Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: Fn5TqOw4lohTbQCyDhgaIJyAjl84e5+Pbs1yRmRS/4s=
Subject key identifier: E1:57:D9:CD:F5:1E:D8:79:29:E2:20:FE:1C:78:26:B9:7F:08:3D:AC
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 0198D5BC4027BA5343387A0D925FBD56EFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: vl15h6bSawu987-Q_9jiY_8d_bU.roa (hash: Ky1qbRFkXL3xxI3+FV1tNHYzBN6SggIg4pNwGCFKnF8=)
2: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: efHsuCS2ElRtuFqKwj/6iFk/ZtZyLtI3OzAl1NCls8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:40:27:ba:53:43:38:7a:0d:92:5f:bd:56:ef:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=e157d9cdf51ed87929e220fe1c7826b97f083dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:18:74:c8:57:fa:2e:8c:15:ff:5e:e8:05:
07:7c:1f:e4:eb:c9:8d:32:91:ca:7d:1c:cf:29:18:
ed:bf:cc:14:b8:69:ed:1f:b7:1f:4f:f3:c6:a5:1b:
94:81:e9:98:54:ed:b4:4e:d9:7e:da:d5:b9:e2:a8:
b8:3e:ef:65:20:3b:73:c7:9a:17:a4:2e:c1:a2:43:
2c:8b:62:95:a6:4d:71:99:ad:74:4a:34:de:41:fa:
77:35:df:a5:a6:a2:f7:f8:04:56:ab:60:3d:ba:ce:
f3:ec:c2:de:58:df:73:d9:be:52:39:98:af:97:13:
f0:b8:b7:04:a8:34:90:c8:db:52:79:08:0a:1f:ea:
56:9d:29:35:a9:cc:95:38:42:b1:86:42:97:88:0a:
5f:b3:6d:6e:89:88:0a:7d:ec:f0:c5:59:b3:cb:12:
41:3f:c6:9a:db:6c:10:ec:ec:eb:3e:c9:ad:60:f7:
5a:32:0f:76:0e:1e:d1:c5:d5:10:64:61:95:f8:2f:
23:8e:41:84:bb:d1:31:55:4c:66:0f:2c:02:54:ed:
b7:d1:18:52:e2:87:20:67:11:55:10:73:4a:df:c7:
f7:ae:8b:70:72:e5:eb:46:6b:4a:f3:00:8e:58:98:
a4:6f:04:70:93:31:2e:c0:58:b1:99:08:30:c1:35:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:57:D9:CD:F5:1E:D8:79:29:E2:20:FE:1C:78:26:B9:7F:08:3D:AC
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7c:8f:46:43:48:96:f4:19:02:22:47:2b:94:19:f3:3f:38:
cc:5e:92:40:32:f4:91:ef:51:2d:07:9e:d4:6d:0d:bc:92:a6:
17:a2:e2:1d:3f:d3:52:3b:50:9a:86:4d:be:9d:c3:73:3e:61:
d1:e6:39:14:dd:6b:b0:e0:1d:b4:e5:d4:df:1c:93:df:f0:47:
87:a9:ae:90:46:16:e8:37:f8:41:44:b1:a1:af:71:8c:53:a1:
22:ab:22:12:fd:32:81:c5:e4:36:c8:f9:f6:f3:61:52:07:2b:
39:35:a6:0e:26:85:78:76:f5:20:34:54:55:71:56:65:88:4a:
d5:c4:fe:55:6a:44:58:dc:ed:02:81:0d:15:20:89:31:67:6f:
3d:6c:39:8f:ba:22:33:9d:0b:76:df:f9:8d:41:e6:70:00:f3:
55:ed:4b:43:a9:e0:85:22:fb:47:90:25:43:95:d3:9b:aa:89:
f2:b9:71:f1:35:03:e7:53:a6:e1:0d:bc:27:dd:a7:6d:e2:09:
23:9c:f4:27:c4:4d:32:c2:fb:c1:de:3c:6b:33:cf:30:32:60:
f3:98:05:82:4c:f6:a2:a8:6c:f6:2d:ea:79:45:9d:e1:fd:31:
42:dc:20:e1:b9:01:5b:a7:bf:9e:2f:b7:ad:13:9c:77:10:ea:
d0:8a:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:54 2025 by rpki-client