Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: oy5g3GKHo41FbsBa2tMwhpAvCrrMz0OFX4hEZwRYVoA=
Subject key identifier: 9E:F7:02:3C:2F:E2:E3:66:E8:C2:D8:B3:A6:2F:FD:24:9A:3C:B5:17
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01992F35A7BA205D7C20236F7B922403B838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 160C
Signing time: Tue 09 Sep 2025 16:01:09 +0000
Manifest this update: Tue 09 Sep 2025 16:01:09 +0000
Manifest next update: Wed 10 Sep 2025 16:01:09 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: YGyEbDiP9y3YUUyuPnxov9NZXfUn2dbFAyl1If6uh4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:a7:ba:20:5d:7c:20:23:6f:7b:92:24:03:b8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Sep 9 16:01:09 2025 GMT
Not After : Sep 10 16:01:09 2025 GMT
Subject: CN=9ef7023c2fe2e366e8c2d8b3a62ffd249a3cb517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:65:5d:f9:86:4a:9a:52:4a:5e:14:0d:44:
e6:8b:34:ad:f7:39:45:36:f1:68:ed:9b:e7:bb:6a:
4d:ca:c4:e6:8d:dd:39:a1:6a:23:be:eb:ca:f2:5e:
58:59:7c:35:23:b1:21:19:74:2f:7e:41:50:21:d2:
31:98:64:5a:ca:24:f1:d8:ac:ff:d0:ff:7e:eb:f7:
c7:50:4c:e3:e0:a5:57:78:11:33:27:f1:5d:7f:8d:
f7:a7:c1:20:5c:16:b0:80:01:1e:bc:a6:c2:ab:f3:
db:9f:c0:36:93:ce:c7:7a:02:98:ed:fe:61:ef:de:
7e:2c:5b:8a:d9:fb:24:67:ac:0f:12:b8:67:71:61:
59:0d:eb:57:a7:f7:a2:8e:5f:8b:84:e5:a5:40:ae:
a2:ec:75:d2:92:25:0d:d6:98:a5:d1:d0:85:1f:e7:
56:a0:28:78:04:de:08:72:a6:33:5e:fd:38:49:58:
cb:19:4d:dc:65:07:61:d9:f0:80:74:12:6f:76:70:
7c:cf:db:0b:08:45:c4:c8:ec:6d:fd:9a:83:06:1b:
2d:e9:f3:4d:9f:7e:35:e6:82:b2:61:1c:1c:a4:bd:
35:1c:54:0b:79:86:6e:dd:42:c2:cc:0c:fb:cf:2f:
6f:7d:49:14:c4:77:bf:a6:4f:8b:8d:e1:4d:fa:e4:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F7:02:3C:2F:E2:E3:66:E8:C2:D8:B3:A6:2F:FD:24:9A:3C:B5:17
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:34:66:d8:f0:91:2f:8a:c9:46:10:3c:37:74:63:64:3e:
8e:64:0c:5c:81:08:a2:83:7f:84:ad:96:00:72:95:73:f0:2b:
36:94:5d:c5:18:7f:c3:0b:67:44:04:db:a4:89:88:cd:97:2d:
75:a8:7f:fe:38:4c:1d:d6:e2:71:25:93:1f:e8:09:45:b0:56:
bd:9e:d9:22:3d:39:bd:86:b7:d1:8f:08:e9:1f:14:5e:df:ea:
a5:b9:7b:fc:70:9a:c7:49:b9:b6:83:6f:bc:2b:12:fb:19:e8:
36:ec:e7:ac:f2:0b:2d:62:e0:a0:9b:3b:f1:d6:a4:45:2f:29:
47:29:b6:e7:35:62:b1:8e:8d:ff:6a:95:4e:5f:0b:4d:88:87:
e2:bd:0f:45:52:32:68:8a:7b:8c:f6:8f:cc:4e:40:47:54:be:
ee:e9:75:23:6d:ed:78:93:ab:fa:f7:47:74:32:21:43:f6:4b:
9e:0a:fb:52:64:ac:01:ea:fb:e9:f4:98:1e:b3:e5:19:e0:37:
bf:dd:b2:81:f9:d4:b5:5b:03:83:7d:8e:11:a7:1a:5e:ad:1c:
42:a7:cd:a3:d5:fd:d9:15:81:d8:3c:b4:d3:68:e0:35:21:39:
3b:8f:8a:c2:19:83:22:f4:90:7d:2e:17:e1:6b:6e:80:a6:72:
56:dc:ed:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNae6IF18ICNve5IkA7g4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OGFmYTIyZjk4YTM3ZjZkOGQwMjkzYTliMzE5NDE2ZWM5
NGQzODYwHhcNMjUwOTA5MTYwMTA5WhcNMjUwOTEwMTYwMTA5WjAzMTEwLwYDVQQD
Eyg5ZWY3MDIzYzJmZTJlMzY2ZThjMmQ4YjNhNjJmZmQyNDlhM2NiNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MdlXfmGSppSSl4UDUTmizSt9zlF
NvFo7Zvnu2pNysTmjd05oWojvuvK8l5YWXw1I7EhGXQvfkFQIdIxmGRayiTx2Kz/
0P9+6/fHUEzj4KVXeBEzJ/Fdf433p8EgXBawgAEevKbCq/Pbn8A2k87HegKY7f5h
795+LFuK2fskZ6wPErhncWFZDetXp/eijl+LhOWlQK6i7HXSkiUN1pil0dCFH+dW
oCh4BN4IcqYzXv04SVjLGU3cZQdh2fCAdBJvdnB8z9sLCEXEyOxt/ZqDBhst6fNN
n3415oKyYRwcpL01HFQLeYZu3ULCzAz7zy9vfUkUxHe/pk+LjeFN+uQBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ73Ajwv4uNm6MLYs6Yv/SSaPLUXMB8GA1UdIwQY
MBaAFMWK+iL5ijf22NApOpsxlBbslNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEt
OTEyMjg2MjA1NzBlLzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEtOTEyMjg2MjA1NzBl
LzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTg0Ztjw
kS+KyUYQPDd0Y2Q+jmQMXIEIooN/hK2WAHKVc/ArNpRdxRh/wwtnRATbpImIzZct
dah//jhMHdbicSWTH+gJRbBWvZ7ZIj05vYa30Y8I6R8UXt/qpbl7/HCax0m5toNv
vCsS+xnoNuznrPILLWLgoJs78dakRS8pRym25zVisY6N/2qVTl8LTYiH4r0PRVIy
aIp7jPaPzE5AR1S+7ul1I23teJOr+vdHdDIhQ/ZLngr7UmSsAer76fSYHrPlGeA3
v92ygfnUtVsDg32OEacaXq0cQqfNo9X92RWB2Dy002jgNSE5O4+KwhmDIvSQfS4X
4WtugKZyVtztMQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:34:33 2025 by rpki-client