Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: 7kMrKSu9MNCVgSityc2PDL2DL1fMmel11PPerQ+NTBY=
Subject key identifier: 38:B8:F1:98:87:F9:25:55:EA:1D:98:6B:49:14:56:F2:38:1B:9C:6B
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 0198D5F1ADD93FF6D4EEC682E01D8EBF0E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: mYrDCCvq2V9jsif73qdwtFeYHdi7TJoK0hAD6FH1XfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ad:d9:3f:f6:d4:ee:c6:82:e0:1d:8e:bf:0e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=38b8f19887f92555ea1d986b491456f2381b9c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:23:4b:8f:96:00:da:fa:12:d8:02:b3:99:
72:35:52:ae:d6:55:bf:2a:13:47:d5:79:67:86:ca:
f6:7f:bc:e7:1c:29:75:fc:5b:96:de:8d:ce:e3:f5:
3e:50:17:5a:99:4c:f2:1c:c1:d6:0f:54:31:0f:93:
88:4c:b2:8a:5a:ce:3f:01:de:50:b1:c2:8f:2a:80:
10:c1:8d:a9:f6:a7:b8:33:ef:45:d1:f3:f3:ef:26:
84:55:5f:04:31:d6:f0:79:37:41:71:ab:09:07:71:
44:3a:71:33:f9:80:c4:44:33:ec:85:c2:a8:8c:19:
ef:f7:e6:94:3c:d9:e3:23:48:62:59:e5:b8:c1:05:
55:b2:1c:45:17:64:e0:a7:f3:51:ec:7c:f0:9f:bc:
94:1f:6c:27:b5:8a:1a:30:36:7b:ba:f9:0a:9d:39:
07:21:26:bb:b2:23:b2:2e:8d:7c:31:5e:99:10:bf:
9d:bd:f2:99:9e:13:75:05:09:8c:7b:0e:44:97:ce:
fa:ee:4a:87:d5:9a:16:89:47:b0:89:08:af:85:6b:
fd:f5:54:46:f3:c2:4f:52:b3:18:d7:5a:26:cc:a6:
8b:0f:1e:2d:90:12:b9:25:37:db:80:1f:45:79:6d:
15:37:e9:bb:ff:ce:b8:a4:2b:04:a8:37:7a:79:b4:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:F1:98:87:F9:25:55:EA:1D:98:6B:49:14:56:F2:38:1B:9C:6B
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fe:21:50:b0:dc:f3:f4:d4:e2:20:b3:82:20:31:d9:60:81:
c1:d5:52:a7:af:d1:14:4d:d1:af:0b:df:e5:17:a6:47:89:d2:
c0:7b:3e:31:56:c0:76:b7:82:39:bb:a1:36:b3:67:97:a2:0b:
ac:71:6a:a3:8c:37:a0:46:da:97:5e:cf:20:96:ee:33:a4:38:
29:bc:03:7d:6a:3b:ee:f6:e8:f2:49:59:39:7d:f8:59:f1:01:
4f:cf:76:72:2f:68:6c:fb:70:c7:18:85:ce:91:6f:3e:c6:2f:
85:e9:96:19:5c:dc:0a:2f:6a:0f:29:f3:71:87:95:cf:ed:6a:
40:fd:5f:9f:ec:a6:8d:88:eb:69:c9:f8:02:a8:71:1e:ac:b9:
19:16:40:f4:9c:a4:93:c0:35:06:29:b7:08:fc:35:b6:5a:6d:
a9:45:87:59:20:2a:58:25:89:7a:b8:13:9c:27:c6:72:bf:68:
1c:7b:87:99:80:dc:42:2c:83:9b:cb:5a:64:7d:c8:7b:a6:17:
40:84:89:8e:cd:06:b8:3c:d4:ba:87:46:c8:91:4f:a8:9a:c9:
1b:3f:e8:2a:e0:18:45:dd:7d:87:0e:ea:3e:fa:12:55:2f:be:
5c:d5:51:2a:1f:b0:23:a2:08:3f:a0:cf:60:3b:f9:e0:48:ef:
95:21:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:55 2025 by rpki-client