Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: LRMh5gYDwcWd5s2h0TpQFqqQTt9qYhsxMxAdrZJwMvw=
Subject key identifier: 91:4E:D6:71:40:BB:89:5F:97:95:BD:CD:C3:94:11:27:FC:48:B8:B4
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 0198D5F1B07DEBF4C826D7099596CA0BB160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: QdXM6dNYESpMaqmfvRSqTu2OPSEVyyynfCuG9JA62pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b0:7d:eb:f4:c8:26:d7:09:95:96:ca:0b:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=914ed67140bb895f9795bdcdc3941127fc48b8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:62:72:2b:bc:89:fa:c0:72:6a:bd:01:70:
60:65:c1:c4:2e:9f:89:8b:56:24:57:4a:f7:7b:85:
bf:90:a7:5e:97:f5:40:6a:0e:a8:51:62:24:38:ae:
19:f8:b9:bd:6a:af:d3:36:e7:17:c4:b7:c3:5d:f3:
cf:94:0c:fa:82:23:23:7a:58:84:c0:55:2b:0a:e2:
f7:f0:ec:0d:a0:6c:d1:4e:9d:f6:be:65:44:27:f5:
33:ea:33:8b:b8:6e:5d:8b:c5:ce:12:6c:fc:35:83:
20:87:49:d2:98:ae:61:86:af:a6:50:7e:f6:ae:d0:
f2:3a:9f:12:bb:b1:fa:28:b9:3f:66:8a:bc:36:11:
cd:9f:ea:98:09:8a:3c:b1:95:74:73:e6:4c:ad:a7:
f2:50:7a:8d:30:34:8c:c3:5d:96:bb:91:e1:2a:b6:
11:cf:38:09:44:70:6c:07:41:aa:e3:ad:27:e4:8a:
97:4a:b4:4e:c0:24:96:7b:d3:c6:dc:5e:86:21:83:
72:26:d7:a1:95:c8:46:5d:a5:c2:91:b6:c9:5b:aa:
90:12:41:b6:0c:dc:03:cb:89:f0:74:56:0c:34:fa:
64:53:fb:60:32:24:f0:50:84:57:f4:b4:bc:2f:d4:
a3:60:7c:be:61:14:7c:b7:f1:14:bb:dd:b8:ed:ed:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4E:D6:71:40:BB:89:5F:97:95:BD:CD:C3:94:11:27:FC:48:B8:B4
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:56:e1:a0:e7:20:bf:24:3d:4d:df:f9:d5:14:0a:50:fa:49:
07:a4:b6:9f:f5:29:94:10:69:e9:e8:39:44:1c:c8:7a:94:86:
fc:c3:df:1a:61:99:27:83:f0:68:dd:b5:3e:7a:17:95:ea:84:
fb:53:83:83:77:02:3b:71:22:2c:df:35:4c:14:f8:1a:06:d6:
b4:d8:94:ff:00:e0:ce:37:75:ae:7a:da:14:61:af:f9:71:e2:
bd:37:d5:d5:14:93:20:aa:5b:d5:a4:5b:a5:55:71:82:b2:90:
d7:0c:a2:a5:11:88:eb:f6:7f:ba:2c:4f:41:f0:d0:fa:14:35:
09:cd:33:0c:9f:2a:2f:65:28:6c:e2:f6:7c:43:c6:0e:62:35:
5b:89:c9:a6:80:5e:81:6c:6b:66:73:fc:e5:00:de:91:1e:f6:
5f:41:07:08:11:44:e4:69:e0:51:55:5a:dd:d4:90:2b:96:b7:
c6:db:28:9f:98:3e:46:af:6a:38:05:75:10:64:69:88:aa:33:
a9:70:91:cb:ff:be:70:bb:d2:45:31:4f:70:24:b3:fa:7c:16:
7b:2c:55:ed:63:33:2a:b8:e7:8c:ef:98:bc:e0:0e:74:ce:31:
45:26:e2:29:9b:ed:77:7c:d4:02:df:66:c1:71:c6:bc:2b:21:
3f:ce:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:07 2025 by rpki-client