Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: MBFDqGVkqUtrs+2mMBO1nRj7Cvp9gSa+9Sw0B2KdXk0=
Subject key identifier: 91:02:ED:B2:82:D8:01:80:0E:8B:E8:B9:60:58:BD:7A:28:5D:0C:64
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 0198D7062A9FB7987C351B5B8EE5FC3286DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 13:02:42 +0000
Manifest this update: Sat 23 Aug 2025 13:02:42 +0000
Manifest next update: Sun 24 Aug 2025 13:02:42 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: exq4u1SZfA7x1zIrKqzjzge4W3E.roa (hash: 6hKC5aSxn1eYqBHCVJ0qgpvsfeNY0GeupedGw9IKcyA=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: Sl1DFFpLHfVpV85QWafHIFO5nKVFp6ysEEfG0suw+yo=)
4: zIANn_XjTHpNl_tFmNq6MbPyZNE.roa (hash: b1/JePGfEJmKChck6onI1sptZi1SnAwXlnetMtXFNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2a:9f:b7:98:7c:35:1b:5b:8e:e5:fc:32:86:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Aug 23 13:02:42 2025 GMT
Not After : Aug 24 13:02:42 2025 GMT
Subject: CN=9102edb282d801800e8be8b96058bd7a285d0c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:3a:30:0b:f7:34:dc:c6:26:51:ff:fd:50:
a2:b4:8a:de:bb:72:2e:86:1d:2a:34:b3:5a:cf:31:
9f:29:2f:32:8b:d3:fe:a7:73:96:b5:12:4a:63:20:
09:ec:35:30:7b:df:f7:5c:ca:d6:0e:8c:8c:21:fd:
42:94:9a:d3:f7:5f:4a:14:3d:c9:d9:1b:61:f5:74:
58:05:4a:6b:91:99:90:4c:66:8d:d3:6c:d3:5b:d0:
f8:46:d8:4b:dc:c1:e0:8c:d5:3e:86:d0:0c:07:e4:
e7:be:f1:d5:bd:1b:f8:01:d7:17:e0:7c:de:62:cb:
1a:a6:0b:f2:fb:25:7d:ce:e6:17:34:32:f3:f1:3b:
02:0b:54:0f:64:33:a1:7e:04:23:9f:15:01:79:4d:
fc:74:44:40:ed:0a:24:19:2d:36:05:b7:42:d0:2e:
14:7d:fb:74:52:c0:4d:f1:c2:a5:81:05:3c:63:6f:
90:0b:48:1c:b8:18:b2:40:3e:8c:cb:96:ee:6f:cc:
9e:6a:f6:65:01:41:f9:66:7f:af:0d:81:af:3f:6b:
88:45:f2:a0:e4:d2:7e:7e:7a:ad:e6:56:72:c2:a1:
fb:0d:1f:0e:fa:68:1c:ab:f2:85:2b:e5:18:f8:62:
fb:e3:31:b5:00:23:66:f8:1c:f7:4c:7c:71:66:68:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:ED:B2:82:D8:01:80:0E:8B:E8:B9:60:58:BD:7A:28:5D:0C:64
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:69:6c:fe:7d:19:78:4c:13:39:13:74:a4:fc:05:1b:11:6e:
03:5a:72:c5:84:a0:ae:e4:19:57:60:6e:31:01:17:d9:84:1c:
ea:e4:c9:16:dd:44:c6:e7:05:35:1d:e7:67:6c:c7:ec:5e:80:
b9:fe:d7:12:93:d2:35:eb:56:f1:26:65:32:3e:9b:ac:9a:5a:
47:58:63:41:a8:ff:f5:5b:1a:58:f8:77:92:24:7b:2a:64:5d:
4f:27:1c:86:3b:4b:77:8f:92:25:6c:1f:53:59:16:73:85:64:
38:12:24:99:94:44:dd:aa:09:14:b2:ea:11:fe:46:e7:0d:80:
50:9e:51:85:ea:41:79:10:c5:1e:db:ae:d8:d2:cf:58:c1:f4:
c4:e2:16:ce:d4:be:b8:29:7c:bb:a9:75:a1:b2:e0:4a:79:8c:
c2:69:e4:e1:a0:69:d4:31:90:c1:7e:2b:cf:c3:e7:3d:11:ec:
fd:94:35:3a:05:7d:39:a7:47:89:bf:b2:29:92:18:75:12:56:
5a:2c:32:df:75:00:28:b4:23:dc:6d:fb:e9:0a:af:24:83:1a:
2b:cc:e8:dc:89:0e:60:15:54:5f:9e:c5:72:47:32:cf:bf:54:
39:9f:34:8c:5b:6b:1f:76:2e:d5:85:20:4f:cc:b4:3c:a9:19:
db:4b:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:15 2025 by rpki-client