Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: Gmsr0Ys8lCRlYB2BKpODx1dWH3FvsnE2yh+ufzAJTl4=
Subject key identifier: 1F:A7:F7:1B:DD:92:8B:25:08:A0:7A:CD:E4:9E:AF:BB:2D:A3:23:B8
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 0198D660A98F1CEC941C973CE050AB4FE846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:55 +0000
Manifest this update: Sat 23 Aug 2025 10:01:55 +0000
Manifest next update: Sun 24 Aug 2025 10:01:55 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: SjppvU7P37I8zFmf3jW5G4EZqhM8IZM1C25HznnPiHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a9:8f:1c:ec:94:1c:97:3c:e0:50:ab:4f:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Aug 23 10:01:55 2025 GMT
Not After : Aug 24 10:01:55 2025 GMT
Subject: CN=1fa7f71bdd928b2508a07acde49eafbb2da323b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:51:1b:58:40:ae:c5:b6:78:7d:9b:61:38:
1f:50:25:ce:e4:bb:29:6e:95:c7:db:bb:49:5a:86:
91:d3:b6:ce:15:07:da:96:ff:b6:17:9d:8b:92:31:
f0:64:a6:70:f0:03:71:df:4c:88:e2:4f:53:24:d1:
99:0d:2d:ac:30:87:b1:90:0c:d4:11:73:dc:f8:1b:
23:21:9e:e5:bf:f4:84:25:27:67:41:b9:aa:67:8b:
ef:df:32:6b:c8:1b:18:82:ea:da:3f:0d:15:51:9a:
77:7d:65:ea:f8:46:01:d0:16:c3:66:23:b9:a9:a8:
c2:ba:30:50:54:0c:c1:98:47:35:43:a9:91:78:72:
36:ba:0c:50:8a:c2:69:72:15:92:95:f7:6a:4a:a3:
88:3e:06:bb:25:0d:e3:54:6b:d2:46:d4:9b:2a:95:
7d:2e:f6:26:e7:87:99:1a:a4:c2:7d:56:80:7f:09:
6a:b6:7b:4b:cb:07:8b:67:f4:ad:8f:db:24:83:95:
a8:a2:0c:78:7a:8f:17:b4:8f:c3:1f:53:ea:92:4d:
f6:a8:db:21:6c:62:91:8d:fc:a7:8c:a7:aa:54:8e:
71:b5:67:8b:cc:c3:8c:35:66:19:a5:b3:20:03:17:
17:a4:d2:40:d2:8e:69:86:ad:52:76:28:7f:65:25:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:F7:1B:DD:92:8B:25:08:A0:7A:CD:E4:9E:AF:BB:2D:A3:23:B8
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:77:3b:7e:89:45:2f:03:16:45:1a:fa:da:34:be:28:b3:4b:
d0:31:c3:52:01:8f:d4:57:de:0c:8f:9d:d6:7d:4f:7d:f1:6c:
40:65:54:1c:7e:75:a7:f7:33:8b:5a:03:6b:88:15:e0:e0:19:
8a:bd:77:dd:e9:df:64:0b:e5:eb:0b:34:86:26:84:5d:ee:7c:
ae:81:fe:b4:e4:83:ad:5b:15:e0:b1:41:75:6a:2b:c6:33:de:
bb:7c:64:88:a3:3b:93:98:de:16:5d:87:00:08:f6:cf:7d:08:
a3:96:76:5c:12:dc:36:7e:ba:6c:fa:98:f9:7b:76:c9:74:b7:
81:2f:7e:57:35:3d:a4:6a:9e:52:f9:68:85:26:8c:e2:5e:d9:
12:d6:da:38:01:9c:d1:01:bc:60:ae:0a:02:3a:34:2d:23:86:
46:8b:da:83:15:91:19:e1:fb:9f:46:ad:08:08:c9:1f:b3:af:
6c:f0:07:f6:b6:75:60:78:81:8b:25:40:09:58:ab:4a:cb:38:
f2:0c:6b:ef:b9:32:0f:b4:6e:56:d3:c4:f2:1d:a7:a5:ec:f9:
08:70:ee:21:31:c5:12:ec:f2:b2:fc:bf:9f:41:f3:90:87:4d:
01:db:e8:f4:e5:68:87:78:17:5a:bb:d1:76:90:59:ae:0e:c4:
52:d3:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:45 2025 by rpki-client