Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: NtYhcXFkPF+u0TDKfsKojSEeg1PHnXYf7y0I9kio5Jo=
Subject key identifier: 6E:F7:F6:7E:76:4D:51:A5:73:81:19:DC:2D:2B:B4:F1:42:3B:5C:EB
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0199239FE909BC9D0EF057290DB227DFF951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1689
Signing time: Sun 07 Sep 2025 10:01:46 +0000
Manifest this update: Sun 07 Sep 2025 10:01:46 +0000
Manifest next update: Mon 08 Sep 2025 10:01:46 +0000
Files and hashes: 1: FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa (hash: mY8drD0B5z14cvplqrvZqDtdowa1l5LQ8YBe8N40mz4=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: B3qVwuSA4MlFaZiM02RU2W037ZAL0C2qasDCvdIHG5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e9:09:bc:9d:0e:f0:57:29:0d:b2:27:df:f9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Sep 7 10:01:46 2025 GMT
Not After : Sep 8 10:01:46 2025 GMT
Subject: CN=6ef7f67e764d51a5738119dc2d2bb4f1423b5ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:3f:55:6f:6e:69:13:b0:22:f1:22:33:0c:
42:43:19:0e:93:e5:1f:b4:66:be:6a:f2:36:55:c1:
80:9b:e7:64:8a:ed:b8:df:97:87:9a:eb:00:b4:f0:
d9:4f:7f:f9:f7:3d:30:df:0c:ac:e0:72:0d:13:e5:
40:9e:fd:b0:55:d4:dc:66:d1:8c:c4:24:2a:cf:9c:
d3:36:44:18:70:10:bd:c4:2f:a6:f8:b0:33:fd:cd:
b2:8f:bf:f9:a6:dc:e3:a5:ae:89:bd:af:aa:86:40:
07:1e:6d:72:20:d1:57:0f:09:51:8f:75:92:ea:54:
03:05:f8:cb:ce:bc:17:c2:09:f8:0e:1c:25:a6:d9:
0b:f0:cb:84:40:bf:3e:0a:b7:b9:16:99:14:4c:91:
0d:fb:21:a7:ee:d1:84:63:96:8b:4f:e7:84:c7:73:
75:c0:fd:b0:85:9e:3a:a9:3d:04:37:bd:ef:35:2f:
9a:4c:d1:7a:f4:1c:a3:d3:50:24:5a:7c:b0:81:47:
48:9e:ef:44:89:84:d6:83:ac:e1:94:78:49:57:5e:
05:fe:07:47:07:2c:38:45:80:63:62:64:8a:ce:bb:
19:9a:c4:ad:e5:69:5a:81:f8:3f:b1:8b:ed:a1:e8:
02:7d:a5:e3:85:6c:c2:39:44:a7:c2:61:c3:60:a4:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:F6:7E:76:4D:51:A5:73:81:19:DC:2D:2B:B4:F1:42:3B:5C:EB
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:78:21:4e:90:90:0f:a1:55:4a:ff:2b:79:64:4d:3a:6c:eb:
c5:67:a7:e6:31:2d:44:7b:04:c6:a8:c8:76:4c:3c:84:24:44:
ff:99:88:a5:e1:bd:ac:c0:42:89:14:ed:26:f7:71:62:4d:b8:
37:2e:d1:db:c2:b8:a8:63:2d:d5:76:2a:78:b9:b7:89:5c:5e:
2b:2b:56:63:7b:cd:11:08:d3:e5:50:fe:dc:b8:c7:ca:d5:fd:
9e:dd:2e:04:1a:69:3e:b9:af:5c:ac:8b:7e:1e:67:09:06:56:
10:f4:6c:cb:60:89:9a:43:0f:db:e3:e3:72:84:ad:6c:4f:79:
d1:ba:ae:3b:59:88:a6:da:3a:c5:1b:35:15:9f:84:b9:9c:61:
94:4d:a3:6a:54:1f:4b:f2:6f:e4:0e:1c:f4:11:d1:2a:03:43:
43:cd:e9:4a:d5:47:df:3e:10:df:b9:8d:99:28:44:59:f5:97:
79:98:7a:98:e4:ee:a5:22:90:23:57:d5:ac:b5:7c:f6:dc:5a:
19:f3:95:2c:91:ae:44:66:ae:63:97:da:33:cd:16:57:4d:c0:
c7:09:87:65:d9:b9:92:25:31:aa:4b:39:b4:0d:25:e9:37:43:
6d:99:9d:da:04:2b:c9:79:8f:b3:31:8f:fe:2d:34:ce:7e:82:
a6:ff:87:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn+kJvJ0O8FcpDbIn3/lRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm
NmQwMzAwHhcNMjUwOTA3MTAwMTQ2WhcNMjUwOTA4MTAwMTQ2WjAzMTEwLwYDVQQD
Eyg2ZWY3ZjY3ZTc2NGQ1MWE1NzM4MTE5ZGMyZDJiYjRmMTQyM2I1Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob8/VW9uaROwIvEiMwxCQxkOk+Uf
tGa+avI2VcGAm+dkiu2435eHmusAtPDZT3/59z0w3wys4HINE+VAnv2wVdTcZtGM
xCQqz5zTNkQYcBC9xC+m+LAz/c2yj7/5ptzjpa6Jva+qhkAHHm1yINFXDwlRj3WS
6lQDBfjLzrwXwgn4DhwlptkL8MuEQL8+Cre5FpkUTJEN+yGn7tGEY5aLT+eEx3N1
wP2whZ46qT0EN73vNS+aTNF69Byj01AkWnywgUdInu9EiYTWg6zhlHhJV14F/gdH
Byw4RYBjYmSKzrsZmsSt5Wlagfg/sYvtoegCfaXjhWzCOUSnwmHDYKTt9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG739n52TVGlc4EZ3C0rtPFCO1zrMB8GA1UdIwQY
MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt
ZmI1YzYyZTQyZjZiLzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi
LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHghTpCQ
D6FVSv8reWRNOmzrxWen5jEtRHsExqjIdkw8hCRE/5mIpeG9rMBCiRTtJvdxYk24
Ny7R28K4qGMt1XYqeLm3iVxeKytWY3vNEQjT5VD+3LjHytX9nt0uBBppPrmvXKyL
fh5nCQZWEPRsy2CJmkMP2+PjcoStbE950bquO1mIpto6xRs1FZ+EuZxhlE2jalQf
S/Jv5A4c9BHRKgNDQ83pStVH3z4Q37mNmShEWfWXeZh6mOTupSKQI1fVrLV89txa
GfOVLJGuRGauY5faM80WV03AxwmHZdm5kiUxqks5tA0l6TdDbZmd2gQryXmPszGP
/i00zn6Cpv+HhQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:19 2025 by rpki-client