Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: T49R/PJiFQLt+5tBYLoTtYlFACgH4gPiAaxQ2x8EcBA=
Subject key identifier: BC:F9:F1:3F:BB:67:AD:89:B5:4E:DE:84:EE:BD:96:04:F3:F2:F1:20
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 0198D54EA8F6155CA555E9E3C21D9F6C37B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: znJ7z63pEDkFnjkL/Oa52eV/MfsGbWL1ke+8J0nixNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a8:f6:15:5c:a5:55:e9:e3:c2:1d:9f:6c:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=bcf9f13fbb67ad89b54ede84eebd9604f3f2f120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:0b:ed:84:47:40:07:f6:23:ba:b3:d3:50:
f0:1d:b9:fd:d8:6f:ad:dc:d5:c8:8e:78:d7:f0:9d:
57:fe:81:98:be:48:c0:3d:1e:f0:b6:90:34:d4:5d:
85:44:d5:46:4c:03:9b:d1:b3:bc:c0:db:66:21:a6:
5d:93:40:12:c6:5f:1e:b0:14:4d:80:9b:67:2a:60:
19:ac:cb:4c:7b:b8:6a:92:9d:48:35:11:b6:a2:18:
b0:83:ba:fb:4e:bd:a1:35:5c:2d:fd:dd:22:83:96:
1d:79:97:6a:1b:ab:bb:9d:5d:53:eb:0b:08:b8:30:
b1:75:75:38:e6:b4:e2:45:2a:92:b0:eb:16:6a:af:
f4:81:e8:34:56:62:c6:7e:a9:aa:ed:c2:11:1d:60:
43:9e:93:b6:0f:f7:41:34:c1:2e:3e:08:ed:a7:49:
6a:ec:93:23:b4:32:a7:5b:62:07:ad:f1:7c:8a:69:
24:6f:aa:8b:b4:46:95:6a:ed:74:95:d0:07:47:e6:
f4:20:1c:06:08:35:97:75:2b:48:91:6f:7d:3a:ca:
f3:77:e7:2f:55:54:06:20:8e:f5:e0:ad:ab:f5:b4:
b4:65:60:d8:5c:e5:89:4e:a8:b8:d2:4f:35:44:94:
df:b5:4b:a4:9e:88:92:e4:d2:ca:54:3d:3c:40:78:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:F1:3F:BB:67:AD:89:B5:4E:DE:84:EE:BD:96:04:F3:F2:F1:20
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6a:d7:e9:bc:bd:dc:24:b3:15:1f:94:6c:15:cc:bb:10:b0:
75:32:98:f0:56:14:38:86:db:88:91:96:6c:1a:e9:c3:b7:43:
a5:7b:09:f5:12:5f:b6:a6:5d:85:03:56:70:37:2f:ad:4f:e0:
69:b9:a6:a7:1e:f9:a9:53:ee:9e:8f:b6:87:95:51:1b:90:dc:
e7:81:be:e6:cb:53:d4:c6:d9:ec:70:72:ea:4b:9f:3b:17:6d:
80:6d:f8:cc:a3:b4:c6:73:14:9f:92:b3:22:7e:e4:48:36:17:
4e:92:94:a7:2e:80:b7:cb:60:d6:53:b5:d5:83:7b:d8:9c:a2:
1e:c8:ab:52:1a:81:f8:f8:8a:31:8d:cf:ec:97:f4:1b:19:17:
7a:a9:c2:8a:6c:a2:2e:4c:06:d6:4a:77:a3:4d:c3:50:eb:76:
71:d1:04:42:4e:8c:4d:76:3b:5e:cf:8b:89:70:a3:12:07:df:
82:9f:ce:21:a8:7a:69:3d:ec:29:f8:49:7f:ad:54:28:8c:25:
45:cd:05:03:5d:df:08:a3:e6:fb:f7:b6:a6:12:48:49:a0:1d:
7b:d7:33:e9:0e:70:79:6b:dd:51:7d:64:89:20:7f:42:1b:4a:
c6:a7:19:ab:0a:fb:58:d9:72:08:ba:dc:95:79:e9:4a:1e:8a:
b1:af:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:31 2025 by rpki-client