Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: lCVrRhsoImerOJEnsB51SbE9p3pw4zd8iMkz1r2e81E=
Subject key identifier: AB:77:34:A7:64:37:43:AC:61:BE:B4:D6:49:2E:9A:4F:8D:32:21:24
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 0199FE0FF925F72B0BB25A81FA819C80A915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: C4
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: TbZ9-J7RJ19MnUwHQhG72h3QmmA.roa (hash: 1KAnW0BNGRWt07l0J8xmwG1lZvzCRjTvOjNa6gA0ebQ=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: LBqD/963X7nUUuY+xIXg545P1j95wIsOA/mtegMgLjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f9:25:f7:2b:0b:b2:5a:81:fa:81:9c:80:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=ab7734a7643743ac61beb4d6492e9a4f8d322124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:e0:a6:7d:82:42:ec:68:7a:95:08:c1:4e:
1b:31:4b:95:31:b9:fe:ab:3e:87:bb:e3:ae:c3:f0:
92:dc:44:1a:94:e4:cb:c4:c8:12:10:d5:58:21:b6:
79:45:b1:1c:09:e7:7d:0d:dc:f8:a3:f2:cc:f4:07:
f0:80:2c:3e:66:e6:c3:d1:16:62:88:35:fb:7c:7e:
06:2a:80:2a:c2:51:57:23:63:8e:c5:68:4a:09:60:
62:d5:c3:a8:e7:ab:32:e6:8d:4f:3a:ae:9f:16:ce:
04:9b:fc:85:0f:ce:82:22:c0:0a:eb:9f:95:43:36:
1f:68:bb:bb:d0:be:48:03:25:fe:54:f9:f8:f2:9f:
e0:a1:a7:ec:86:94:44:a6:07:eb:29:32:8e:0a:c4:
52:41:b0:fb:67:b8:bd:a0:85:f7:8d:2b:df:ce:05:
c9:b6:2c:b7:c2:fc:7b:b8:e2:f1:26:28:08:a6:84:
4d:56:5f:12:ae:39:0c:70:37:84:70:ff:cd:ac:80:
91:bb:c5:bf:49:f7:72:99:19:5c:cb:b2:2f:89:7b:
1e:c0:68:da:5a:47:74:52:2e:3c:f8:48:0b:56:5e:
7f:de:a6:df:98:16:59:eb:74:66:9d:c3:16:81:b9:
9a:52:f8:c0:2d:31:2f:54:c4:c4:67:4a:39:16:c2:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:34:A7:64:37:43:AC:61:BE:B4:D6:49:2E:9A:4F:8D:32:21:24
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3e:f7:c8:b6:97:42:b1:7f:5f:3e:63:94:a4:67:cc:0b:3f:
f2:1c:a6:6b:74:ab:2f:97:8d:3d:95:11:a3:59:3b:92:f2:d4:
ee:b3:d6:c7:68:d6:a2:ae:4a:17:17:51:df:e9:56:e7:f6:2c:
5a:ae:09:f4:65:df:f0:6b:d4:29:22:46:f1:eb:8a:44:f0:fa:
ed:01:12:4e:a5:42:95:63:b0:17:a8:32:07:c0:47:e8:f9:18:
80:d7:b2:bb:8b:42:65:5a:0b:71:dd:15:c8:df:30:1d:8a:82:
fa:4f:b5:46:3d:43:da:bd:2b:8a:b3:45:f1:19:95:f8:67:06:
4d:8e:77:0f:16:f5:af:2b:f3:52:be:90:44:c4:71:59:54:bc:
dc:66:ba:b7:03:70:3e:32:37:e3:39:a7:6a:40:39:6a:14:5f:
17:a3:94:81:ab:aa:db:43:94:88:30:a0:a3:e8:87:0d:9a:96:
b3:b4:6a:72:1c:f0:2a:22:f6:f2:30:79:ca:63:5d:9e:83:4b:
ad:ae:99:2f:56:f8:4c:4e:f3:83:fa:c8:df:36:bc:e0:9e:d1:
a4:8a:74:eb:60:b5:ab:21:08:2d:4c:18:23:d2:6b:61:69:a1:
da:d8:df:54:de:6c:e9:db:a6:bc:cb:63:b2:6d:90:17:d5:5d:
bc:b3:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:57 2025 by rpki-client