Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: cO+3iJ+0p+Plo3cCqwDOnbzI/qvrSnoPJfR2Lviw54E=
Subject key identifier: 8D:6F:82:41:EA:17:8E:57:FD:B4:E7:18:AC:9F:7D:BC:8B:42:BF:A6
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 0198D7E145636E25C603E4A9090607E08A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 17:02:01 +0000
Manifest this update: Sat 23 Aug 2025 17:02:01 +0000
Manifest next update: Sun 24 Aug 2025 17:02:01 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: nTH2wmiywkWvOWJlJ81e5ya06HeCFgnmdjyNAlIVEd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:45:63:6e:25:c6:03:e4:a9:09:06:07:e0:8a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Aug 23 17:02:01 2025 GMT
Not After : Aug 24 17:02:01 2025 GMT
Subject: CN=8d6f8241ea178e57fdb4e718ac9f7dbc8b42bfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:7f:98:cf:be:4e:b3:81:33:00:38:9a:c8:
dd:5d:0c:60:29:11:bb:d2:cd:38:05:13:30:44:6f:
2b:e2:58:a9:19:d3:da:75:b9:58:74:c2:5d:74:11:
e4:00:fe:64:29:fa:05:a7:0c:5c:99:36:f9:17:fa:
12:de:46:bc:5e:4b:fd:6a:d4:13:dd:76:96:5e:5d:
c6:76:5d:70:52:29:48:ab:b9:e1:98:7b:c9:63:8e:
9f:d7:05:1e:b1:6f:c1:77:56:08:b0:00:c4:ec:df:
0b:48:e2:ef:6e:49:86:19:3f:20:5b:1b:aa:58:7a:
ba:ed:1d:a5:3f:68:ac:93:9c:b1:03:72:91:cf:bc:
47:7b:ef:ee:eb:eb:3a:be:cd:99:9d:5a:2b:16:43:
09:ad:a6:c3:0a:46:6d:15:01:0d:f3:bf:f1:c5:45:
96:e5:bb:5a:20:d6:4c:ba:02:67:3f:9e:3f:45:8d:
d7:3f:1d:d7:84:8e:86:1a:0c:1c:47:7b:c9:f7:e2:
a6:6f:4b:36:9c:f7:82:9b:86:84:dd:6e:16:94:e9:
7a:69:a5:f7:85:ea:3f:f7:5d:d4:a8:00:79:e4:f5:
db:bd:93:28:10:53:f1:3b:69:89:1b:07:4d:4d:e3:
13:4d:83:d3:8e:3e:2e:ba:4d:0a:19:64:df:35:4a:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:82:41:EA:17:8E:57:FD:B4:E7:18:AC:9F:7D:BC:8B:42:BF:A6
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1e:fd:ee:cd:7c:74:5c:6a:5b:f9:f9:cc:fe:ce:d9:e4:a1:
5d:38:4b:4f:7b:ad:c2:e0:32:96:7d:9e:44:1a:06:d1:4c:53:
ae:f8:8d:50:88:73:fb:f5:40:2b:51:e6:17:84:94:a7:89:7d:
f0:7d:64:d7:ed:33:ca:7e:89:36:e5:b3:02:fd:9d:b2:80:03:
fd:3a:f1:b5:91:8c:b2:69:f2:43:a1:ed:0b:d5:6c:a7:7c:f3:
94:67:fa:8b:ad:8b:59:f8:d4:9a:ba:1b:a8:6c:b7:3e:73:4d:
91:f1:c1:43:87:7c:de:ef:42:7a:f0:7f:e0:90:74:04:9b:e8:
b2:b9:3a:77:9a:28:00:48:50:f2:a2:8b:b8:3d:8c:6e:3b:30:
79:5b:ac:2b:85:be:8b:ca:3c:39:00:f1:94:2e:32:fe:b3:f3:
5d:17:63:28:b3:70:af:55:85:d7:4d:50:7f:86:09:77:f4:87:
92:3a:50:e1:68:26:ae:b6:2e:99:d0:18:90:fd:9e:27:74:4c:
7f:79:9c:a7:b7:4b:61:27:78:5a:75:1f:2e:ae:81:46:18:b2:
e3:24:38:22:9a:a5:9f:99:ba:98:b8:7f:c5:e1:91:7b:09:f9:
fc:23:2a:6e:9a:cc:18:7e:c9:cc:8d:2f:df:a1:77:83:54:a9:
dd:f0:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:20 2025 by rpki-client