Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: NwqZu3BQwuyEDzR4KtyARg0eaSWbjlw2owu9lxi+LBs=
Subject key identifier: 0C:E6:BE:85:6D:63:1E:C9:93:5B:8A:D7:5C:F3:7E:7B:08:A9:D7:0A
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 0198D5F1CCCC9151D53E772AA2C7DE5D5ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0364
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: gNk3zqdtCiyD/zp8qB8gvNG6ckMVX2ab3IGybLLvUEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cc:cc:91:51:d5:3e:77:2a:a2:c7:de:5d:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=0ce6be856d631ec9935b8ad75cf37e7b08a9d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:4b:16:a8:53:28:a0:da:7d:78:f6:2a:ac:
6b:b9:23:24:cf:f0:0e:a4:fd:9e:79:60:85:46:2c:
52:55:dd:7e:f8:95:bf:70:79:8a:ef:9b:04:4f:f1:
06:c4:a5:f3:4d:34:a3:0b:fb:16:3c:92:89:dc:4e:
60:53:d6:50:41:06:0b:c3:66:08:a4:8a:e3:05:62:
f8:9a:c7:15:15:57:30:64:21:54:f0:a4:79:f4:ee:
77:4e:fa:a6:0b:89:d7:df:3d:1e:e0:69:2e:c3:c1:
8a:26:fb:c2:dc:41:d8:51:0c:7f:58:a1:f9:68:4b:
de:3c:76:bf:b1:99:1d:6f:a7:c0:6b:6b:f8:f0:ba:
65:b6:2c:45:24:5c:96:65:6e:24:fb:a6:22:ac:d7:
9b:df:1f:59:39:32:5f:2e:e3:1b:2a:74:9c:63:8c:
ec:4a:e3:68:31:0c:ac:b7:cc:74:45:64:83:f4:de:
8a:50:4c:bb:c5:ea:f7:a9:bc:87:d4:45:ed:de:c2:
ad:e1:04:13:51:74:7f:f9:bf:a8:cc:58:2e:de:e5:
f1:c9:e1:0e:78:aa:db:b2:03:af:bf:e7:58:1d:28:
7e:d4:5f:4d:ff:9a:76:a7:28:eb:b6:57:f6:45:27:
27:01:ce:a6:76:8d:d9:8a:4e:f5:92:62:0b:9f:b7:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:BE:85:6D:63:1E:C9:93:5B:8A:D7:5C:F3:7E:7B:08:A9:D7:0A
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:85:63:aa:ab:3d:8e:63:91:9a:33:ec:45:fd:11:e0:0b:ca:
1d:24:4d:36:37:46:58:52:19:dc:df:29:c6:a9:2c:6a:01:9c:
26:94:02:a5:fa:cc:5c:93:f9:9c:78:44:a1:3c:5d:d9:ed:53:
a4:5b:9c:fc:e0:64:85:1e:eb:c1:fa:04:0c:71:40:e4:3f:2c:
5a:ef:c0:04:cf:70:d8:1c:87:87:6b:59:e1:24:79:26:9f:c5:
1e:c6:f9:d3:9d:d9:4b:d8:04:36:a9:f5:73:f7:2e:09:68:da:
1d:88:45:39:cb:31:57:03:a2:99:55:e9:b3:fd:eb:99:89:aa:
18:c2:33:93:52:a7:6f:9d:9a:ff:7e:d0:04:71:e5:21:1f:47:
0f:54:91:1c:06:45:6d:67:22:b0:c4:24:67:60:ab:89:60:c0:
d2:fb:28:ae:c0:f0:87:24:73:8b:91:ee:78:a7:91:95:4a:1c:
8e:a6:0c:1a:95:06:88:6e:d7:90:89:14:30:da:24:96:bb:10:
f6:9d:1a:27:4d:a9:65:34:75:dd:9d:34:ca:88:02:ea:c4:67:
77:65:a0:7f:86:dc:29:55:0a:03:cc:af:5a:f1:b6:93:83:87:
d2:ed:f6:73:0c:18:1a:eb:e8:54:bc:db:1b:fc:66:7d:7d:a3:
a6:79:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:49 2025 by rpki-client