Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: oDFWTBucc3G1Ks6pmnQ8K6W++HxATOK+7vt0elDhCVc=
Subject key identifier: B9:BB:FA:5E:2E:A4:CC:DB:80:50:5C:55:32:99:93:B8:49:7C:DF:3A
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 0198D629897DD9F70CBB0BA05D66C7DF5548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=)
2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: ktQXNycIA3zj9TzkIcYtzuoJGgaecF+Pc7ztT6TF5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:89:7d:d9:f7:0c:bb:0b:a0:5d:66:c7:df:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=b9bbfa5e2ea4ccdb80505c55329993b8497cdf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:1c:1e:79:2f:5a:1b:38:cc:3b:08:2e:5a:
23:52:47:e7:5f:7c:5d:27:e4:53:e9:47:d1:fa:81:
4c:d4:4d:df:f7:ac:d5:47:9e:24:cb:ee:a3:73:e5:
38:6d:bf:f7:14:79:64:e3:a6:c1:dd:ce:5e:9e:a4:
64:28:cd:fe:87:e4:3e:d6:12:2c:93:5d:5f:ca:7c:
60:22:8c:cb:ac:9f:6d:ab:67:45:ea:6b:00:60:38:
3c:09:ec:12:fb:e9:e5:b3:56:b1:14:48:9d:43:f4:
df:70:eb:84:58:e4:d7:8a:15:79:0c:cc:81:e6:bf:
71:9b:3a:f4:b2:a4:b6:73:bf:dc:1e:5a:cd:21:9a:
21:00:e3:12:46:8c:b6:a8:a2:c5:49:6f:66:98:5f:
ff:c6:94:06:a3:63:d6:ac:0c:4b:cf:6c:17:97:c6:
a2:41:64:93:03:d6:34:8d:90:4e:dd:06:5b:e2:60:
3e:91:82:a5:90:61:b7:31:80:3f:37:21:f0:2b:80:
cd:f9:f9:12:83:56:19:74:ae:17:e9:aa:8b:0a:48:
26:bd:fe:9b:19:de:a9:80:a8:27:3b:d5:79:19:4a:
7f:b2:e6:0d:b7:61:f9:ba:20:b0:4e:55:d2:48:0a:
76:29:d7:aa:24:a1:c0:56:2b:bf:f8:77:a9:ff:48:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:FA:5E:2E:A4:CC:DB:80:50:5C:55:32:99:93:B8:49:7C:DF:3A
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bc:4b:4e:b3:77:8d:8c:21:61:1c:33:a7:6b:c1:aa:4a:43:
aa:b8:90:3e:a8:83:6e:a0:00:19:68:16:ea:40:ac:41:2a:4f:
cd:2c:a7:62:96:c1:b0:d3:11:8d:1c:3c:1b:8c:75:05:e8:ef:
00:fe:db:a2:a7:27:61:25:88:2b:28:02:31:d8:3d:2d:a1:ac:
e7:93:9b:e0:a5:cc:aa:8b:24:51:e7:50:94:91:a5:b4:f7:bd:
f8:cf:aa:26:16:62:bf:77:a6:17:ac:a8:82:6d:ca:c8:ae:bc:
0d:04:0c:4a:19:ac:9a:04:da:9f:c4:79:00:79:da:08:80:14:
aa:a5:54:17:5e:82:8b:8a:02:c1:00:69:d8:eb:20:f4:2f:b2:
21:e8:a5:48:a7:b2:19:82:22:c7:0e:ee:4a:91:ed:e8:23:36:
70:d5:c3:39:c2:4a:c0:ac:73:de:da:30:96:33:db:9a:bc:44:
e7:1d:46:a7:7e:0e:22:b8:ba:98:88:87:b7:77:bc:79:e8:f8:
62:3d:93:f2:4c:e4:e6:de:30:26:c1:22:b8:02:7b:96:8a:59:
c6:ca:02:49:8b:0a:4a:89:09:40:95:a2:b6:35:9c:c2:43:1b:
8d:dc:a6:cc:8b:2d:d1:c6:1c:72:f5:2f:07:d9:d3:06:3a:ff:
08:d0:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:51 2025 by rpki-client