Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: nhL76JYEJB/6ZNQNz5sDA+i3gZiSKiWGJzZSKc5GrDA=
Subject key identifier: C6:AC:2D:23:79:6F:15:E6:9B:25:68:D8:C7:2A:DE:F2:A0:FD:86:1E
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0198D4732205496E71693DE19D080F252D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: vo7EIvCD3c6nRZliQXfdjMM0bvcsiBqyknvrWf/wWvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:22:05:49:6e:71:69:3d:e1:9d:08:0f:25:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=c6ac2d23796f15e69b2568d8c72adef2a0fd861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:64:7d:c4:8d:83:3a:eb:89:4a:0f:4f:d1:
07:df:ba:5b:b2:68:80:4b:3e:44:22:74:16:75:74:
0a:f6:ae:ba:0f:24:6e:68:2f:11:b3:f5:3f:1a:e6:
5d:3e:80:4e:c3:0a:f4:6e:8c:f7:0f:a0:72:57:a3:
6c:d5:c2:9e:73:0d:54:61:da:50:32:d7:5a:d7:a4:
68:5c:2f:32:c0:2c:4f:f2:ed:92:4e:cf:c2:a9:69:
20:ce:64:c3:ef:f0:be:55:50:6a:71:e9:4f:fe:3f:
d3:ff:dd:21:cd:c6:fd:c6:61:b8:61:4b:e7:ea:e2:
07:0f:e3:7e:33:95:a8:9b:ab:37:5c:34:45:97:7a:
19:09:b0:d7:51:72:10:88:6e:ad:f8:04:42:23:c5:
70:8f:69:36:d2:51:78:20:21:e6:62:ee:6b:5d:21:
ef:e4:ee:e0:02:01:31:a0:21:64:6a:eb:4e:2d:68:
9c:04:21:92:93:bd:06:e6:34:5a:f7:54:02:8e:68:
36:c4:23:45:27:a1:13:11:0c:67:f6:05:0b:af:a3:
d4:e8:9c:13:2a:eb:8a:c0:53:97:8c:24:3f:1a:fa:
b9:ee:23:1a:ae:26:67:dd:3b:62:43:30:48:ef:fb:
3d:de:b7:d3:95:ca:cb:8a:17:16:95:03:71:2d:7d:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:2D:23:79:6F:15:E6:9B:25:68:D8:C7:2A:DE:F2:A0:FD:86:1E
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:85:13:c5:85:27:1e:69:89:a1:7f:f9:08:68:b8:cc:31:96:
b8:15:6c:50:bd:27:07:ef:08:fb:0c:1c:ac:37:5c:bc:f7:39:
1d:6c:b0:b7:b7:c8:15:90:ca:13:09:c7:9b:a7:b9:a9:3c:2d:
67:62:8a:8c:80:fa:11:86:36:34:a9:b2:c7:48:fc:16:6d:3b:
c0:15:c2:4d:e6:68:83:fc:c5:22:42:18:fa:59:98:25:0c:9f:
f8:04:7b:d9:56:e3:8e:39:6f:1b:01:c5:ac:cb:1c:59:46:3c:
87:c7:b7:bc:9c:61:b1:ed:43:4f:92:f0:25:2a:e2:04:64:6f:
e0:cf:43:11:28:5a:72:85:3f:46:94:c1:e8:bb:1f:a8:51:78:
64:3f:35:8e:00:89:34:6b:ad:34:d1:c4:66:14:d5:a8:f3:6f:
f0:85:81:c8:52:bc:18:1c:51:51:b5:32:99:17:84:35:fb:11:
ff:df:59:31:99:59:df:5a:46:71:94:0c:f4:25:32:d6:29:d2:
92:5f:46:86:8f:1b:6b:4b:fb:0b:b1:38:50:0e:2f:e4:80:50:
da:bd:cf:ef:22:60:ef:42:9c:32:4b:04:44:aa:2a:8a:9d:b1:
01:a3:16:16:0b:11:fb:72:5c:b7:db:88:0f:ce:83:06:88:52:
1a:56:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:20 2025 by rpki-client