Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: BRSF7Akp/Gylq4aDD7BZRI4rD/A8NaAa9fYcqMhcw+k=
Subject key identifier: 2A:B0:4E:C3:D9:AE:D9:F9:5B:94:57:59:EE:17:AE:5A:2D:7D:56:D2
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 0198D58356FECEA7D3E8229D1617FED0B7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: Dm9E1Y+l3jKnnF38EaVqeXq4dXJAIqc4cXiqYNroO64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:56:fe:ce:a7:d3:e8:22:9d:16:17:fe:d0:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=2ab04ec3d9aed9f95b945759ee17ae5a2d7d56d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:4a:4a:3a:e2:31:b1:70:d7:cd:f5:84:26:
3d:79:46:e6:de:8f:2a:6a:41:47:a7:c5:3c:0c:a3:
bf:c8:0e:b0:14:03:4c:a7:b2:84:97:4b:91:b3:5f:
d8:52:d9:8a:18:64:a7:65:c7:8e:7e:8d:ee:e7:a1:
86:e9:92:04:8d:28:93:47:78:1b:15:40:df:c4:ae:
97:28:e4:04:5b:3c:a1:9d:49:fc:fa:7d:34:95:6e:
7b:53:4f:08:1a:9a:6c:9e:a5:82:2c:cd:ea:e0:4a:
c8:c9:c6:7f:2a:df:92:46:dd:8c:7f:0b:23:8a:18:
c0:bf:16:cc:24:eb:a3:20:42:bb:e6:81:58:ed:f0:
bf:35:e9:6f:b9:9b:2d:68:02:56:15:da:f6:bf:3f:
a7:7e:9f:1f:93:62:87:db:a9:cf:31:33:d5:cb:4b:
b4:c8:6f:05:ed:60:70:3b:2d:dd:29:89:27:a2:e1:
43:89:ab:2e:a3:11:d7:ae:72:9e:c0:a4:30:f4:dd:
9a:a4:90:53:e6:b9:20:b2:06:10:c3:05:c7:3e:21:
47:4a:45:27:d6:93:f4:89:ff:39:85:b4:a3:e3:c9:
be:f1:f2:95:9e:2d:7f:af:07:4c:08:42:18:15:2c:
4e:a2:84:ff:50:38:b7:2a:e5:d7:c4:42:ec:f4:b6:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:4E:C3:D9:AE:D9:F9:5B:94:57:59:EE:17:AE:5A:2D:7D:56:D2
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:f3:09:27:2c:20:8b:dc:f0:65:e5:c3:08:68:22:0b:ee:
a7:48:48:f4:fb:27:fe:0f:a4:86:9b:d2:27:6f:87:da:30:a6:
46:3d:24:e5:c6:f8:55:17:95:64:80:cf:c5:03:fd:b7:eb:42:
14:98:9c:fb:19:90:6f:11:2c:5d:6b:43:fc:e6:6e:83:20:34:
e0:5d:73:d0:80:17:eb:67:27:97:a5:78:bd:e0:98:eb:b2:99:
83:05:90:db:c6:fa:fd:2c:96:87:26:34:c2:41:08:96:1b:b5:
84:8c:6f:7c:69:2c:0c:74:61:c0:2a:bf:ac:fe:18:cb:0b:87:
be:c9:49:7f:79:ef:b1:d1:9c:dd:98:e4:a7:96:be:f7:94:9c:
f3:17:2c:62:b0:f4:64:6b:bc:4a:df:dc:02:51:b0:39:57:9a:
9e:e5:52:13:ac:be:ce:6d:26:15:89:af:80:0d:75:f1:5d:e2:
be:96:75:30:9f:98:48:bd:c0:59:2d:79:2e:8b:d7:46:c7:00:
4f:d8:7b:46:bb:70:b3:0e:e4:48:20:b3:24:bf:77:b9:73:2a:
d2:9e:90:b1:59:5f:5f:c6:12:25:d2:14:c1:a7:79:cc:7d:33:
73:08:b0:b5:10:7d:a9:ae:a7:89:21:b3:7f:af:a5:74:62:d9:
f0:40:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:47 2025 by rpki-client