Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: hypC5mWY3f96X/aTVR5NrRPjLhv2RztV8dkghvQ9Z4c=
Subject key identifier: 3A:53:9C:D8:45:AD:8C:95:67:9F:EE:A3:32:4F:25:FE:24:E5:61:B1
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0199375C83F8340201CAF93562CE7921F8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 06:00:33 +0000
Manifest this update: Thu 11 Sep 2025 06:00:33 +0000
Manifest next update: Fri 12 Sep 2025 06:00:33 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: j+NbAGeQ0el2mQwgjtgMth6krWuXh7oivkvVA9Sdabo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:83:f8:34:02:01:ca:f9:35:62:ce:79:21:f8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Sep 11 06:00:33 2025 GMT
Not After : Sep 12 06:00:33 2025 GMT
Subject: CN=3a539cd845ad8c95679feea3324f25fe24e561b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:29:1c:e8:67:fb:7e:cf:96:ad:6f:ef:2c:
e8:de:93:b3:59:0b:bd:0a:76:5b:c2:44:0c:bc:31:
8b:41:b0:ad:02:44:3b:9f:02:12:32:aa:3d:83:07:
a5:9e:7a:66:cd:99:45:6d:c1:05:5b:4b:47:6f:d3:
8c:e9:23:a9:7b:5e:ba:a2:60:7f:8c:f6:ae:89:0a:
00:08:e2:77:34:dd:eb:2b:e2:18:26:1e:28:bd:1e:
80:69:f1:6c:80:73:ea:0e:12:8d:de:65:45:3a:fa:
3a:ee:55:d1:86:14:53:66:bc:7b:72:f6:75:ab:e8:
86:ec:b9:da:c0:96:a2:b4:aa:73:31:3f:16:80:a6:
3e:a2:f2:73:8e:83:88:10:fd:20:ba:65:86:0a:b8:
32:d7:e2:d3:14:01:57:d4:3c:4d:5c:ce:a8:53:50:
9f:d6:df:0c:14:2d:f1:96:62:1e:1e:7a:26:f3:a1:
ea:ae:b7:fe:a5:95:39:45:3b:1e:38:0e:5f:9e:18:
cd:25:84:00:c6:31:90:04:b4:80:15:38:04:77:53:
f4:8c:fd:1d:f8:0a:ee:7c:ac:cd:97:fe:48:9a:f7:
ec:d8:27:6a:0f:61:a3:41:a5:ce:2b:3a:d7:a0:d0:
a7:71:14:c3:4e:c8:4d:41:3a:61:0e:22:f5:e6:86:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:9C:D8:45:AD:8C:95:67:9F:EE:A3:32:4F:25:FE:24:E5:61:B1
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:46:94:12:36:4b:ca:ee:4f:44:b4:94:0c:35:b8:10:93:68:
3e:fa:1c:6f:df:3c:38:8a:31:6a:f2:25:92:92:f9:63:71:fb:
18:e0:03:33:20:7e:b6:35:cc:fd:a7:67:f4:b6:b4:97:2d:f9:
05:fb:e2:02:66:fb:16:c2:fd:be:b5:33:fe:d7:93:b4:9b:2b:
1c:4a:a9:35:a8:a3:45:3d:7c:ee:88:60:bd:56:1c:47:ff:ca:
52:e3:13:8b:e3:bf:a4:90:a8:64:e1:d6:81:02:27:0f:74:d0:
85:b6:57:05:33:29:6f:8d:af:84:5c:e4:09:65:b0:bc:08:6c:
25:c2:d7:8b:da:40:27:d9:ce:fd:b9:bb:d3:3c:03:f7:6a:b5:
f1:85:53:98:22:8b:dc:d3:50:f7:b3:cc:47:ae:26:a1:16:ef:
d2:82:09:e4:38:7d:e6:f4:51:65:6e:1a:20:2d:b4:74:20:8c:
5f:6d:3b:21:b6:cd:5d:0e:ac:78:31:41:45:04:88:ba:c7:31:
f2:ae:b3:06:c3:bb:ab:2b:2b:04:20:af:1a:f9:a1:8f:37:84:
28:8f:7b:3c:d4:da:1b:fe:8b:50:c5:ea:8f:f6:e2:15:58:06:
3e:44:e0:7c:c9:c5:0e:1c:51:60:50:46:3f:22:0b:be:b0:fb:
1f:6c:f4:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XIP4NAIByvk1Ys55IfjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjUwOTExMDYwMDMzWhcNMjUwOTEyMDYwMDMzWjAzMTEwLwYDVQQD
EygzYTUzOWNkODQ1YWQ4Yzk1Njc5ZmVlYTMzMjRmMjVmZTI0ZTU2MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshEpHOhn+37Plq1v7yzo3pOzWQu9
CnZbwkQMvDGLQbCtAkQ7nwISMqo9gwelnnpmzZlFbcEFW0tHb9OM6SOpe166omB/
jPauiQoACOJ3NN3rK+IYJh4ovR6AafFsgHPqDhKN3mVFOvo67lXRhhRTZrx7cvZ1
q+iG7LnawJaitKpzMT8WgKY+ovJzjoOIEP0gumWGCrgy1+LTFAFX1DxNXM6oU1Cf
1t8MFC3xlmIeHnom86Hqrrf+pZU5RTseOA5fnhjNJYQAxjGQBLSAFTgEd1P0jP0d
+ArufKzNl/5Imvfs2CdqD2GjQaXOKzrXoNCncRTDTshNQTphDiL15obtXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpTnNhFrYyVZ5/uozJPJf4k5WGxMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakaUEjZL
yu5PRLSUDDW4EJNoPvocb988OIoxavIlkpL5Y3H7GOADMyB+tjXM/adn9La0ly35
BfviAmb7FsL9vrUz/teTtJsrHEqpNaijRT187ohgvVYcR//KUuMTi+O/pJCoZOHW
gQInD3TQhbZXBTMpb42vhFzkCWWwvAhsJcLXi9pAJ9nO/bm70zwD92q18YVTmCKL
3NNQ97PMR64moRbv0oIJ5Dh95vRRZW4aIC20dCCMX207IbbNXQ6seDFBRQSIuscx
8q6zBsO7qysrBCCvGvmhjzeEKI97PNTaG/6LUMXqj/biFVgGPkTgfMnFDhxRYFBG
PyILvrD7H2z02Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:35:10 2025 by rpki-client