Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: 2VxL4CqxiCwRZG+4si7YQDC7Tp6Hgh8k3NBQWsXaYkw=
Subject key identifier: 9C:C2:AD:3B:E8:27:DE:23:AB:E3:C7:78:1B:08:C0:12:2C:A0:58:1F
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 01983495A5AB95B8B41BCA07C4CE8850FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 0184
Signing time: Wed 23 Jul 2025 00:01:19 +0000
Manifest this update: Wed 23 Jul 2025 00:01:19 +0000
Manifest next update: Thu 24 Jul 2025 00:01:19 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: H2xM7QUFbGxQCEBU4XBxbRMknb9DzS+ZXWwrLyRi6YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:a5:ab:95:b8:b4:1b:ca:07:c4:ce:88:50:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Jul 23 00:01:19 2025 GMT
Not After : Jul 24 00:01:19 2025 GMT
Subject: CN=9cc2ad3be827de23abe3c7781b08c0122ca0581f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:a2:cc:89:a3:29:fd:4d:e8:da:a8:5d:54:
ed:71:6d:97:80:74:5b:fe:40:ab:8e:93:6c:33:3e:
96:8d:d4:8f:d9:28:79:d4:86:6d:e1:85:a2:ce:93:
84:07:2d:dd:68:43:f7:0d:68:b1:bf:bf:6d:3b:11:
12:24:29:73:0d:2f:0b:eb:fe:d8:3b:57:db:4b:8a:
89:7d:35:6e:df:5e:ff:4b:6f:4c:69:bc:d0:d7:1e:
48:72:14:17:73:d0:74:50:58:f1:94:92:f4:36:d4:
7a:79:aa:e6:50:16:4c:2d:ef:c7:44:cd:dc:8f:2d:
f6:f0:ac:4a:9e:51:55:20:30:f3:32:d5:55:be:9d:
1e:d1:fe:7a:fa:b1:2e:2a:5c:1b:c4:e6:8b:00:2d:
4a:1a:8e:a1:c7:87:bc:ce:4c:bd:07:9f:1c:34:aa:
45:d0:2b:e1:6e:56:83:6a:1a:90:fa:ad:c0:65:5c:
0b:b2:9b:ef:cd:f7:71:c9:f4:a7:74:da:6c:fd:c1:
f9:98:34:dc:e5:d4:58:5d:29:bd:8e:2b:32:13:6f:
0b:b3:24:07:41:73:9e:b3:9d:ff:5f:cf:c0:ff:88:
a7:9e:fb:33:a3:19:d5:47:f6:94:62:ad:b7:30:99:
a2:de:1e:62:30:ac:4a:89:08:67:8a:03:59:2c:31:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:AD:3B:E8:27:DE:23:AB:E3:C7:78:1B:08:C0:12:2C:A0:58:1F
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c5:cf:88:49:30:60:63:b4:32:8d:43:f2:ba:75:d4:81:e9:
9f:e9:76:c2:9d:2a:ad:33:54:ca:7f:7f:8e:f0:ef:8e:f5:56:
92:45:55:ac:9a:12:ba:d5:e0:85:59:ca:88:26:96:0b:d2:0a:
ca:0c:2e:24:7b:fe:e8:89:5c:3c:20:35:49:50:db:7b:84:76:
75:86:6f:b7:02:3a:ad:b1:0f:5d:89:c3:02:8c:2c:89:f7:ce:
21:9f:a2:8e:1a:d0:d1:47:f8:f8:ac:88:40:bd:d3:90:c6:79:
a6:75:25:49:5a:1c:5d:53:3a:f0:36:cb:f6:1e:1d:76:c1:09:
97:dc:e6:dc:2b:0e:03:9d:31:81:07:01:4d:31:c4:91:57:19:
dc:46:9c:46:d4:b5:75:c9:b4:83:8d:af:f6:79:7f:3b:6a:3d:
24:ec:7a:b4:35:90:e9:21:d5:e6:9d:f9:39:d1:f6:2a:4e:ac:
43:39:ef:a0:81:d6:84:74:c8:38:da:d2:03:78:53:66:e9:72:
e0:11:af:26:12:12:e2:bd:93:a0:6a:e3:ca:e2:1c:b8:4c:ee:
bc:61:71:1b:15:97:79:ea:ce:64:da:b4:90:20:de:f2:e4:8f:
53:ad:96:77:a7:a1:c3:1b:6c:bc:24:db:13:11:d0:58:48:c2:
d0:9e:38:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0laWrlbi0G8oHxM6IUPyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm
YWZlMGMwHhcNMjUwNzIzMDAwMTE5WhcNMjUwNzI0MDAwMTE5WjAzMTEwLwYDVQQD
Eyg5Y2MyYWQzYmU4MjdkZTIzYWJlM2M3NzgxYjA4YzAxMjJjYTA1ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y2izImjKf1N6NqoXVTtcW2XgHRb
/kCrjpNsMz6WjdSP2Sh51IZt4YWizpOEBy3daEP3DWixv79tOxESJClzDS8L6/7Y
O1fbS4qJfTVu317/S29MabzQ1x5IchQXc9B0UFjxlJL0NtR6earmUBZMLe/HRM3c
jy328KxKnlFVIDDzMtVVvp0e0f56+rEuKlwbxOaLAC1KGo6hx4e8zky9B58cNKpF
0CvhblaDahqQ+q3AZVwLspvvzfdxyfSndNps/cH5mDTc5dRYXSm9jisyE28LsyQH
QXOes53/X8/A/4innvszoxnVR/aUYq23MJmi3h5iMKxKiQhnigNZLDG1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzCrTvoJ94jq+PHeBsIwBIsoFgfMB8GA1UdIwQY
MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt
ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0
LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8XPiEkw
YGO0Mo1D8rp11IHpn+l2wp0qrTNUyn9/jvDvjvVWkkVVrJoSutXghVnKiCaWC9IK
ygwuJHv+6IlcPCA1SVDbe4R2dYZvtwI6rbEPXYnDAowsiffOIZ+ijhrQ0Uf4+KyI
QL3TkMZ5pnUlSVocXVM68DbL9h4ddsEJl9zm3CsOA50xgQcBTTHEkVcZ3EacRtS1
dcm0g42v9nl/O2o9JOx6tDWQ6SHV5p35OdH2Kk6sQznvoIHWhHTIONrSA3hTZuly
4BGvJhIS4r2ToGrjyuIcuEzuvGFxGxWXeerOZNq0kCDe8uSPU62Wd6ehwxtsvCTb
ExHQWEjC0J44lA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 05:26:12 2025 by rpki-client