Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: ofcHLsuykOrxh9q1W/Vpg+ldMOnhfpOcDtxiW6mJPRQ=
Subject key identifier: 40:43:21:FB:7B:F8:74:94:1C:02:DF:08:D5:59:20:DE:3D:96:6C:72
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 0198D4E06E09B89F128833D5FE36AFD0DF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: jvr-TtmshyO-21Athyko7-oCA0g.roa (hash: YbFNgrbQ4nYeYFpzPZPmunVsALPP8JY0whWvWBRLdqk=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: r2s/5bLCHqQNpGaUuDog6YBOlQ3l489q9Y+FxRYVmKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6e:09:b8:9f:12:88:33:d5:fe:36:af:d0:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=404321fb7bf874941c02df08d55920de3d966c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:9b:d3:27:ff:52:75:5c:37:94:48:52:63:
36:65:15:ee:ea:16:de:b8:20:42:32:71:01:af:d5:
1b:22:ba:65:b3:33:33:78:fa:41:44:a0:a1:b0:f3:
94:58:d1:fb:33:39:df:8d:d0:3b:43:02:b8:44:c3:
e6:ed:03:d8:54:cf:c0:dc:86:af:fc:15:1f:d7:65:
de:e3:ec:bc:4a:98:c0:ca:2f:a6:c2:23:36:da:70:
1b:79:63:74:bf:5c:4d:df:c5:3f:41:c2:75:c8:27:
5c:68:89:d4:9b:b2:75:9d:cb:af:42:3a:7e:36:b1:
42:12:96:c4:e7:b3:e2:8c:15:96:9c:25:8f:ff:0f:
9a:a4:f0:bd:32:f7:4a:d5:17:22:be:04:6e:51:4c:
4f:c6:de:1c:4d:75:43:a1:7c:fc:82:58:c2:e0:74:
08:7f:1e:e2:55:67:e5:63:c8:ac:f0:2a:fa:0f:5c:
29:3a:55:fc:f4:3b:d3:b9:0f:12:2d:63:cd:bc:af:
4d:3b:7f:ea:2f:68:8d:12:cb:b7:69:49:ba:b4:bd:
64:fb:ba:77:0f:ce:df:c7:f5:fa:1a:f0:d9:dc:cb:
f3:1f:09:2c:c1:9b:88:9d:00:01:8c:e8:0c:ac:e4:
9c:f5:d8:36:52:aa:fc:ed:61:fe:2e:73:80:99:5e:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:21:FB:7B:F8:74:94:1C:02:DF:08:D5:59:20:DE:3D:96:6C:72
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:e2:cc:31:be:00:cb:15:49:d1:1a:25:73:3e:43:d5:f5:
7d:a7:a2:37:ce:03:6b:b2:da:d0:a3:56:e7:18:6a:57:bd:9b:
14:f0:03:d3:49:66:c1:99:d5:f6:6b:71:c2:4f:d3:77:2e:2f:
6f:4c:0f:24:1a:e7:46:97:4f:40:43:6c:d7:5c:39:64:84:b5:
3e:65:cd:86:37:57:c7:59:02:e5:5d:ea:7d:79:17:2a:38:26:
84:77:1c:df:3d:8a:67:6b:ea:3a:60:dc:3a:cc:b9:7f:c7:7a:
28:23:dc:9f:74:30:f1:d4:cd:a8:09:d1:93:85:dd:65:6d:83:
d4:ad:1a:f1:a5:65:da:cd:f6:88:ba:da:f3:b1:cc:ba:36:54:
53:66:c2:db:38:fb:59:40:2f:38:11:9d:e9:c3:d4:d3:ee:c5:
c6:4a:a1:6c:ab:e7:09:6e:73:f1:cb:e0:a3:a1:46:01:7c:a9:
8d:db:46:43:a0:98:84:9a:33:de:21:45:4f:2c:15:91:a5:58:
d9:a7:32:27:ce:85:b0:4d:08:38:33:51:06:4c:54:d9:7c:a9:
c5:82:fe:0f:25:28:ce:34:a2:15:10:52:b5:52:e1:a9:8b:f9:
84:d1:0a:ec:7d:ac:d3:26:f2:e0:bc:48:e1:27:e0:d4:99:b6:
3c:2e:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:54 2025 by rpki-client