Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: QH16uViyBFcuLnUBmC68az2uIPOde0eEi0YZO1McnZE=
Subject key identifier: 3A:9D:35:39:E7:00:78:78:4B:70:2A:00:7B:E3:9E:B8:31:54:97:E8
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 0198D4E0539208DB3D10FBAC81D84617F030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0ED0
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: wf8lMebMUT7HYTYocTdd8wtwEC8+gVYRTwCzG4DC4nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:53:92:08:db:3d:10:fb:ac:81:d8:46:17:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=3a9d3539e70078784b702a007be39eb8315497e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:65:35:f1:82:a3:e1:68:88:3e:70:cb:e0:
c9:b3:5e:c8:d1:1b:24:8d:e3:02:af:31:dd:c1:4c:
90:22:00:84:72:91:8d:b4:62:66:c4:19:cc:44:ca:
f8:aa:89:3b:f8:f5:7b:cb:c5:a4:b4:d4:7f:3a:58:
88:5a:af:66:d2:44:ee:6a:b2:07:45:89:61:1e:7e:
87:12:55:4c:6c:65:4e:64:9e:19:1d:0f:78:6b:2a:
c1:93:fb:13:47:a4:97:0c:a1:7b:ec:1e:9d:14:ff:
90:53:18:c9:9a:16:ae:93:83:79:a2:fc:be:64:e6:
6c:bc:fe:28:cd:df:e1:06:65:d1:77:73:68:11:89:
07:90:f2:28:b9:1e:8c:32:3e:f7:ed:f5:06:e8:22:
18:23:ed:90:ff:66:8c:c7:ca:2b:2a:ef:33:eb:6f:
d2:66:f2:ea:4e:25:6e:e4:5b:df:71:a0:f1:aa:25:
a7:6f:b4:5f:53:4d:26:2b:33:16:c3:4e:03:c5:24:
fb:bb:3b:e5:b4:0d:55:97:3f:39:9b:48:1e:c4:e5:
7b:a5:ef:0b:d9:f5:1b:7f:3b:a2:c5:f9:b9:f5:e6:
b3:a7:04:f7:5c:6b:a2:41:76:04:ed:bf:df:2a:43:
65:15:3a:0d:9c:69:7e:d3:f4:24:a3:16:85:e1:71:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:35:39:E7:00:78:78:4B:70:2A:00:7B:E3:9E:B8:31:54:97:E8
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:43:c2:c7:4e:98:7e:7b:fa:cd:3c:ca:ce:93:e5:c0:34:a2:
aa:b6:cc:92:b9:27:3c:07:a4:4f:74:f1:1e:f9:02:9f:65:b0:
a6:72:85:23:86:89:79:46:90:28:05:1b:5f:88:12:ac:5c:cd:
a8:52:4e:9c:5f:94:db:04:79:07:b2:a0:42:77:2e:a7:8f:99:
03:65:74:5c:71:e2:34:a0:7f:5b:c1:b2:18:7c:fd:2f:ab:41:
92:e2:54:b5:a0:c1:04:2d:67:69:f0:17:b0:99:84:48:89:b9:
57:18:0a:15:84:0f:ae:5e:79:cb:e3:b9:d4:80:c7:54:95:fb:
6a:01:81:f3:64:4f:5a:0d:66:81:a8:db:aa:cf:a5:11:05:8b:
31:48:db:cc:42:e4:10:17:c2:45:ff:41:63:dd:94:11:bc:39:
5a:ae:a5:73:81:6a:c6:aa:e9:fa:ab:2d:cd:98:e3:34:3b:ec:
85:f8:9d:73:d2:e5:f8:63:02:dd:80:97:92:b6:99:f0:0b:81:
a2:fb:a9:6d:7d:dd:34:0d:05:8c:39:47:ba:f8:2a:d8:6e:fe:
6f:e4:cb:80:db:2d:72:42:c4:1d:b3:82:ca:03:7c:84:2c:f0:
a9:de:d6:5f:84:a4:7c:5a:52:f7:2d:6a:b5:15:17:63:9b:30:
82:9b:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:37 2025 by rpki-client