Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: OYu7TfiCTo76d9IlstivBRXdAj1DBTGJ2+rFvfAr9rY=
Subject key identifier: 95:95:9D:3D:DB:C0:4A:96:A1:77:78:93:80:19:1F:1A:B1:D4:86:27
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019931C8B2144A694839A45EE86D9609E19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 168A
Signing time: Wed 10 Sep 2025 04:01:00 +0000
Manifest this update: Wed 10 Sep 2025 04:01:00 +0000
Manifest next update: Thu 11 Sep 2025 04:01:00 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: exq4u1SZfA7x1zIrKqzjzge4W3E.roa (hash: 6hKC5aSxn1eYqBHCVJ0qgpvsfeNY0GeupedGw9IKcyA=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: cvqrCrbwkQuJEmw27oK7QPVHOeRE0zM+DjZahxCyrJ4=)
4: zIANn_XjTHpNl_tFmNq6MbPyZNE.roa (hash: b1/JePGfEJmKChck6onI1sptZi1SnAwXlnetMtXFNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:b2:14:4a:69:48:39:a4:5e:e8:6d:96:09:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Sep 10 04:01:00 2025 GMT
Not After : Sep 11 04:01:00 2025 GMT
Subject: CN=95959d3ddbc04a96a177789380191f1ab1d48627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:76:a0:bf:8b:c4:6d:1c:66:63:47:1d:5e:d8:
fe:7f:e5:04:41:d5:71:4f:98:d8:fb:96:f2:56:91:
20:1b:97:8f:8f:3e:3d:f4:fc:ab:ac:d3:78:1d:86:
42:7d:e6:b8:d2:57:84:b2:04:ef:b8:e3:a7:ff:e9:
7d:01:a0:82:7e:23:ca:3d:8d:78:52:09:2f:2a:78:
59:69:dd:d3:d2:63:3a:b4:55:aa:a8:27:b0:e1:ba:
60:c6:01:c8:31:e9:ca:52:09:c5:a1:4c:36:72:87:
72:8b:ac:bd:60:96:8e:93:e4:9c:f8:79:3c:8b:93:
e6:4f:1f:ce:e0:34:cd:7c:42:1a:b8:9f:6b:55:3e:
ac:3a:7f:e1:ee:c4:63:8a:71:ac:df:22:9c:31:d0:
1f:92:a9:b6:46:99:b2:2c:86:e8:26:d8:88:03:b9:
f9:20:57:b9:58:89:84:7b:38:88:1b:3f:de:10:4a:
40:cd:af:0d:c8:03:0f:4d:ca:3b:c1:b1:7f:9f:33:
87:03:f0:88:71:ff:d0:e9:54:38:d5:b3:6e:e9:f5:
a1:a2:5d:0a:e4:d4:ee:15:b6:62:b5:bf:05:8a:ee:
dd:25:84:75:4d:2e:1f:e5:b2:b2:96:24:96:bc:7e:
8a:1f:d4:db:47:8a:57:92:7e:4a:a0:85:3b:7c:24:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:9D:3D:DB:C0:4A:96:A1:77:78:93:80:19:1F:1A:B1:D4:86:27
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:20:03:89:32:de:8b:30:68:73:ea:87:94:a9:6a:43:83:
6f:a7:f6:18:de:47:83:c7:b9:f2:1d:c9:b1:61:43:4e:8b:db:
bb:b4:f5:de:32:ea:44:09:ec:73:96:d5:c1:60:3e:0a:03:04:
a6:e6:b2:a1:ab:cc:48:32:ac:ad:e9:4e:32:32:11:ff:de:3a:
7b:8f:fe:de:dd:fd:95:3e:7d:1b:64:8b:8a:4a:00:71:d9:d4:
87:6c:2e:60:b1:0d:70:65:fa:e7:11:02:0c:cd:de:23:fc:91:
33:5b:6a:02:10:76:c4:9e:31:4b:92:8d:f0:36:9b:a4:3a:e3:
b2:94:d7:c8:0b:e0:dc:ba:de:52:d7:bb:58:40:ea:e9:53:c1:
8f:80:43:4d:7a:4e:71:f3:9b:27:7f:2a:1e:f4:0f:98:e5:74:
86:62:6c:47:bb:93:6b:5f:f4:c7:77:b7:73:cb:d0:b3:5b:82:
9d:d5:fe:16:2a:8f:66:97:e5:36:cc:d6:8a:d9:36:e5:49:4d:
fe:a7:46:24:47:8a:84:d4:95:e6:e5:2f:f8:73:72:7f:13:06:
ae:2e:15:ea:11:5c:db:0e:07:76:30:31:0c:00:0d:29:28:76:
26:1b:24:8e:49:3f:45:7f:be:0f:28:36:56:34:d3:98:97:93:
e0:34:47:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyLIUSmlIOaRe6G2WCeGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh
Y2VjNmUwHhcNMjUwOTEwMDQwMTAwWhcNMjUwOTExMDQwMTAwWjAzMTEwLwYDVQQD
Eyg5NTk1OWQzZGRiYzA0YTk2YTE3Nzc4OTM4MDE5MWYxYWIxZDQ4NjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63agv4vEbRxmY0cdXtj+f+UEQdVx
T5jY+5byVpEgG5ePjz499PyrrNN4HYZCfea40leEsgTvuOOn/+l9AaCCfiPKPY14
UgkvKnhZad3T0mM6tFWqqCew4bpgxgHIMenKUgnFoUw2codyi6y9YJaOk+Sc+Hk8
i5PmTx/O4DTNfEIauJ9rVT6sOn/h7sRjinGs3yKcMdAfkqm2RpmyLIboJtiIA7n5
IFe5WImEeziIGz/eEEpAza8NyAMPTco7wbF/nzOHA/CIcf/Q6VQ41bNu6fWhol0K
5NTuFbZitb8Fiu7dJYR1TS4f5bKyliSWvH6KH9TbR4pXkn5KoIU7fCQp1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWVnT3bwEqWoXd4k4AZHxqx1IYnMB8GA1UdIwQY
MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt
YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy
LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVAgA4ky
3oswaHPqh5SpakODb6f2GN5Hg8e58h3JsWFDTovbu7T13jLqRAnsc5bVwWA+CgME
puayoavMSDKsrelOMjIR/946e4/+3t39lT59G2SLikoAcdnUh2wuYLENcGX65xEC
DM3eI/yRM1tqAhB2xJ4xS5KN8DabpDrjspTXyAvg3LreUte7WEDq6VPBj4BDTXpO
cfObJ38qHvQPmOV0hmJsR7uTa1/0x3e3c8vQs1uCndX+FiqPZpflNszWitk25UlN
/qdGJEeKhNSV5uUv+HNyfxMGri4V6hFc2w4HdjAxDAANKSh2Jhskjkk/RX++Dyg2
VjTTmJeT4DRHbg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:30:56 2025 by rpki-client