Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: x4Cpal9q7cFs10J6IodGEh0pRp4nxd7RhDUT4/kMAf0=
Subject key identifier: 44:DE:10:75:8C:B2:44:71:C8:F2:80:52:B9:5C:FC:30:38:5F:DA:B3
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 0198D5F130861E20EAA61ED63A7ABE26B6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: psKTgMPMhFoXmKK6lPVspNoZMhnWQon1e0/fvc1WPFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:30:86:1e:20:ea:a6:1e:d6:3a:7a:be:26:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=44de10758cb24471c8f28052b95cfc30385fdab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:94:67:20:5c:c7:ea:bc:13:d6:cc:3d:bd:
73:80:f5:20:94:27:26:98:6e:94:73:19:00:8d:4a:
87:92:4b:b1:0c:2d:94:2b:fe:84:a6:c4:24:fd:53:
a0:a7:4c:2b:bc:c0:7c:7a:aa:f0:11:74:64:4a:d1:
66:8f:f9:d6:a6:bf:dc:54:a6:f3:ea:d5:8d:dd:f1:
bc:7b:a5:83:4f:0c:b5:4d:fd:33:05:3f:fe:e8:d4:
34:72:f8:3f:1a:ca:f2:ab:fe:b8:e0:f6:ce:d7:0d:
73:83:90:40:a2:30:7a:d7:64:9f:1d:4b:1f:2d:1b:
1d:ca:08:f5:c7:77:3c:71:b9:59:2b:ed:9f:3c:40:
da:8e:58:40:b8:17:24:7e:13:a9:2d:28:97:1b:b8:
0a:ea:b4:ee:97:21:a2:83:da:2c:27:03:5d:5f:cf:
f9:ba:b1:ee:78:28:d3:66:0d:8a:dc:55:c4:52:87:
25:ca:a9:f4:a9:45:ed:41:7f:5f:37:cd:80:49:86:
ef:33:da:b5:a0:d0:89:21:79:43:2d:e5:93:bd:c8:
d5:f6:96:e6:8a:49:12:82:45:d0:34:b1:de:53:6a:
32:7a:d6:db:af:45:cb:de:9a:69:31:7c:e1:e1:8e:
13:22:5e:55:4d:a5:83:fe:87:45:64:1b:a0:6a:f9:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:10:75:8C:B2:44:71:C8:F2:80:52:B9:5C:FC:30:38:5F:DA:B3
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:e9:71:96:f7:56:27:f5:9f:e1:24:5b:ce:f5:15:29:04:
00:6f:03:ca:8e:10:5e:89:30:00:86:ee:06:fe:3f:10:8e:de:
40:33:36:b3:4c:48:d3:fb:78:21:bb:f0:dc:95:1f:b6:e0:8c:
d0:e3:6b:9b:94:e0:82:62:38:7d:9d:57:15:bb:62:2d:34:96:
05:57:1c:b1:60:6c:d7:1a:15:8e:e0:da:e1:e1:15:5f:42:30:
d4:97:1b:85:6c:55:d9:e0:5d:f3:84:d9:72:91:3c:5a:f6:c4:
eb:ef:c9:a0:0b:51:8b:5f:10:e4:9d:37:bf:10:55:3e:c3:31:
90:f1:fc:a9:16:1a:e8:53:ee:09:20:f0:70:32:e6:d7:17:c8:
45:3f:6e:e5:dd:57:eb:6b:9d:37:aa:a2:91:89:88:c8:2c:ed:
9e:d0:8a:6f:21:23:16:25:87:cc:9a:76:42:06:5a:3e:6f:60:
75:75:48:c8:e4:11:a2:c5:ed:d9:ee:2a:12:d9:bd:3e:4f:a2:
89:b4:f9:0d:4e:e0:ae:98:fa:e6:bd:43:8e:44:b0:55:f1:e0:
63:fd:87:3d:e1:25:37:c0:8a:a9:2a:cb:05:25:91:68:49:fc:
68:ec:55:38:0c:b3:d0:fe:02:80:46:9b:6e:85:e8:fc:62:44:
0b:62:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:11 2025 by rpki-client