Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: hGy/G30YIXe1pQhMo0sRsYLWde7IBsF/WzWaijjAt3Y=
Subject key identifier: BC:7A:BD:1E:F7:64:CE:34:25:68:2B:6B:EB:18:D7:E8:1D:A8:8D:A6
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019923A06A23C3F9C70C43BE4CBEC08E648E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 0F2F
Signing time: Sun 07 Sep 2025 10:02:19 +0000
Manifest this update: Sun 07 Sep 2025 10:02:19 +0000
Manifest next update: Mon 08 Sep 2025 10:02:19 +0000
Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: OmvgPBm+ElhWi6WpLK7t3K9gX5O6MwGJwn2FyXhwKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6a:23:c3:f9:c7:0c:43:be:4c:be:c0:8e:64:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Sep 7 10:02:19 2025 GMT
Not After : Sep 8 10:02:19 2025 GMT
Subject: CN=bc7abd1ef764ce3425682b6beb18d7e81da88da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:2c:ff:d8:7d:1e:6f:09:48:24:70:de:9d:
59:62:8e:5e:71:78:b2:5f:b9:f4:15:e3:cc:4f:43:
76:9c:97:fb:55:ef:98:5f:c3:9d:83:ef:44:14:36:
20:3c:31:d8:1d:2e:f3:72:9b:5a:78:f0:53:fe:78:
51:88:69:63:1a:24:62:c9:7a:07:59:9c:fc:6e:36:
98:ec:f7:f5:46:e1:4f:b1:42:2e:cd:f5:c7:3b:14:
78:b9:9d:fc:f8:56:be:ef:38:1f:fe:48:49:17:6e:
14:2f:4f:14:d9:50:da:b6:40:82:49:16:0b:42:78:
7a:27:19:08:ea:df:f7:cb:ed:4c:0f:9f:8b:71:f3:
91:24:9e:a9:fa:c1:dd:25:ec:f8:08:5e:3e:4a:1a:
5d:f0:af:76:cc:7d:00:25:e5:2c:05:26:f7:ae:24:
15:ab:70:f6:7a:8e:88:55:48:f0:98:36:35:77:8c:
38:66:79:50:61:3c:56:c2:35:8c:7a:2f:a6:83:e7:
de:a1:d9:69:4f:04:de:a0:38:12:7e:14:5d:50:2a:
2a:5d:a9:4c:c9:73:47:1e:23:4a:11:a4:81:a6:03:
e2:a2:cf:28:bd:33:d8:65:98:27:3f:f6:6c:da:e0:
c3:0f:ef:81:a9:88:38:38:fe:39:9c:41:35:0b:ab:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:BD:1E:F7:64:CE:34:25:68:2B:6B:EB:18:D7:E8:1D:A8:8D:A6
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:f9:59:8b:ea:a6:57:e7:2b:7a:3e:91:47:ba:0f:e5:32:
8e:ef:93:da:db:18:56:5b:fc:0c:8c:41:fc:d0:5f:ef:c7:ac:
e7:98:0d:09:f6:b8:2f:43:f1:50:87:38:31:67:93:2b:01:2b:
a6:7d:a7:79:f0:b1:1b:92:ed:55:92:ed:cd:10:f8:33:1c:53:
e4:cf:72:1b:a7:48:45:cf:d8:8b:16:49:5b:19:4c:6b:72:75:
f7:cf:84:78:e7:56:93:3e:a8:34:d7:93:89:13:9e:21:52:d1:
1d:15:8b:a3:7a:32:40:83:9b:73:b0:11:29:41:ba:b7:0e:bd:
69:2e:29:da:fe:cf:f4:f5:2e:06:09:f9:12:b1:2b:37:c3:c4:
b6:a1:f7:e3:f2:cc:78:99:16:81:0f:80:08:f9:a7:30:cc:f5:
42:41:ca:92:1c:85:c4:7b:15:54:81:70:2d:dc:c6:d0:e4:03:
50:ee:e4:95:14:00:cd:82:b5:c0:62:ad:68:d3:0b:19:65:cf:
2a:25:a2:11:71:0b:07:60:ed:eb:b9:d9:41:15:82:47:98:4e:
7a:b9:08:01:4f:99:0e:6b:e1:07:dd:d1:60:af:d0:8a:a4:35:
e2:3d:50:8c:85:e8:5f:ff:83:19:2d:e3:e5:8d:48:84:f8:5a:
83:4c:b7:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoGojw/nHDEO+TL7AjmSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGYxNjJhZmE3YmZkN2I4NDdjMWRkMGViNGFlYmVhOTNj
NDY5Y2YwHhcNMjUwOTA3MTAwMjE5WhcNMjUwOTA4MTAwMjE5WjAzMTEwLwYDVQQD
EyhiYzdhYmQxZWY3NjRjZTM0MjU2ODJiNmJlYjE4ZDdlODFkYTg4ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ks/9h9Hm8JSCRw3p1ZYo5ecXiy
X7n0FePMT0N2nJf7Ve+YX8Odg+9EFDYgPDHYHS7zcptaePBT/nhRiGljGiRiyXoH
WZz8bjaY7Pf1RuFPsUIuzfXHOxR4uZ38+Fa+7zgf/khJF24UL08U2VDatkCCSRYL
Qnh6JxkI6t/3y+1MD5+LcfORJJ6p+sHdJez4CF4+Shpd8K92zH0AJeUsBSb3riQV
q3D2eo6IVUjwmDY1d4w4ZnlQYTxWwjWMei+mg+feodlpTwTeoDgSfhRdUCoqXalM
yXNHHiNKEaSBpgPios8ovTPYZZgnP/Zs2uDDD++BqYg4OP45nEE1C6tt6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx6vR73ZM40JWgra+sY1+gdqI2mMB8GA1UdIwQY
MBaAFF8PFir6e/17hHwd0OtK6+qTxGnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEt
Y2VlNGM1MTg3NzBkLzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEtY2VlNGM1MTg3NzBk
LzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqD5WYvq
plfnK3o+kUe6D+Uyju+T2tsYVlv8DIxB/NBf78es55gNCfa4L0PxUIc4MWeTKwEr
pn2nefCxG5LtVZLtzRD4MxxT5M9yG6dIRc/YixZJWxlMa3J198+EeOdWkz6oNNeT
iROeIVLRHRWLo3oyQIObc7ARKUG6tw69aS4p2v7P9PUuBgn5ErErN8PEtqH34/LM
eJkWgQ+ACPmnMMz1QkHKkhyFxHsVVIFwLdzG0OQDUO7klRQAzYK1wGKtaNMLGWXP
KiWiEXELB2Dt67nZQRWCR5hOerkIAU+ZDmvhB93RYK/QiqQ14j1QjIXoX/+DGS3j
5Y1IhPhag0y3rw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:06 2025 by rpki-client