Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: zl9enc/c6CsauBhXRRiLn80N5UBvSBhGBocn6GNUZkY=
Subject key identifier: 1F:CA:08:72:C9:86:E8:94:D5:0A:91:2F:49:60:F0:64:4A:46:4C:73
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 01992331325D241D1C28325521CE0B8D252B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: yIihsXFoOpXvi3kRTgNTw+BIPovDgRyJLyU1pHPnGgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:32:5d:24:1d:1c:28:32:55:21:ce:0b:8d:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=1fca0872c986e894d50a912f4960f0644a464c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:66:20:d2:60:40:c2:6e:c5:4f:00:e1:08:19:
a5:0d:d8:a7:80:a2:10:e0:7b:4e:4d:cc:c3:85:0d:
23:a9:bd:2e:c4:48:78:0b:67:d2:84:98:d0:39:6b:
3a:22:d1:bd:06:6d:87:a0:78:3f:36:34:ee:10:2e:
e9:3f:01:b5:1a:b2:1d:fb:67:99:4b:2c:28:5f:06:
15:26:96:02:f7:ed:12:e8:ff:ab:f2:61:07:b0:3c:
44:3a:35:27:2a:d0:8e:7f:9a:41:67:3b:f8:33:9f:
6f:22:b0:61:c0:fc:c4:b1:9b:2b:3d:46:57:06:7f:
4c:a5:25:58:72:e0:de:85:eb:cd:8d:ad:e8:b7:11:
74:be:03:c7:b2:68:f7:c7:3c:7e:6a:3a:88:ac:7a:
b8:cf:9b:bc:1b:93:f0:0a:74:22:a7:81:f8:9b:47:
8f:31:56:73:f0:49:08:af:16:22:02:d5:cd:fc:b4:
00:4a:91:46:38:b0:79:ee:27:e7:f8:a9:3c:41:fc:
5b:bf:d9:00:03:c8:e2:74:37:e5:a8:fd:17:8e:06:
0d:9f:6a:31:c2:91:e2:d6:e5:3f:ec:f7:60:e1:83:
33:b3:d3:38:c4:ce:0d:17:71:69:a3:37:0c:81:3f:
a9:70:4a:b4:95:b9:e3:83:ae:f1:cf:f9:88:e1:30:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:08:72:C9:86:E8:94:D5:0A:91:2F:49:60:F0:64:4A:46:4C:73
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:29:5a:d7:c8:c5:d3:d3:26:87:3d:3b:35:f5:be:91:8d:
8a:b7:69:97:1f:1c:33:7b:f3:65:f0:b2:16:d1:59:e6:48:ca:
b0:37:56:0c:cc:d3:3c:11:8e:2e:2d:68:04:1d:f6:ac:32:a7:
35:a8:cd:f2:b2:95:0c:1e:05:c8:69:64:ab:ee:91:1c:5b:c3:
a4:8b:b5:61:02:14:dd:6a:ed:60:f4:49:fe:ad:39:16:40:6a:
61:2d:1a:25:3b:7a:87:32:08:dd:d3:cd:f2:45:cb:bb:2f:ef:
12:6c:e6:a6:ed:2b:69:09:d1:c1:66:77:fa:84:d0:d3:e6:8b:
10:80:0a:c9:54:54:42:fd:86:71:4a:cd:65:14:5c:59:70:ef:
5b:da:68:be:3d:9b:04:49:43:d3:fc:1a:a4:4f:d8:f0:ce:82:
dc:be:ad:a3:f8:00:46:d2:1b:c7:40:df:53:08:b8:f1:95:70:
c4:42:a4:b1:dd:c0:62:13:b5:2d:df:52:05:cf:04:bf:34:51:
6e:d6:7d:79:93:81:75:51:e6:bf:bf:a4:86:33:01:c4:a0:2f:
d0:a0:36:60:8b:6c:cc:83:d7:f8:19:e2:43:fd:41:b7:64:b0:
45:20:fe:36:91:8a:bf:52:dc:28:4a:ec:73:a6:21:51:9a:41:
26:50:1f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMTJdJB0cKDJVIc4LjSUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5
YWJhMDQwHhcNMjUwOTA3MDgwMDUwWhcNMjUwOTA4MDgwMDUwWjAzMTEwLwYDVQQD
EygxZmNhMDg3MmM5ODZlODk0ZDUwYTkxMmY0OTYwZjA2NDRhNDY0YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Yg0mBAwm7FTwDhCBmlDdingKIQ
4HtOTczDhQ0jqb0uxEh4C2fShJjQOWs6ItG9Bm2HoHg/NjTuEC7pPwG1GrId+2eZ
SywoXwYVJpYC9+0S6P+r8mEHsDxEOjUnKtCOf5pBZzv4M59vIrBhwPzEsZsrPUZX
Bn9MpSVYcuDehevNja3otxF0vgPHsmj3xzx+ajqIrHq4z5u8G5PwCnQip4H4m0eP
MVZz8EkIrxYiAtXN/LQASpFGOLB57ifn+Kk8Qfxbv9kAA8jidDflqP0XjgYNn2ox
wpHi1uU/7Pdg4YMzs9M4xM4NF3FpozcMgT+pcEq0lbnjg67xz/mI4TD/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/KCHLJhuiU1QqRL0lg8GRKRkxzMB8GA1UdIwQY
MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct
NmJjZTc3OTljYmVhLzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh
LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsopWtfI
xdPTJoc9OzX1vpGNirdplx8cM3vzZfCyFtFZ5kjKsDdWDMzTPBGOLi1oBB32rDKn
NajN8rKVDB4FyGlkq+6RHFvDpIu1YQIU3WrtYPRJ/q05FkBqYS0aJTt6hzII3dPN
8kXLuy/vEmzmpu0raQnRwWZ3+oTQ0+aLEIAKyVRUQv2GcUrNZRRcWXDvW9povj2b
BElD0/wapE/Y8M6C3L6to/gARtIbx0DfUwi48ZVwxEKksd3AYhO1Ld9SBc8EvzRR
btZ9eZOBdVHmv7+khjMBxKAv0KA2YItszIPX+BniQ/1Bt2SwRSD+NpGKv1LcKErs
c6YhUZpBJlAfQA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:49 2025 by rpki-client