Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: LMZjt+n4YWBoFz/cCJ3x+TcKuvjSvR1odYYlhcRJIh8=
Subject key identifier: 0D:8E:88:EE:DB:A0:16:E7:E7:04:A1:20:07:3B:95:E9:92:0D:36:77
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 0198D8BCFA9D07D125FF8510A0E812550EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 21:02:00 +0000
Manifest this update: Sat 23 Aug 2025 21:02:00 +0000
Manifest next update: Sun 24 Aug 2025 21:02:00 +0000
Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: Ms46mfIAriGu61ljPEB6EO5TfZzbqbDDcPoP9fRuNyM=)
3: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:fa:9d:07:d1:25:ff:85:10:a0:e8:12:55:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Aug 23 21:02:00 2025 GMT
Not After : Aug 24 21:02:00 2025 GMT
Subject: CN=0d8e88eedba016e7e704a120073b95e9920d3677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:fd:a7:0b:ec:e4:6c:9f:47:df:7c:ae:9f:
26:d5:71:f0:bc:a0:ba:f2:71:51:c5:8c:bc:42:34:
c9:f2:1e:0b:5a:38:12:70:12:05:d0:76:32:9a:ce:
07:4e:f6:30:9a:e5:6b:30:74:73:03:77:68:b7:87:
56:91:d6:95:74:ac:1c:a6:44:e7:0b:6e:6c:5e:eb:
3d:c6:8b:5e:bf:cc:27:fa:b0:18:f4:08:d2:1b:b8:
39:6f:99:4a:3d:52:82:64:b6:c2:94:b9:d4:80:c5:
0a:f4:61:24:9f:73:c0:f7:67:40:84:69:30:2e:d6:
a3:f6:8e:85:3c:0c:98:aa:34:2e:1a:86:f3:11:6b:
2d:47:27:e6:91:ef:c4:8e:e4:cc:87:61:41:44:f0:
2a:c7:21:a4:a7:6f:3f:08:42:6b:b0:2d:d7:8d:3c:
2b:ef:20:d9:93:da:4f:0f:c5:60:a1:5a:ef:47:0b:
70:29:bd:66:c0:3b:b1:ca:c6:7c:dc:0b:72:f7:c6:
ff:96:c9:a9:61:da:d8:46:6e:ea:65:d3:c4:b4:c7:
be:ed:c5:39:e9:2e:9f:8c:6e:d6:e8:da:13:dd:10:
d5:37:29:d8:13:c5:93:61:82:79:83:c4:5b:26:ea:
6b:a3:37:d8:5d:76:a8:a5:c0:49:3e:a7:e7:4c:81:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:88:EE:DB:A0:16:E7:E7:04:A1:20:07:3B:95:E9:92:0D:36:77
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:57:45:e3:71:47:2e:d7:7a:a2:f2:9d:80:62:b6:3e:a7:
1e:5f:50:c1:b6:68:8f:e4:45:7b:92:ed:14:0b:6f:97:ad:f0:
bf:e4:d3:5f:5c:ab:f4:68:9c:e9:52:a0:fe:b5:39:b6:e2:21:
32:08:10:b2:5a:9f:43:09:bc:fb:f5:77:3c:c2:f0:20:38:a9:
9c:70:10:f3:37:df:0b:9a:5d:be:79:6d:68:91:5e:fd:4c:2b:
d8:7c:d8:3b:c2:33:6d:1b:c5:45:0d:59:6b:39:4f:dd:85:86:
26:5c:d7:63:a4:82:36:be:e7:e1:40:e0:30:4d:c6:ab:3d:8c:
36:20:4a:f0:20:1d:c9:ed:0e:53:b0:b7:68:45:5c:fe:ee:71:
44:7c:04:13:4a:54:8e:f0:26:e6:29:dd:04:74:34:8b:2a:2b:
da:c9:0b:c8:d9:c4:96:96:e4:c0:a4:2e:55:3b:26:fe:88:41:
6f:58:c4:96:3e:9f:0a:42:9a:8e:ac:e5:d6:90:18:35:90:3f:
a6:d0:f3:c3:e8:56:85:02:df:d7:fc:07:98:90:f3:1c:71:a1:
8e:2e:16:3c:1f:b7:8f:e4:50:29:cb:4a:e7:23:1b:7c:49:1b:
5d:7b:55:bb:2f:fd:da:46:ba:89:b5:a6:d5:3b:7c:0b:4d:2b:
15:95:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:05 2025 by rpki-client