Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: AqP8ovgro6OQiYLAmDjboR1MNQL4mSfU26/Ns4dFPPM=
Subject key identifier: EC:FB:E5:9A:BB:62:E0:07:86:81:92:49:0B:5B:C6:D9:72:97:5E:7C
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 0198D84F5B635308CF59CDCAAC0DB25294B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 14A6
Signing time: Sat 23 Aug 2025 19:02:15 +0000
Manifest this update: Sat 23 Aug 2025 19:02:15 +0000
Manifest next update: Sun 24 Aug 2025 19:02:15 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: eeOEL2F8Dkw2ZFx/Z5lXPEvFQw/PHZqLLvt1FNeoDu4=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:5b:63:53:08:cf:59:cd:ca:ac:0d:b2:52:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Aug 23 19:02:15 2025 GMT
Not After : Aug 24 19:02:15 2025 GMT
Subject: CN=ecfbe59abb62e007868192490b5bc6d972975e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:99:c4:74:a1:29:3f:47:bf:a9:b4:ab:b3:
6a:cf:17:bd:b0:1c:5c:b2:61:33:46:b0:a0:26:10:
c4:25:15:19:e1:b0:57:f5:7b:4c:a8:e7:46:6b:ab:
db:62:eb:25:9f:aa:7a:8d:dd:9e:9c:75:a0:34:73:
11:e2:3f:57:be:61:e7:8b:91:46:21:2c:3b:52:68:
9c:7f:6c:b7:5b:dc:e8:0b:7e:82:01:9e:74:0f:24:
6d:eb:ac:8c:6e:95:85:0a:6d:d9:a8:3a:c3:57:a8:
49:44:45:06:7e:77:05:b9:b6:72:5d:31:94:67:11:
f0:e8:e5:e8:4f:97:e7:f9:30:19:99:9c:ff:41:ae:
31:6a:7c:c5:82:ad:e0:2b:15:11:1b:62:40:2a:dd:
83:2c:26:8b:2c:a5:bb:26:36:07:46:17:f1:cd:a5:
8f:0f:b5:73:eb:fc:02:a6:55:59:49:0b:45:ba:c6:
d2:08:98:c1:64:76:06:9c:ac:3c:5a:cc:e1:a5:70:
98:36:2f:37:4c:10:0e:42:48:53:19:89:dd:ff:c5:
1e:78:d1:c9:46:03:17:d6:d1:a2:39:10:fd:34:11:
79:0b:bd:b9:33:0c:8b:d5:4e:28:e2:74:3d:d7:15:
99:5d:ec:73:97:e5:47:21:a2:73:5b:68:b4:8f:0a:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:E5:9A:BB:62:E0:07:86:81:92:49:0B:5B:C6:D9:72:97:5E:7C
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:86:7f:8b:c0:e9:d9:81:b6:32:78:fb:ea:68:10:ff:46:
8b:d7:e9:21:c1:eb:9e:0e:54:4c:60:f3:70:aa:36:9a:93:f8:
78:49:fb:65:05:1a:3b:b2:7c:7e:d6:4c:b3:bf:8a:2b:c6:c7:
22:cc:ba:f9:85:78:69:5a:2c:f4:30:bb:11:54:01:ea:ef:db:
8f:6a:6d:f0:dd:d0:b8:54:48:9b:f2:de:87:0d:55:ba:87:ed:
59:0a:6a:62:cc:39:91:77:b9:79:14:06:e8:80:6b:82:e0:43:
7e:16:19:e2:1c:ce:90:0e:82:0a:ed:67:11:ff:07:ca:63:a5:
e1:6f:e5:79:b5:99:04:53:86:bc:d5:22:1a:83:a5:65:01:71:
a4:9c:a9:33:3f:e4:d8:2d:52:c6:a8:78:8f:82:80:c0:23:ec:
64:cf:9b:1e:4c:6b:b9:a7:5f:c7:e5:56:d6:0f:9e:4f:79:00:
54:d4:a9:03:7e:d5:2f:04:69:17:f7:17:e3:49:6b:14:62:22:
6e:86:69:d6:db:eb:86:39:af:7a:6c:6e:50:f0:35:46:19:88:
70:68:c3:a7:94:45:09:c6:0c:d8:7c:5f:00:d7:93:10:dd:0c:
de:a4:a7:64:cb:ae:f8:95:6e:28:ff:24:84:04:a3:88:3a:45:
83:5a:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:22 2025 by rpki-client