Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: VMZVCoqx5lnqFRwBwzoDuGbq6ioC9B5fo8v10ZhGb0w=
Subject key identifier: 07:32:D4:C4:A2:97:20:6F:16:FC:C6:79:58:BF:84:77:E4:A8:D0:53
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0199FCFD6E698C54706E7773AE1571F4200C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 167F
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: 4obYgWp01kKnWEZ48dSXRjWtdqxSAOGdrGEZQTWOvow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6e:69:8c:54:70:6e:77:73:ae:15:71:f4:20:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=0732d4c4a297206f16fcc67958bf8477e4a8d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:31:3d:38:79:db:c6:fa:c5:4e:38:c0:32:
15:ca:20:af:c2:56:3b:74:50:41:45:61:dd:8f:b8:
aa:88:99:21:ae:ae:05:8e:c6:9a:a8:14:df:c6:08:
ef:3f:c7:b7:f0:08:3e:3c:e6:0d:87:dd:03:2b:64:
ad:69:0d:7a:8b:8c:60:5d:2e:eb:0b:bb:dd:96:f4:
87:c5:0d:ce:6c:8c:0d:c3:d9:a5:76:9f:e0:c1:e8:
77:13:ad:fa:cf:f9:e0:dd:6f:c4:01:65:24:03:92:
f8:02:ff:86:fe:12:3c:7b:aa:32:7a:9d:8c:7b:b9:
b8:b6:6d:54:c7:b4:72:3d:59:a5:6c:53:b2:99:87:
a7:c4:71:61:1c:c9:42:2c:d8:59:02:2d:9b:27:35:
53:91:44:f2:ef:99:40:7b:b8:ba:4f:5e:70:f2:7d:
01:1a:37:7f:32:de:47:e3:a8:50:39:36:5d:8f:f4:
72:fe:07:08:80:9e:f6:45:19:43:fa:8a:49:a4:97:
c8:40:7b:5e:34:59:23:41:7e:cf:2f:a8:eb:c7:c9:
44:cd:ce:01:b8:5e:f4:e0:c9:97:47:a4:02:87:21:
be:4d:08:ba:73:d0:4f:0a:06:f9:f0:36:e9:1a:67:
fc:66:f7:ce:62:07:73:8e:69:74:57:65:6f:46:c0:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:D4:C4:A2:97:20:6F:16:FC:C6:79:58:BF:84:77:E4:A8:D0:53
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0c:0b:83:7f:85:49:9e:a4:b5:27:e0:b7:37:e6:46:e4:70:
b8:7e:ff:0f:d0:87:00:72:51:6c:aa:07:43:bf:07:50:f6:ad:
6f:39:b6:69:7e:10:d0:dc:3a:b0:e4:62:63:3c:f7:ec:39:6f:
cb:d6:76:ba:9b:5d:34:56:82:b6:40:13:08:3c:7d:7a:2f:c4:
49:93:79:99:96:60:4a:aa:8c:3e:37:3f:75:54:fa:7a:8a:98:
7b:f5:87:dd:08:42:62:5a:b5:71:50:5b:63:ca:8b:78:db:ed:
f6:3a:7a:45:8d:bf:ac:47:34:46:d9:be:65:63:88:a0:5a:87:
7b:c6:dd:0e:49:b7:ef:db:6e:07:e3:7b:36:b1:c9:f7:84:2c:
b2:3e:60:d7:d4:81:5a:d6:35:80:8a:c9:93:ad:90:03:33:a0:
72:fc:34:79:3f:82:38:02:ce:00:75:7d:46:6d:ae:dd:1d:0f:
6a:e2:a1:cb:80:87:e5:ad:67:52:10:88:b7:aa:d6:a0:0a:a2:
e6:a0:e3:c2:5d:14:d1:f2:99:00:3d:e9:5f:8d:54:e8:67:fb:
5e:ca:46:4a:a2:d2:fa:f1:b5:a0:d5:39:2b:32:ad:06:6e:8b:
47:00:37:43:84:45:27:c0:43:71:d4:e9:94:ec:83:1e:4a:ac:
b5:00:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:31 2025 by rpki-client