Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: R+vVF3UirWBP3Ytt+60VLjdz2nPPM6+NGEOD6vBBe2Q=
Subject key identifier: 48:3F:81:33:69:B3:4B:BB:FF:4A:83:73:2C:3A:77:F0:17:E1:A4:3E
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 0198D73B60E6902D2FBA92417D4B97934B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:49 +0000
Manifest this update: Sat 23 Aug 2025 14:00:49 +0000
Manifest next update: Sun 24 Aug 2025 14:00:49 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: K5/2jN+gBPwySkRa5gqOOWzVzXEgGg1GogdTrPQe6+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:60:e6:90:2d:2f:ba:92:41:7d:4b:97:93:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Aug 23 14:00:49 2025 GMT
Not After : Aug 24 14:00:49 2025 GMT
Subject: CN=483f813369b34bbbff4a83732c3a77f017e1a43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:1d:b7:4f:31:29:a6:c8:1f:8f:9c:78:61:
43:d0:da:25:65:02:a4:35:f7:4f:6d:79:14:c8:65:
6c:4f:88:b0:74:36:ea:7c:00:af:0b:da:32:fa:2b:
a1:9f:57:9e:27:30:98:22:cc:3b:3c:36:55:fe:93:
98:d3:14:7d:ed:e9:3a:4d:23:83:91:7a:84:1b:ef:
fa:ef:64:d9:67:45:15:18:1d:de:58:26:4f:e0:14:
01:9f:63:9c:63:f5:3a:d2:c3:96:09:1c:32:87:7f:
34:1b:1a:61:86:e1:91:49:6f:93:14:44:f9:38:01:
b9:12:09:c4:45:ed:ce:08:c5:25:d2:dd:dc:0b:5c:
b3:37:91:b4:4f:77:a4:e5:48:59:5b:98:8f:bf:90:
a2:af:3d:89:dd:4f:0e:77:3e:e7:60:69:2a:59:06:
54:61:44:14:57:48:46:ec:80:db:d6:3d:bf:41:c2:
58:44:09:c8:5d:c1:b8:4f:89:d6:4a:17:3f:cd:5a:
6c:e5:16:28:a6:64:12:d1:96:ac:45:b2:45:22:6b:
8c:2f:7c:03:4b:73:6a:4d:9f:aa:ee:cd:4c:8b:e2:
96:aa:d4:96:9b:fe:8d:46:68:42:42:ee:0b:19:99:
71:2d:5f:0b:3a:32:77:d2:a9:1b:5f:49:26:16:ad:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:81:33:69:B3:4B:BB:FF:4A:83:73:2C:3A:77:F0:17:E1:A4:3E
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:43:77:3c:72:7b:4b:33:98:d7:88:84:13:13:41:22:ad:61:
6e:bc:44:b6:d3:18:99:ea:89:ba:be:32:25:e9:b5:b7:f5:06:
50:92:f4:8b:68:fb:f8:81:0c:92:3e:36:d7:fa:6f:82:22:1a:
d6:73:6a:d0:39:de:14:cd:24:1a:b9:bb:9d:5e:f0:79:6c:76:
5c:5c:06:f7:d7:7a:40:bb:e7:f5:11:38:34:6e:06:05:fb:d9:
2a:72:82:dd:a9:5c:35:6d:21:97:a8:e2:c6:ce:4e:53:d3:ee:
1b:11:84:9c:c3:f8:b5:d0:5e:bb:ee:b6:8d:c7:35:65:60:58:
3b:43:69:11:77:bf:bf:4b:7d:e7:91:31:a9:73:57:b2:f9:8a:
f8:ab:15:0d:38:02:3c:29:25:c9:e1:f1:c4:e4:f8:bf:3a:19:
3e:0e:b7:f2:38:6d:18:d3:cf:79:75:f4:73:82:b6:14:fa:e6:
35:b2:70:41:b9:ab:30:9c:6f:9e:3f:61:07:eb:0b:e4:7a:39:
3f:03:b3:23:55:d3:23:9d:7e:03:6e:9c:31:22:2c:79:1a:85:
c0:b6:0d:e6:6b:af:ea:64:4d:f7:8a:e2:17:35:a2:52:1d:a1:
c0:f8:9b:a5:32:e3:ae:e9:9b:1e:23:b6:6c:e0:78:a3:c4:2e:
ac:bd:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:09 2025 by rpki-client