Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: 3Y3rPVeca/MDArQurqGveZRl6jwFKYbtRqVrzs47eC0=
Subject key identifier: FA:37:D0:5A:20:09:FA:2A:F4:9B:02:A1:00:18:DA:BF:41:1C:D3:F7
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 0198D54E0A9B9EC2D3E75F67C0517E318AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: zRrFZCN6pceyAxdo+8xN9ysvmLCUh2xX0Td4oMSHRIA=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0a:9b:9e:c2:d3:e7:5f:67:c0:51:7e:31:8a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=fa37d05a2009fa2af49b02a10018dabf411cd3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:4a:54:6e:21:ea:5c:a6:9d:63:34:53:a9:
60:a0:f8:01:37:2d:13:8e:9f:74:59:b1:6a:7d:1d:
be:66:4f:78:e0:34:f3:8a:99:04:86:99:bc:f6:42:
9f:84:ad:50:54:57:2d:02:8c:c3:cc:9f:1c:0e:5b:
33:a1:64:e8:61:63:9b:d5:65:a5:9c:86:7b:26:81:
27:4c:15:ea:5c:b7:32:06:bb:66:3d:8d:58:1a:db:
c1:0d:56:8a:e0:6e:f9:26:56:f5:0f:d2:a8:9d:73:
ee:ff:2a:7b:ae:92:e1:be:d9:70:0d:00:f4:5e:c9:
0b:e2:a4:96:ff:84:f7:c7:4c:af:c5:45:8e:2b:73:
dc:97:76:d1:31:b2:f2:db:e3:57:d4:04:b9:4a:8e:
94:41:36:21:7b:b3:37:da:1f:d4:7d:03:b0:7b:b6:
5e:46:af:36:53:dd:b7:5c:cf:5b:3f:a6:2b:14:a4:
a0:97:6d:c5:14:61:1b:65:30:1c:89:90:65:1f:79:
b1:69:56:e3:4d:56:13:f3:ea:ee:e0:4e:11:27:23:
1c:1a:3d:95:bf:b7:77:1d:d8:45:ce:2b:ae:c7:ea:
11:f3:b0:b6:e7:bd:f9:8f:a6:11:58:76:a1:f8:85:
6a:96:25:7a:4c:91:22:56:a3:e4:5e:bb:63:35:7c:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:D0:5A:20:09:FA:2A:F4:9B:02:A1:00:18:DA:BF:41:1C:D3:F7
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:13:fa:c9:5a:11:63:23:a5:1c:c6:10:0d:6f:c2:e2:e6:70:
eb:a0:26:8c:7d:4a:cf:dc:c4:ee:3a:6b:02:05:f2:11:91:f9:
4a:54:34:da:3a:32:05:d3:84:e3:aa:cd:ff:46:3a:99:10:cd:
27:e4:f8:d2:41:dc:af:09:07:0c:dd:88:4d:c0:f4:db:6b:73:
13:f0:b0:be:3c:77:fe:95:1a:ae:f0:70:c0:28:f1:bc:ef:70:
9c:61:f5:9d:d6:69:e5:9c:6e:0e:78:f2:d4:81:69:8a:c7:89:
3c:83:a6:b4:aa:e2:68:9b:c1:82:84:4e:2e:07:23:81:7b:4a:
0d:28:0d:eb:de:5a:bc:d4:84:24:54:23:df:bf:f1:0c:b3:e2:
04:2d:fc:9f:60:ea:6c:4e:eb:a2:e6:31:8f:42:bf:a1:61:1a:
47:b2:a0:ee:f8:f1:4f:e9:26:bf:76:11:89:f3:fa:15:0e:e3:
33:69:19:0a:27:c7:88:15:6e:19:74:5c:f5:19:98:f9:11:b4:
6b:c3:e7:f1:bb:90:5b:e5:56:78:2f:81:ac:89:62:b1:ac:aa:
12:e7:1d:61:2a:4c:62:19:85:c9:19:04:90:72:ec:02:ea:12:
c8:f0:98:1d:ab:cd:47:e1:4b:24:80:06:71:d3:0f:d0:2b:cc:
fc:77:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:41 2025 by rpki-client