Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: lpFaz2dGo79l6E/9YTsIrvdA+Q6HNSu7Eo9n5BjKzC0=
Subject key identifier: 71:93:73:EE:45:9E:DA:1E:46:E2:93:1B:F8:3C:53:A8:03:50:7F:4A
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0198D515FFB99E2A04390DF62A560E358FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: xXDgg1P71SkmLarnqfgGX8mwq10dqu1xJHrI9V6hkLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ff:b9:9e:2a:04:39:0d:f6:2a:56:0e:35:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=719373ee459eda1e46e2931bf83c53a803507f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:aa:cb:64:87:00:3f:44:73:de:db:28:59:
4a:fc:21:ed:f7:66:ed:ad:4b:22:b8:f6:58:61:a9:
fd:76:d9:0a:2b:a9:ae:57:c6:c1:2a:d9:51:5a:b2:
2a:84:86:f6:48:f7:6e:91:1e:60:07:7b:a4:b6:06:
59:56:3c:63:8c:29:67:8a:a3:b5:d5:88:20:54:79:
c7:93:ee:d4:2b:f9:ea:e5:4f:02:a4:18:f7:50:7c:
b4:62:cb:3b:93:d8:d8:ff:8d:eb:10:3e:6d:87:99:
99:f1:1d:f9:28:d3:7d:94:db:86:bc:19:b0:a5:ba:
a3:c7:e5:fa:ef:3a:38:5f:17:a2:44:25:a3:d0:2c:
9b:5a:39:b8:1e:32:f6:1f:34:a5:e9:16:c0:a8:bd:
91:70:7e:96:d8:c7:71:8b:7a:10:3e:7a:fa:45:bf:
fd:f8:df:b8:aa:28:29:c0:67:c6:c0:42:27:39:7c:
f3:3e:20:df:39:f7:b8:6d:f0:2c:80:35:43:bb:f5:
cf:53:42:bd:a5:2b:2b:6a:e3:74:c4:4f:0f:73:f4:
49:83:65:0f:1d:f5:08:62:9d:e6:e8:df:c0:24:e2:
e1:3d:b3:aa:4f:d2:cd:9a:24:08:d4:37:5b:dd:f0:
1b:9d:3c:53:a7:22:e2:d0:30:bb:c0:d0:31:e3:6d:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:73:EE:45:9E:DA:1E:46:E2:93:1B:F8:3C:53:A8:03:50:7F:4A
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:ff:cb:ce:ce:e9:46:55:68:0a:db:96:89:84:6f:99:fb:
6d:00:5c:a4:7d:fc:a5:0c:ed:82:3f:cf:f5:c6:cd:6e:ef:dd:
c9:55:07:a2:9a:a3:a4:11:ac:3f:6c:71:cd:4c:63:5e:2a:f0:
c7:0e:f5:e1:d5:7c:f8:d0:15:77:3c:15:10:e8:56:d1:f7:13:
ac:c3:61:1f:8e:41:e7:9c:15:a3:d4:92:87:cc:cb:b2:6b:d6:
f5:62:c8:cb:09:d9:6b:83:77:61:e9:56:c5:02:ed:17:79:6f:
88:8b:36:71:ad:77:f5:25:a5:3b:3e:04:9b:c2:85:a5:da:88:
74:55:59:e6:c6:9b:21:5c:97:7d:dc:f6:af:0d:fc:05:39:17:
29:30:67:ad:b0:4c:3e:82:57:8d:05:89:c8:cf:0f:0b:3d:1a:
1d:fa:de:cc:82:a7:24:28:ed:64:1f:e0:39:c8:d3:a3:e8:2b:
57:12:2e:44:cf:00:39:8a:00:10:49:b0:14:2c:5b:5d:fe:ec:
ad:1b:ef:77:cd:3d:37:07:7e:c8:75:e6:25:bc:36:67:ca:d9:
fa:0f:89:25:4c:56:5e:6f:26:fc:2e:36:4d:b7:84:81:bb:58:
28:95:14:52:a7:0a:90:05:26:24:ef:3d:0c:4b:a0:c7:41:97:
06:c7:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:51 2025 by rpki-client