Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: NZIld3ofsn/nykthHJ63Rvzuzrri1TgPkCV/oaDdkCs=
Subject key identifier: 8B:0B:88:EF:86:5C:51:5D:17:34:D4:F1:05:2D:95:12:EC:16:1C:39
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 0199228CEB0B909117C0288CD20018E3E1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0CF3
Signing time: Sun 07 Sep 2025 05:01:24 +0000
Manifest this update: Sun 07 Sep 2025 05:01:24 +0000
Manifest next update: Mon 08 Sep 2025 05:01:24 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: udW75MHmvk0VyldHrLpOGA7UK+HJfZtUlTh9n39YTSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:eb:0b:90:91:17:c0:28:8c:d2:00:18:e3:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Sep 7 05:01:24 2025 GMT
Not After : Sep 8 05:01:24 2025 GMT
Subject: CN=8b0b88ef865c515d1734d4f1052d9512ec161c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:20:26:0e:61:9f:0f:e3:2f:db:a4:cc:f7:
1b:01:88:3c:3b:b2:db:f2:ea:6b:6a:c4:e9:d9:70:
e3:bc:0f:14:26:9a:67:56:1d:4f:13:6e:50:df:7f:
6b:77:6b:0f:b1:9a:b1:31:6f:8c:a7:47:b0:ac:e4:
eb:12:29:1d:73:4d:8f:91:38:7e:a6:4a:62:37:50:
e3:f7:d7:b6:d9:50:b6:02:7e:58:24:cb:28:f4:0b:
cd:cf:87:08:e8:6b:38:fa:50:58:2d:12:f0:2f:42:
d7:ad:f9:d7:01:27:7f:cd:cf:9c:bb:45:b3:5d:46:
84:09:6e:ef:10:d8:98:5e:80:cc:60:b4:ee:1f:da:
00:61:cb:ff:e3:ac:02:3a:de:c7:48:86:21:e2:83:
ee:2d:b9:0b:eb:7b:8e:26:d8:bc:30:c8:06:67:8a:
46:0f:88:8f:7d:66:6c:d2:53:2c:04:3c:0a:ab:06:
56:10:9f:59:7b:97:45:f5:ce:72:2f:8a:ff:c9:b3:
b1:a1:0f:06:6b:13:1d:03:af:f2:93:dd:bb:f6:fd:
ee:c9:26:55:4e:ee:6f:02:38:71:cc:28:ee:5d:34:
80:50:24:ec:bf:c9:25:a8:b1:02:15:28:01:5f:00:
a8:1a:ad:0e:b5:42:a1:14:ea:77:e5:c8:15:84:8f:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:88:EF:86:5C:51:5D:17:34:D4:F1:05:2D:95:12:EC:16:1C:39
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4f:5b:51:62:4c:a1:ab:2d:19:04:83:13:9e:4f:e3:df:fe:
88:36:b8:de:56:f2:f8:a1:51:c6:d7:65:db:5e:f8:c4:8f:8e:
8c:73:25:f7:13:ed:c6:c6:5e:4b:3b:e3:23:74:3e:20:f8:8c:
17:3d:d1:d0:51:0b:6a:15:4d:b9:d6:47:06:44:8a:d7:d2:48:
62:1d:c8:10:cb:b1:47:7a:33:04:d9:52:4a:98:dc:34:04:d4:
e4:59:5e:cf:6e:11:61:fb:38:27:87:55:ac:ee:ab:e3:a3:45:
96:f0:75:9d:1a:e4:a6:02:97:86:d5:6c:10:d4:9f:3f:39:49:
53:72:1d:5b:a2:52:6a:34:b5:45:11:7b:f1:59:a1:a7:71:1d:
b7:61:9e:bf:6a:81:a5:82:1c:48:73:b1:24:89:32:a7:54:d4:
b8:eb:8d:db:96:ed:e8:2d:3a:20:98:5a:78:7b:3b:38:ad:95:
c4:3b:af:3a:e4:62:5c:66:c9:aa:31:7c:7d:52:52:cb:55:7c:
d9:06:c6:51:54:c3:ec:1a:24:ac:6a:d4:cb:91:93:d1:f9:03:
99:ff:b8:1e:25:08:63:24:d7:be:7b:01:cc:69:a7:0d:18:26:
96:ea:8f:87:f0:14:93:3b:18:37:ef:90:85:1f:ae:15:1d:75:
78:58:57:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijOsLkJEXwCiM0gAY4+HVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj
YjdlZjkwHhcNMjUwOTA3MDUwMTI0WhcNMjUwOTA4MDUwMTI0WjAzMTEwLwYDVQQD
Eyg4YjBiODhlZjg2NWM1MTVkMTczNGQ0ZjEwNTJkOTUxMmVjMTYxYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwEgJg5hnw/jL9ukzPcbAYg8O7Lb
8uprasTp2XDjvA8UJppnVh1PE25Q339rd2sPsZqxMW+Mp0ewrOTrEikdc02PkTh+
pkpiN1Dj99e22VC2An5YJMso9AvNz4cI6Gs4+lBYLRLwL0LXrfnXASd/zc+cu0Wz
XUaECW7vENiYXoDMYLTuH9oAYcv/46wCOt7HSIYh4oPuLbkL63uOJti8MMgGZ4pG
D4iPfWZs0lMsBDwKqwZWEJ9Ze5dF9c5yL4r/ybOxoQ8GaxMdA6/yk9279v3uySZV
Tu5vAjhxzCjuXTSAUCTsv8klqLECFSgBXwCoGq0OtUKhFOp35cgVhI83QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsLiO+GXFFdFzTU8QUtlRLsFhw5MB8GA1UdIwQY
MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt
MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk
LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ09bUWJM
oastGQSDE55P49/+iDa43lby+KFRxtdl2174xI+OjHMl9xPtxsZeSzvjI3Q+IPiM
Fz3R0FELahVNudZHBkSK19JIYh3IEMuxR3ozBNlSSpjcNATU5Flez24RYfs4J4dV
rO6r46NFlvB1nRrkpgKXhtVsENSfPzlJU3IdW6JSajS1RRF78Vmhp3Edt2Gev2qB
pYIcSHOxJIkyp1TUuOuN25bt6C06IJhaeHs7OK2VxDuvOuRiXGbJqjF8fVJSy1V8
2QbGUVTD7BokrGrUy5GT0fkDmf+4HiUIYyTXvnsBzGmnDRgmluqPh/AUkzsYN++Q
hR+uFR11eFhXlA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:40 2025 by rpki-client