Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: WVLVnj5I/hSko2EQKvwIS9OL7UyjYQgnEebENXdRKCY=
Subject key identifier: 8D:B6:13:BC:49:33:C0:D3:1C:74:ED:45:C4:7B:56:5F:2F:98:99:53
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 0198D54EBDFA3BF24FFE7A4C3FC005A68DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: Y6o4ITE/nk151mwyw9TWCGIv2wafdap0v2erdc8U8Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:fa:3b:f2:4f:fe:7a:4c:3f:c0:05:a6:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=8db613bc4933c0d31c74ed45c47b565f2f989953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:ca:63:5f:2e:71:11:75:44:a2:3f:2b:00:
13:92:06:6f:0e:ba:b8:e1:fc:b1:1f:36:fe:b6:9e:
20:09:55:e1:36:b0:0c:6d:af:e1:39:37:55:85:17:
9b:dd:9c:ce:0e:d6:28:46:51:1e:6c:d2:7c:a0:22:
21:29:90:c0:68:29:30:e7:f7:61:d4:bd:ed:bc:fd:
d2:25:a4:ec:ae:cd:a0:31:4c:c5:d4:30:72:bb:df:
04:df:42:e2:54:b3:21:13:77:b3:66:3a:6e:2b:e2:
68:69:8f:ad:cf:26:9e:74:ea:32:ca:13:5f:03:3a:
e7:b5:2e:2d:b6:ba:42:d3:46:cb:dd:50:7e:e2:af:
1d:0b:83:72:12:3b:d7:1b:11:3c:8c:a2:15:67:ba:
8d:4f:c7:df:1d:9e:d1:cc:9a:53:6f:55:8d:21:5a:
a1:30:36:83:0d:ea:10:04:c9:dd:91:ab:f3:43:4e:
64:a2:e7:a6:4b:e2:ea:f3:5c:d8:ea:77:7f:0d:9a:
45:92:67:34:a8:7d:81:b7:0a:59:3e:c9:07:52:14:
d8:f1:23:70:12:17:18:02:c7:98:9c:f1:6a:21:53:
43:97:64:b7:6c:b2:18:b8:9a:f9:a6:57:15:1d:53:
a0:e7:31:a2:e3:bc:33:ef:b7:27:07:04:10:8e:6f:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B6:13:BC:49:33:C0:D3:1C:74:ED:45:C4:7B:56:5F:2F:98:99:53
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c6:ad:04:3c:28:33:da:a3:6b:12:fa:50:01:90:0a:8c:39:
8e:71:23:fc:57:41:a1:19:9a:05:8b:47:18:98:23:dc:f1:f3:
be:f9:72:3d:85:a4:00:3e:49:1e:c8:34:cf:2f:cf:02:3b:78:
eb:53:19:3d:a1:b0:7e:b3:a3:ee:71:fa:97:01:c1:2f:d6:ee:
65:d3:56:5f:cb:e0:18:64:f8:b7:ca:8b:1d:73:55:45:d6:81:
4e:3c:7f:91:50:b1:a4:a9:ad:fb:e0:e6:b5:02:80:ea:ab:89:
14:41:61:ff:84:78:57:6d:a2:48:8a:a7:03:ab:ce:80:92:d0:
b2:45:c9:43:59:e4:03:b8:be:0b:18:1e:23:0a:87:ca:aa:33:
72:a8:ea:6a:7e:6a:50:8a:2b:88:aa:fb:05:44:22:15:6a:66:
1e:d0:ff:c7:50:67:be:c5:ce:91:b7:ce:ef:4e:55:68:46:28:
36:b8:e1:af:f5:e2:4a:f6:c4:69:67:dc:7d:e9:64:ed:ec:dc:
09:2f:8e:52:64:d0:fb:40:41:c2:24:24:21:ba:4e:5b:f7:e6:
77:7a:b7:39:3c:33:0d:a8:78:d0:b7:d6:6f:98:bd:bf:7c:10:
cf:f3:96:61:c0:1f:25:c6:79:d0:d6:3e:e0:64:c6:cb:89:91:
02:e3:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:14 2025 by rpki-client