Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: gA09vnpY74d3+4XXwv0z0KxF3kpvvhCzF+LB7N7pzIw=
Subject key identifier: B5:E6:43:F1:28:E4:E8:1C:57:83:6F:3A:D4:D8:C9:FC:42:E0:D5:1D
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 0198D5F17A433BBFFF4EC22512FBFA164A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: l4ZJJivwqQaOwgaVCMAEdxdPWuCUQOpxXGSE1BW1aNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7a:43:3b:bf:ff:4e:c2:25:12:fb:fa:16:4a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=b5e643f128e4e81c57836f3ad4d8c9fc42e0d51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:67:57:85:ea:81:90:a3:15:10:b3:b2:16:
f9:f8:f9:ba:6a:52:e1:a5:37:02:16:b3:e3:96:5f:
f5:74:4e:05:ef:e9:21:5e:bc:f4:84:68:85:04:be:
80:35:53:14:b0:d2:10:f3:1f:c6:7a:77:08:5e:9d:
2e:aa:c0:40:30:f0:87:2c:cd:23:26:13:de:e4:cc:
c9:2a:25:c3:1f:6a:69:3c:0b:b6:59:a4:d6:6d:7a:
1f:a3:5b:e7:c7:da:f3:85:b1:9c:96:13:92:4d:d0:
dc:db:0f:06:63:1f:f5:5b:dc:13:83:99:b0:bd:5c:
be:0c:06:86:cc:1a:81:95:e1:e0:d7:3c:61:bb:d6:
a4:db:76:fe:e4:5a:37:b0:6d:10:d6:d0:9b:af:51:
06:4f:1e:82:c0:f1:0b:e4:5c:ab:77:98:c7:7d:79:
49:6f:46:02:2f:83:1d:21:c4:c1:37:fc:04:f6:f5:
bb:7d:25:7e:89:8d:34:b5:c4:25:e6:27:86:77:3b:
2f:4d:cb:66:8e:69:c1:88:c5:c2:0a:c6:6d:2b:76:
31:e5:55:65:16:ca:22:a1:4a:c6:06:c5:37:e8:a1:
f5:4a:23:3b:2e:e2:b3:84:c3:b9:c7:30:09:a4:00:
81:4d:3f:e2:c4:95:bd:e1:9d:a6:a1:72:01:93:b9:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:43:F1:28:E4:E8:1C:57:83:6F:3A:D4:D8:C9:FC:42:E0:D5:1D
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:14:86:58:04:15:47:ab:dd:60:ae:6c:cb:3a:22:0a:d0:23:
8d:91:b5:59:96:3a:d9:26:b3:8a:85:d9:ad:1a:01:44:74:85:
3f:cc:2b:7a:1c:1c:ac:28:ae:5c:24:56:d5:56:5e:98:b6:36:
b5:be:32:cd:bb:c6:39:80:bd:46:fe:d7:21:c8:16:36:bc:f9:
e2:2c:ed:ab:59:a8:04:cc:6c:43:2f:2f:d9:41:46:90:dd:f2:
3e:d1:fe:70:26:a7:df:e0:66:26:d2:3a:c9:c5:c2:eb:93:0f:
d3:04:3f:64:71:11:47:cf:0a:e0:a1:9e:76:10:9b:0a:fe:16:
a1:73:18:c9:0f:36:ac:3a:b2:3a:20:7c:2a:c5:46:a5:42:ba:
61:2d:89:dd:11:9f:92:35:9e:88:aa:bc:8d:8b:f7:f9:39:ca:
ed:ec:3e:e3:3e:41:27:c9:60:f3:94:82:07:8b:e0:e1:3d:a3:
05:71:be:b7:44:98:cd:6b:21:c4:03:00:e6:eb:d3:2b:ce:b7:
48:db:cc:d8:b0:24:3c:13:59:11:f4:e2:11:a4:a2:9b:38:75:
1f:a8:0e:37:05:7e:1e:06:e0:b1:53:7c:f7:85:25:e5:ab:6f:
92:6e:07:ca:29:a8:8a:31:07:3e:bf:7e:c5:49:97:d4:36:8e:
c7:d8:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:04 2025 by rpki-client