Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: Bhzf7VMaW4xffTwFa87IP6VjPGqfv56LTNivqxZbqdg=
Subject key identifier: 2B:7A:B5:C0:B1:A5:B1:58:57:83:6D:4F:2E:B9:6C:F3:D4:60:4C:5B
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019931915E0FA0E1ABC4F8A2906573658E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 03:00:34 +0000
Manifest this update: Wed 10 Sep 2025 03:00:34 +0000
Manifest next update: Thu 11 Sep 2025 03:00:34 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: AoaC70iZY1gwAzTC8UMabVV7qE1vBO8MSNIlodHR6TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:5e:0f:a0:e1:ab:c4:f8:a2:90:65:73:65:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Sep 10 03:00:34 2025 GMT
Not After : Sep 11 03:00:34 2025 GMT
Subject: CN=2b7ab5c0b1a5b15857836d4f2eb96cf3d4604c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:03:06:e1:d5:d3:b4:77:1e:e3:e9:a4:73:
aa:36:45:0d:fa:7b:b1:67:1b:44:01:5e:cf:cc:e9:
c1:5a:80:8e:0a:4a:ba:d4:47:18:95:1b:cc:37:6a:
01:7e:f1:eb:60:aa:07:9b:b1:cf:a8:6c:7b:b6:90:
6f:e2:39:b4:9d:26:87:88:7f:92:b9:8c:6a:ce:7c:
0c:a4:e8:09:8a:8a:fd:3d:11:a0:23:1e:7e:76:e7:
23:2d:d2:a2:fd:73:af:1b:f8:17:54:66:e1:fb:22:
f3:13:96:c4:19:5a:ad:b2:6a:34:02:5e:5a:c2:50:
87:d1:80:5c:ae:59:57:02:5a:a1:3b:25:5e:4e:8e:
eb:e8:6c:21:6d:75:8e:07:6a:75:db:b4:f4:9a:42:
9e:e4:bb:6d:cf:38:8a:8e:ce:d7:a7:ce:38:8f:a4:
18:67:9f:26:1d:8e:ca:15:09:04:c3:14:1f:28:6b:
28:0d:8d:37:e0:a4:75:38:b8:c7:d9:b5:ee:17:d9:
a3:ae:d7:88:c1:2e:6a:0b:51:34:03:cf:01:00:e8:
89:1a:99:55:7a:07:39:6b:41:d8:ba:94:3f:09:3a:
ad:62:6a:a1:38:f5:fa:d9:fc:6b:53:55:84:65:69:
97:2a:12:d5:b4:02:ea:ea:4e:3b:a1:4b:bb:15:c2:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:B5:C0:B1:A5:B1:58:57:83:6D:4F:2E:B9:6C:F3:D4:60:4C:5B
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:22:6e:f9:e3:ea:65:c7:c2:26:e9:19:cc:d3:af:93:94:50:
43:04:39:96:57:9a:6d:f0:e9:22:d6:7e:a9:ca:c7:ca:b4:3d:
09:5a:1d:07:83:ca:94:79:71:a8:28:3a:10:fd:8e:9f:58:ed:
11:67:89:6d:3a:82:22:08:13:aa:17:61:91:fe:0e:a8:5b:6c:
40:ba:43:32:6e:c1:ca:0b:4e:57:df:0a:e0:d2:ac:0c:ac:d0:
99:74:e6:68:b6:62:75:ec:27:5a:4c:04:5a:48:0c:5c:67:cd:
0e:3d:32:ae:51:41:0b:47:2d:24:da:25:7f:fe:8b:b4:ec:eb:
63:1b:1c:35:f5:66:b5:94:80:50:2c:ae:45:1f:ef:30:4b:8f:
fd:27:69:78:51:a2:58:cb:22:24:30:97:8b:1b:c5:1d:4e:d9:
bf:6f:e3:b0:88:fa:d7:93:f8:80:d0:25:53:2e:2e:1f:77:c9:
f4:99:a4:1c:ee:c4:10:8d:1d:13:66:be:5f:f3:70:dc:29:35:
0a:ca:38:07:28:ce:8a:08:5c:11:0a:86:ba:1e:5c:0f:71:4a:
aa:18:d8:21:e2:d8:e4:82:9b:e5:8e:5f:bd:6b:c9:7e:3b:9d:
ea:57:31:7c:dc:7f:e8:f1:fa:ba:d1:ad:62:a3:44:6d:d6:81:
e7:63:78:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxkV4PoOGrxPiikGVzZY5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjUwOTEwMDMwMDM0WhcNMjUwOTExMDMwMDM0WjAzMTEwLwYDVQQD
EygyYjdhYjVjMGIxYTViMTU4NTc4MzZkNGYyZWI5NmNmM2Q0NjA0YzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zUDBuHV07R3HuPppHOqNkUN+nux
ZxtEAV7PzOnBWoCOCkq61EcYlRvMN2oBfvHrYKoHm7HPqGx7tpBv4jm0nSaHiH+S
uYxqznwMpOgJior9PRGgIx5+ducjLdKi/XOvG/gXVGbh+yLzE5bEGVqtsmo0Al5a
wlCH0YBcrllXAlqhOyVeTo7r6GwhbXWOB2p127T0mkKe5LttzziKjs7Xp844j6QY
Z58mHY7KFQkEwxQfKGsoDY034KR1OLjH2bXuF9mjrteIwS5qC1E0A88BAOiJGplV
egc5a0HYupQ/CTqtYmqhOPX62fxrU1WEZWmXKhLVtALq6k47oUu7FcIIRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt6tcCxpbFYV4NtTy65bPPUYExbMB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyJu+ePq
ZcfCJukZzNOvk5RQQwQ5lleabfDpItZ+qcrHyrQ9CVodB4PKlHlxqCg6EP2On1jt
EWeJbTqCIggTqhdhkf4OqFtsQLpDMm7BygtOV98K4NKsDKzQmXTmaLZidewnWkwE
WkgMXGfNDj0yrlFBC0ctJNolf/6LtOzrYxscNfVmtZSAUCyuRR/vMEuP/SdpeFGi
WMsiJDCXixvFHU7Zv2/jsIj615P4gNAlUy4uH3fJ9JmkHO7EEI0dE2a+X/Nw3Ck1
Cso4ByjOighcEQqGuh5cD3FKqhjYIeLY5IKb5Y5fvWvJfjud6lcxfNx/6PH6utGt
YqNEbdaB52N4aQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 07:04:36 2025 by rpki-client