Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: aD9FyYXdnc6sfIt5cw6TsiypPC5uYdqc/69ofgR1Tfg=
Subject key identifier: 91:F9:E9:8C:FD:F7:90:C6:FC:A0:83:9D:5B:9F:29:6C:30:46:8E:10
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 0198D7E1103E996F1763E6278CCF67906AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 17:01:47 +0000
Manifest this update: Sat 23 Aug 2025 17:01:47 +0000
Manifest next update: Sun 24 Aug 2025 17:01:47 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: tEt0ppQPi/2+6Dzu4AYgswDfemCJv6zpriwodwLt0f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:10:3e:99:6f:17:63:e6:27:8c:cf:67:90:6a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Aug 23 17:01:47 2025 GMT
Not After : Aug 24 17:01:47 2025 GMT
Subject: CN=91f9e98cfdf790c6fca0839d5b9f296c30468e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:34:49:2e:a7:71:b8:20:1c:af:de:1a:d9:
12:ea:2a:8a:0e:c0:ab:c6:f2:8e:f0:ba:e7:f2:c4:
de:61:23:54:86:46:4d:b5:2b:c8:4b:90:7a:a3:09:
3c:75:9b:da:9e:b7:9d:90:1c:cf:63:fa:49:96:4b:
3e:19:1c:f8:9c:64:1f:88:7e:b9:fc:61:fa:76:6a:
05:94:cd:3d:21:92:df:39:55:08:71:b2:24:e1:7a:
82:cc:07:da:20:98:dd:30:c8:06:c1:56:8b:30:24:
6d:23:12:31:f8:8a:eb:00:23:b1:e6:a0:55:9f:1d:
81:e4:96:98:09:e1:f9:4d:00:5c:4d:0b:f0:26:ae:
e5:67:d8:03:ae:42:7e:b9:72:13:2d:65:08:31:93:
b4:20:05:03:03:1c:c6:28:af:4e:14:58:d5:ab:b8:
44:57:50:c2:07:6f:c7:23:6e:72:f7:24:9f:89:5a:
33:5e:08:c8:c5:cd:e4:cd:8d:af:a9:2d:bc:af:ea:
e0:83:1f:b7:fe:36:a8:33:33:3f:9d:8e:87:d4:a8:
48:db:40:13:3c:c2:bd:b2:eb:c7:94:30:4a:d1:7e:
5a:c0:15:94:ef:d4:5d:c5:65:bc:6e:64:c3:40:83:
a8:cf:f6:92:a2:ef:d9:f6:ec:eb:de:3a:dd:82:20:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:E9:8C:FD:F7:90:C6:FC:A0:83:9D:5B:9F:29:6C:30:46:8E:10
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:03:ba:59:fc:08:b5:0a:08:8f:d8:fb:72:20:2d:c3:1e:4c:
2c:ed:ef:7c:f8:86:41:49:ba:2c:81:65:76:4e:53:d2:0e:33:
27:ca:11:54:2e:2c:b2:63:cc:49:d9:e0:f2:5a:15:e0:89:f3:
02:2e:71:ee:a1:7c:bc:12:b2:1f:64:b0:f9:6a:5a:25:69:25:
ba:c3:16:1d:69:4c:51:17:04:bb:f7:96:95:5b:37:08:74:af:
cb:1b:83:4a:40:d1:aa:be:5c:5a:23:3b:28:ca:2e:97:43:6f:
e0:68:59:82:1c:b0:40:c5:e4:0d:d5:da:b4:11:32:eb:7a:47:
04:5d:75:3d:2d:18:40:ca:5a:7f:02:5b:6b:bf:7d:dc:ad:5b:
b9:8b:55:15:a6:b3:0b:5d:bd:34:35:40:f3:67:f2:de:fe:5f:
8c:92:0f:0e:6c:05:c7:fa:e5:26:af:3f:dc:9a:12:8a:b2:ad:
4f:2e:fc:90:03:ea:d7:40:5e:a5:d1:71:26:bd:aa:81:22:e2:
56:16:1e:2c:a7:37:b9:1c:90:85:ad:e7:d8:44:c5:c7:bd:7d:
79:fb:cd:4b:ee:ce:c8:bc:9c:83:d2:26:43:d4:1b:b0:46:af:
28:29:45:a0:7b:46:0c:48:97:29:94:aa:ac:0d:70:26:1b:d2:
cd:72:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:26 2025 by rpki-client