Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: L8HsuHT2AL+aqMwu7Yne7RrRgMm4QGU7cP48tN4KEOs=
Subject key identifier: 40:A3:FB:D1:06:C8:DF:56:B5:8B:92:D7:DA:5B:73:E2:F8:A2:7B:7A
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 0198D5F1BE582407DBE8225DC05B7E6F2510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: KBwvFgvHkf8UVCvJUC44A+XpZLqjxB8WWZiyxlUBfBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:be:58:24:07:db:e8:22:5d:c0:5b:7e:6f:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=40a3fbd106c8df56b58b92d7da5b73e2f8a27b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:eb:aa:48:7f:cf:ce:c3:58:43:d2:f4:dd:
08:d0:a8:5f:3e:f6:69:81:62:88:e1:02:e2:44:cf:
de:4b:62:ea:0b:86:be:a8:91:72:c9:28:79:4f:89:
d9:68:4f:05:1b:c9:da:1b:a8:53:e6:85:5b:54:f3:
e5:26:2e:91:a3:8d:df:1d:62:99:ab:12:5b:e5:8b:
15:36:23:98:e1:14:92:a8:cb:ed:46:13:49:77:82:
3a:52:a5:08:7d:f2:97:8a:88:61:8c:5c:56:8b:c6:
f6:0e:b2:31:37:0f:16:78:62:85:ab:a3:6f:46:f5:
b4:c8:7e:3f:8f:09:9f:e8:94:93:91:97:c1:ec:8a:
6e:16:d5:2b:5f:a0:a3:3c:82:39:2a:9a:42:1d:f9:
46:36:74:60:b7:5d:ff:4a:41:b8:42:ab:9b:fe:f9:
fe:a0:de:4d:ff:c5:fd:61:28:ab:55:83:f0:da:69:
d8:c3:85:19:ec:11:b5:67:6b:ba:f8:33:8f:18:bd:
94:f4:34:08:97:ff:a0:87:ef:9b:e5:cb:2a:73:f5:
72:97:d8:ce:62:1e:68:7a:cd:ed:06:c5:b6:95:af:
b5:f7:40:ae:48:e1:cf:5e:33:69:56:a4:5e:98:33:
e7:84:32:5b:36:32:f5:7e:b7:b6:66:0b:65:7e:b6:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:FB:D1:06:C8:DF:56:B5:8B:92:D7:DA:5B:73:E2:F8:A2:7B:7A
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c6:cf:2b:d0:f2:42:86:f7:02:47:67:17:87:1c:c2:f9:b0:
bc:13:b1:01:7f:51:58:d2:59:b5:ef:03:02:4a:c1:54:1c:87:
d2:db:4d:ac:f7:03:6b:7f:e0:e0:18:91:0c:5f:07:92:b3:ca:
bc:95:5c:48:b3:fe:af:7c:8f:b5:44:7c:90:85:55:05:0e:36:
39:7b:34:ed:1b:6d:c8:30:a7:a6:f7:2d:79:37:88:4f:65:00:
0c:a9:73:8e:6e:04:a6:0a:53:10:19:3a:81:4c:90:f3:d4:c5:
b7:f5:a1:ae:a3:d5:22:61:82:8a:6a:43:ee:ae:46:9c:fd:a7:
7e:46:6d:08:af:0f:31:90:5d:db:10:39:7c:ab:79:f2:1e:e1:
f4:20:ba:8b:56:ab:63:b5:2e:12:de:5e:f5:5b:f8:1c:56:d8:
dd:96:76:a2:fe:9f:46:bb:92:41:b5:cd:93:64:68:a1:b6:74:
91:e8:0c:59:a7:02:56:c2:ed:f2:dd:1c:67:80:21:c1:53:c7:
1f:24:85:01:c8:be:d0:8e:b6:1f:7b:b8:31:e8:9e:e3:4c:37:
29:72:3c:97:4b:5f:04:9b:91:37:21:13:b2:78:5e:ce:27:f3:
32:06:dc:2b:06:8f:35:9e:8f:39:9f:30:b4:91:9d:9f:64:42:
93:62:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:57 2025 by rpki-client