Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: 3Olay08/icbDsRJHnctKDMsPA720rYOhkIPSvGv/Kio=
Subject key identifier: F7:24:44:9A:86:32:CC:42:D2:0F:AC:35:28:C3:26:BD:98:6B:81:84
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 0198D4A7C2E28068817F136CE4DBB902B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:20 +0000
Manifest this update: Sat 23 Aug 2025 02:00:20 +0000
Manifest next update: Sun 24 Aug 2025 02:00:20 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: d4mplIu6LyG5mzHjpKO3YY26apiEwONKiZvdUV0bql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c2:e2:80:68:81:7f:13:6c:e4:db:b9:02:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Aug 23 02:00:20 2025 GMT
Not After : Aug 24 02:00:20 2025 GMT
Subject: CN=f724449a8632cc42d20fac3528c326bd986b8184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:9b:ee:21:9b:98:e3:67:e3:3d:e6:81:95:
fe:05:e6:42:27:e6:f8:d1:34:a4:be:cb:02:0b:31:
9e:0b:53:f9:00:a0:64:25:87:06:40:54:b8:23:25:
5f:9b:0d:1a:92:57:15:43:ec:4f:2b:27:ae:f6:fe:
49:b6:ca:99:83:4a:0b:f7:96:fd:2d:7f:04:dd:a5:
f9:25:1f:f7:97:a5:29:3a:c1:5d:84:0e:fe:18:cf:
19:84:8d:47:12:a9:ad:2b:2d:b0:85:27:f1:34:7f:
88:91:15:8d:d3:c9:7f:00:a3:bf:26:d6:c3:3e:5e:
22:c6:be:80:90:0c:38:1f:df:66:c9:51:cb:8c:82:
b8:f1:2b:ac:14:64:fc:2b:0d:44:2c:33:1d:f6:69:
cc:86:89:29:3c:b0:fd:f4:f5:e4:17:f8:c9:85:7d:
bc:81:b0:27:19:8b:ca:e6:d3:97:07:28:dc:72:48:
de:f4:cf:c6:00:64:39:23:db:c2:55:35:72:a5:c7:
43:52:df:c2:de:5e:6d:e8:ed:42:94:f8:b6:c0:d0:
0c:e3:96:7f:86:f1:d2:cd:d8:bf:ea:d5:7e:c1:8a:
a7:ff:19:75:77:74:ff:d6:da:e1:52:4d:82:0c:40:
9e:fa:14:b7:95:4f:b7:66:39:c1:8b:1d:46:8c:3c:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:44:9A:86:32:CC:42:D2:0F:AC:35:28:C3:26:BD:98:6B:81:84
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:20:d5:87:e4:7c:f3:bc:4a:ad:9d:0a:de:1a:f4:0b:cd:9f:
f0:88:f4:a6:be:9a:10:7f:b2:a2:13:81:0e:43:5d:23:67:d5:
4e:55:7e:cb:46:f8:13:4d:06:d7:a4:35:77:75:90:6c:6d:66:
89:5e:3e:ea:e9:cd:59:f2:71:61:ac:11:5c:24:d3:1b:2e:75:
48:00:4a:4d:c6:fc:d7:75:89:43:6c:ab:6d:dc:0e:e2:ba:21:
af:f2:dc:a5:78:78:99:e0:c7:e4:ec:f5:71:18:f9:69:e4:e0:
82:08:da:42:f9:27:de:af:33:f7:20:1a:b4:e5:02:0a:69:2c:
06:64:7e:06:80:9c:a6:73:b2:01:26:45:8d:00:bf:35:b6:7e:
b3:9e:91:85:6a:3e:a9:11:fe:04:35:16:c1:f4:7f:c4:2c:dd:
5b:97:d2:33:0c:06:0e:9d:fb:f9:2f:8c:ab:bb:a8:4a:b7:8c:
35:91:2a:f3:db:40:fb:28:a6:11:2d:c9:d7:77:a0:68:2d:22:
94:cf:91:b8:6a:92:16:1c:14:bb:51:0f:0f:d5:5a:80:e3:94:
b9:60:23:d3:34:38:79:86:54:42:43:d8:7e:83:39:f3:3f:69:
41:dd:6a:df:94:25:8c:20:3b:de:4e:b5:54:b1:1f:54:f6:00:
bb:00:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:06:45 2025 by rpki-client