Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: FngDMY5FhVwwC+dzPgqxWxRR9aUdpe+XqLGbtt2mnJk=
Subject key identifier: C5:4B:5B:9F:6C:7F:9B:D9:CB:E0:CB:90:7E:A4:30:11:2A:BD:B6:14
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019853446065E392A87093AD660238629C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:00:46 +0000
Manifest this update: Mon 28 Jul 2025 23:00:46 +0000
Manifest next update: Tue 29 Jul 2025 23:00:46 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: SvSg/vMRyZ8Q8P5bgmsgnPmdbYWBcy2oXaVyetSsENY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:60:65:e3:92:a8:70:93:ad:66:02:38:62:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jul 28 23:00:46 2025 GMT
Not After : Jul 29 23:00:46 2025 GMT
Subject: CN=c54b5b9f6c7f9bd9cbe0cb907ea430112abdb614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:06:56:dd:ee:14:69:6b:51:9f:b9:19:b7:
8e:14:14:48:b2:4a:c7:03:2a:8f:50:3c:6d:f1:98:
7a:f8:50:ff:81:90:a8:bf:a9:83:7f:8f:3a:8e:45:
34:28:78:c0:0a:03:2e:5e:c6:10:71:0c:3d:ce:8e:
1e:26:ca:f0:29:65:96:70:37:f0:74:fb:20:9c:6b:
9d:cd:9a:39:de:31:75:c4:fe:b4:5e:02:38:02:eb:
b0:0b:71:ea:81:2f:e0:87:43:2d:50:89:ad:37:ac:
1e:71:3e:f8:fd:4b:08:c8:c0:37:98:3b:48:f9:15:
a6:fd:a4:a2:ed:2d:76:24:dd:dc:0f:4d:85:5c:47:
5e:88:0f:9a:15:be:5f:7e:fe:c8:83:7d:41:ff:0c:
3e:14:eb:a3:de:81:a6:43:e7:7e:a4:49:ff:13:7c:
4e:e4:2a:96:61:39:13:67:ef:93:22:ac:34:32:cb:
af:b8:d1:2e:5a:46:8e:d9:82:4b:83:07:90:40:2b:
d4:cb:86:1d:b8:bc:c0:94:8c:98:62:eb:42:5e:62:
ab:67:5c:44:65:3d:c8:22:69:21:02:4b:f7:03:a9:
e9:ce:aa:8d:90:bc:c8:30:73:8b:12:53:b4:2c:58:
fa:66:b6:b6:27:b0:fa:4e:13:e6:1a:b1:0c:8b:2f:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:5B:9F:6C:7F:9B:D9:CB:E0:CB:90:7E:A4:30:11:2A:BD:B6:14
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:96:db:9c:fc:e3:a5:64:4c:82:54:c6:15:70:4c:1f:89:86:
ec:ef:97:e3:b0:18:a7:f1:5d:01:a2:a9:9e:1b:34:58:95:d7:
3e:2d:03:78:45:60:d7:95:f8:05:b2:c1:91:bb:dd:1b:7a:59:
7d:6d:34:6c:c7:01:8f:22:e8:21:df:c3:64:ef:de:05:de:ef:
9a:4d:6c:d2:b2:8f:6b:dc:16:52:e0:82:70:59:5c:d9:7c:59:
bc:72:ee:70:eb:03:5e:e2:7b:45:6b:2a:3b:33:01:ab:e6:a9:
53:63:c3:ac:f4:75:3b:26:2e:d4:f1:db:0f:a5:c9:ea:88:6c:
cb:15:21:51:33:8e:ce:d1:6b:9f:1a:f0:11:1e:3d:2d:6e:7e:
20:34:f4:ab:4f:0a:4f:fe:37:e9:b9:6e:ae:83:36:d8:e5:40:
60:e9:6d:85:6b:48:f4:44:82:4b:4f:e3:6b:2a:64:14:cd:76:
d5:aa:e1:4c:c6:21:11:21:c3:e0:66:53:eb:e7:41:31:10:23:
1b:c5:d9:38:c3:41:d5:21:ef:b9:15:93:6a:3a:92:a8:c8:77:
41:8c:b6:55:22:b5:a2:29:7d:b0:1a:d3:cb:33:5c:15:3e:01:
f9:b1:99:8f:cf:6b:ff:5d:23:05:90:57:2d:99:62:31:e8:1b:
e2:be:3e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRGBl45KocJOtZgI4YpyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjZmMDdiMTczMzYwZjIxNWYxNTE4Yzg3MTJhNGIwNTRk
ODVjMDcwHhcNMjUwNzI4MjMwMDQ2WhcNMjUwNzI5MjMwMDQ2WjAzMTEwLwYDVQQD
EyhjNTRiNWI5ZjZjN2Y5YmQ5Y2JlMGNiOTA3ZWE0MzAxMTJhYmRiNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbgGVt3uFGlrUZ+5GbeOFBRIskrH
AyqPUDxt8Zh6+FD/gZCov6mDf486jkU0KHjACgMuXsYQcQw9zo4eJsrwKWWWcDfw
dPsgnGudzZo53jF1xP60XgI4AuuwC3HqgS/gh0MtUImtN6wecT74/UsIyMA3mDtI
+RWm/aSi7S12JN3cD02FXEdeiA+aFb5ffv7Ig31B/ww+FOuj3oGmQ+d+pEn/E3xO
5CqWYTkTZ++TIqw0MsuvuNEuWkaO2YJLgweQQCvUy4YduLzAlIyYYutCXmKrZ1xE
ZT3IImkhAkv3A6npzqqNkLzIMHOLElO0LFj6Zra2J7D6ThPmGrEMiy/AdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVLW59sf5vZy+DLkH6kMBEqvbYUMB8GA1UdIwQY
MBaAFMa28HsXM2DyFfFRjIcSpLBU2FwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTct
MjhkOTRmY2IxMDg4LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTctMjhkOTRmY2IxMDg4
LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA35bbnPzj
pWRMglTGFXBMH4mG7O+X47AYp/FdAaKpnhs0WJXXPi0DeEVg15X4BbLBkbvdG3pZ
fW00bMcBjyLoId/DZO/eBd7vmk1s0rKPa9wWUuCCcFlc2XxZvHLucOsDXuJ7RWsq
OzMBq+apU2PDrPR1OyYu1PHbD6XJ6ohsyxUhUTOOztFrnxrwER49LW5+IDT0q08K
T/436bluroM22OVAYOlthWtI9ESCS0/jaypkFM121arhTMYhESHD4GZT6+dBMRAj
G8XZOMNB1SHvuRWTajqSqMh3QYy2VSK1oil9sBrTyzNcFT4B+bGZj89r/10jBZBX
LZliMegb4r4+bA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:00 2025 by rpki-client