Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: 08gk9IpcnnsskesFAdNBIWvZ18M7P4jTqZv43r0nYIo=
Subject key identifier: D9:4B:77:43:33:0E:1B:38:3D:D1:3D:19:D0:52:2C:A9:77:77:AD:94
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 019922FA305830BFD65D35271CBE62DD01A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: vl15h6bSawu987-Q_9jiY_8d_bU.roa (hash: Ky1qbRFkXL3xxI3+FV1tNHYzBN6SggIg4pNwGCFKnF8=)
2: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: sln6rqUhKUGoAVqW3AqfzzVLPdk+LxrWgwgdjp7m3bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:30:58:30:bf:d6:5d:35:27:1c:be:62:dd:01:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=d94b7743330e1b383dd13d19d0522ca97777ad94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:71:02:e8:2b:2e:33:4a:e5:7f:7d:72:17:
1e:e5:44:f9:70:80:b2:92:32:74:bd:77:68:6d:8d:
a6:08:84:a8:7e:02:13:36:5d:d2:6c:35:5e:06:80:
c6:05:0a:8e:b1:a5:0f:47:4a:6e:98:19:72:62:ce:
f4:6c:9c:a4:b8:5c:f1:33:27:ac:ce:fa:49:c3:38:
a9:8b:05:76:20:c1:87:b3:3e:7c:ac:f1:74:2f:41:
03:90:92:de:d4:df:cf:7f:e8:a4:0e:16:5e:ca:9f:
00:3a:d8:80:10:7a:8f:82:23:8d:4a:56:5c:e5:2d:
77:0d:02:9e:73:b9:2d:be:b5:6d:09:8e:3f:69:93:
92:be:9e:bf:7c:86:dc:88:e9:14:b7:57:8c:b5:ad:
4b:ad:dd:df:f2:1e:b7:31:d0:cb:08:d1:58:10:1a:
49:cd:6e:e2:2d:42:19:b7:f2:b1:ab:bb:dd:3c:0f:
05:cd:31:a3:db:35:97:8a:a0:f5:2c:13:07:6c:27:
4c:e4:ba:f5:32:e0:6e:29:09:8e:28:ed:b3:e6:ba:
62:fc:e5:15:89:3f:69:9e:3c:55:2c:f2:99:a5:38:
a9:f6:97:21:00:5f:54:4b:3a:2f:50:29:8f:d8:39:
3c:75:36:b3:01:4c:80:da:1b:83:f6:53:a6:a3:d2:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:77:43:33:0E:1B:38:3D:D1:3D:19:D0:52:2C:A9:77:77:AD:94
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:29:ed:6b:52:10:55:0f:b0:91:e0:f8:bd:37:41:ef:0f:
15:61:a6:d2:51:cb:c3:a7:5d:50:6d:4f:dd:9e:be:67:b3:59:
1e:95:f6:d4:75:e7:ec:e1:d0:0b:72:6b:27:25:96:04:b2:a2:
88:80:7d:26:fc:92:0d:b5:a0:ad:7e:77:20:6d:2f:13:ce:09:
30:1c:7c:c8:43:8d:b4:32:ab:57:f5:32:a6:4e:82:2d:9e:4c:
b8:16:35:eb:14:f5:7e:71:b5:89:ff:68:13:74:73:59:08:0d:
5f:59:58:37:c9:3f:21:d8:46:df:08:1c:da:4c:81:e0:28:13:
a1:c1:9a:fb:b0:e0:1e:5b:6d:ca:9f:c3:7f:c8:35:5d:db:42:
3b:5d:e3:9e:a7:7b:08:d6:c3:01:5c:c2:af:67:05:b5:99:a5:
96:34:8a:a5:c8:16:44:b3:e7:c4:ec:95:51:e5:fb:36:61:bc:
e6:d8:87:69:4b:e3:cb:10:5f:68:5f:30:49:2d:1a:2d:50:b7:
d0:ec:64:2a:8f:a2:d5:34:ce:33:37:90:e8:04:54:0e:32:87:
97:be:02:df:62:0a:e4:67:c7:27:06:6e:3b:3f:58:78:b1:92:
a2:6d:1c:59:5b:be:08:9d:e5:95:d6:50:77:26:bb:17:50:b3:
be:25:80:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jBYML/WXTUnHL5i3QGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTMzM2QwZTgxMDc4ODZkMDMwNWM3YmQ4MWJkZDM1NDg5
NTI3YWUwHhcNMjUwOTA3MDcwMDQ1WhcNMjUwOTA4MDcwMDQ1WjAzMTEwLwYDVQQD
EyhkOTRiNzc0MzMzMGUxYjM4M2RkMTNkMTlkMDUyMmNhOTc3NzdhZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YhxAugrLjNK5X99chce5UT5cICy
kjJ0vXdobY2mCISofgITNl3SbDVeBoDGBQqOsaUPR0pumBlyYs70bJykuFzxMyes
zvpJwzipiwV2IMGHsz58rPF0L0EDkJLe1N/Pf+ikDhZeyp8AOtiAEHqPgiONSlZc
5S13DQKec7ktvrVtCY4/aZOSvp6/fIbciOkUt1eMta1Lrd3f8h63MdDLCNFYEBpJ
zW7iLUIZt/Kxq7vdPA8FzTGj2zWXiqD1LBMHbCdM5Lr1MuBuKQmOKO2z5rpi/OUV
iT9pnjxVLPKZpTip9pchAF9USzovUCmP2Dk8dTazAUyA2huD9lOmo9Kp6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlLd0MzDhs4PdE9GdBSLKl3d62UMB8GA1UdIwQY
MBaAFMYTM9DoEHiG0DBce9gb3TVIlSeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEt
OGVjNWYwZWVhMDQ1LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEtOGVjNWYwZWVhMDQ1
LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqI4p7WtS
EFUPsJHg+L03Qe8PFWGm0lHLw6ddUG1P3Z6+Z7NZHpX21HXn7OHQC3JrJyWWBLKi
iIB9JvySDbWgrX53IG0vE84JMBx8yEONtDKrV/Uypk6CLZ5MuBY16xT1fnG1if9o
E3RzWQgNX1lYN8k/IdhG3wgc2kyB4CgTocGa+7DgHlttyp/Df8g1XdtCO13jnqd7
CNbDAVzCr2cFtZmlljSKpcgWRLPnxOyVUeX7NmG85tiHaUvjyxBfaF8wSS0aLVC3
0OxkKo+i1TTOMzeQ6ARUDjKHl74C32IK5GfHJwZuOz9YeLGSom0cWVu+CJ3lldZQ
dya7F1CzviWABQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:50 2025 by rpki-client