:a8:e5:
2d:2a:e0:61:6b:3b:01:14:2c:94:1b:54:d6:23:da:ce:4e:c8:
66:64:bb:cf:0a:ee:98:b9:c4:22:39:64:56:99:10:50:12:89:
5e:4a:69:16:c5:cc:42:bb:09:9f:05:0a:a5:68:cf:8c:4e:d9:
28:b4:61:65:d4:48:ee:41:8f:c1:a5:0c:e4:5e:5e:1d:09:b7:
af:84:5c:57:24:4c:b9:a1:f8:2c:e0:cc:9c:5a:1c:b2:cf:33:
bb:67:2d:3e:a1:82:2f:a0:1f:e2:f8:c9:0d:d9:b3:be:c0:46:
d5:e8:72:e9:1c:b0:0b:33:66:d1:eb:90:97:f3:33:b4:52:01:
69:d2:e6:8d:da:93:de:db:de:d0:94:2e:e1:81:d2:c6:70:41:
66:a2:ad:09:b2:86:2e:d3:7c:45:06:2b:a9:78:bd:43:83:ab:
e3:9f:74:f1:69:77:1e:eb:c3:9c:4f:1f:33:b3:1c:30:49:81:
c3:e1:90:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUzRB+hQach9XBi7VDWMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MmYwODAzYzQyOThlMTU2ZDU2M2JkNGYyMDdjYjViODM2
MTAyNmUwHhcNMjUwNzI2MjAwMTA4WhcNMjUwNzI3MjAwMTA4WjAzMTEwLwYDVQQD
EyhmNDMzMGUyOTAwYTQxOTllZGViYjE0ZGU0ODg5ZjVmMzliNTI5MzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIPnYxiG8f2ZQxiB0dwvv8eaW2Gc
PqVOz6FO1MRcvozOrA738SfItzjwhRoB6cmUncrd4T+i0905IO0g6OfEZ5nEY2CV
QkgNbauU28Yh/RZHUzAQVAHTlhOiKuonx5v9/Fr2Z2T4670FSnNGyom/x0fIiLil
EhoL225q89I5bMexe3mUB1DGAmeiaL0jgsauRGCXmOqrLCSqPAuO1nFsLaW+jO7r
t1jk+Ig7WGmf5vzfw6XH8ajtwYkCGo53LJ08X595mfwWSAp/t4NqqbebEeeC7esb
bE5xSpVcic1miqQlEqtFXyr51nhIC9/j/8v0kPvMZ+4wvT4786CHllaTlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQzDikApBme3rsU3kiJ9fObUpNWMB8GA1UdIwQY
MBaAFMYvCAPEKY4VbVY71PIHy1uDYQJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWIt
M2RlYmExNjY2ZTliLzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWItM2RlYmExNjY2ZTli
LzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9FqMg7x
pQrDfCmLWmrXqtTPtkLI9EWNFdsG/2Ic1rK/v/V15oFtYtshHr+gRkySnzfFtytX
Cg51FHb3z8UhDBf+0RjV56jlLSrgYWs7ARQslBtU1iPazk7IZmS7zwrumLnEIjlk
VpkQUBKJXkppFsXMQrsJnwUKpWjPjE7ZKLRhZdRI7kGPwaUM5F5eHQm3r4RcVyRM
uaH4LODMnFocss8zu2ctPqGCL6Af4vjJDdmzvsBG1ehy6RywCzNm0euQl/MztFIB
adLmjdqT3tve0JQu4YHSxnBBZqKtCbKGLtN8RQYrqXi9Q4Or45908Wl3HuvDnE8f
M7McMEmBw+GQtQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:16:46 2025 by rpki-client