Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: EwzasRQPbWKN9ZljElKVN2FuGqEqkBkoHjLVg7uYExk=
Subject key identifier: 5F:C0:D3:CB:3C:D3:33:E6:87:93:7C:5C:43:A3:D8:3C:A2:9E:52:8F
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0198D5BB9207884669E48C42C723A2138AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: TVhXdk3OwjlgOZpSqJRIzBrL2CAdBAvJUu8RP2MTZ5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:92:07:88:46:69:e4:8c:42:c7:23:a2:13:8a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=5fc0d3cb3cd333e687937c5c43a3d83ca29e528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:94:11:c9:b7:87:b6:54:02:45:e4:a6:1c:
10:f6:b9:53:c6:a5:57:0d:97:26:79:ab:e9:20:72:
a4:ae:8c:d2:f8:63:02:68:4b:9e:64:11:9e:6d:bc:
82:e5:a7:2d:8f:1d:aa:1c:af:69:fa:64:7e:92:79:
69:3a:bd:2a:13:42:e8:0e:23:6a:14:28:17:88:78:
45:01:38:bc:c6:4b:da:87:c3:2d:e1:4c:1b:2b:b9:
2c:d6:28:d7:3f:0d:b4:5a:6c:5b:68:f7:eb:46:59:
8a:95:e4:b6:8f:0d:b3:08:00:3f:98:fc:6d:74:96:
2d:8c:09:e8:fb:bd:72:24:e7:0f:b5:48:eb:35:d7:
d9:a4:e0:54:8e:24:0c:32:38:78:c6:93:1f:6a:84:
39:3a:9f:b9:2e:9a:9b:4e:93:97:35:d8:9a:8e:5e:
6b:18:77:96:f8:b0:7d:13:ce:e6:4b:48:a5:03:6e:
b6:f6:ef:09:c5:68:ee:c2:a5:df:17:82:f1:fc:f9:
f1:37:35:70:c6:c8:0f:82:e4:7b:47:3d:12:df:46:
74:77:3c:03:1c:e8:c7:03:44:f8:a8:0c:8d:99:8c:
21:bf:9f:be:1a:74:3c:c9:3f:2c:82:a9:1e:21:4f:
2a:9e:a5:81:12:cf:a2:4a:85:67:55:0f:48:d7:ab:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:D3:CB:3C:D3:33:E6:87:93:7C:5C:43:A3:D8:3C:A2:9E:52:8F
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1d:d3:fc:85:98:bd:66:1e:f3:4c:48:e5:09:b8:43:ea:20:
78:43:8d:95:fa:ca:5c:e5:7e:95:c8:09:84:87:78:ae:11:2e:
ea:85:10:b4:e9:c7:4e:3d:2a:05:14:ef:57:52:3a:ae:90:a9:
cf:d2:00:73:4a:c0:4a:b5:ea:b4:2b:6d:56:a0:fa:76:6c:6d:
cb:3c:d5:3f:94:0f:e0:ec:f3:8d:d1:ce:a1:5e:fc:5e:e5:17:
31:71:2e:7a:ae:b8:f6:c3:fb:40:34:df:2d:6a:84:58:1a:58:
36:57:fb:8a:20:e5:b0:49:b5:15:9c:fb:2a:a7:ff:4f:67:de:
b9:06:61:03:a7:71:d0:a6:62:48:c6:3c:7f:e9:b5:f2:4f:b4:
aa:9f:7f:bb:8a:25:80:d7:fc:aa:4d:87:1b:76:58:b4:cf:7b:
24:15:8b:33:fb:08:c0:d4:af:e7:1e:38:59:c6:1a:38:3c:b7:
b3:10:56:2e:e4:a2:c4:88:fb:ac:33:f8:a6:b2:6b:d3:dd:4e:
87:62:34:65:4a:b6:91:c0:e6:f9:65:66:a6:51:5a:6a:c2:b1:
de:ad:0d:d1:58:cc:4b:f9:25:3c:60:cf:2f:19:64:e9:ef:5c:
9d:5d:30:43:01:88:17:ba:89:7c:8d:01:15:ac:a2:0c:5d:57:
ac:a9:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:21 2025 by rpki-client