Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier: uIICfAKRqgMhGpN0VpmSZ55Ace6Il7cPdKasolh9tZI=
Subject key identifier: D0:B7:A1:F6:A6:0C:D3:D6:B5:CA:12:DE:33:A5:7D:7F:4C:45:68:5B
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 019859B445DAE1DC404A215668DEE98B0446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number: 160C
Signing time: Wed 30 Jul 2025 05:00:43 +0000
Manifest this update: Wed 30 Jul 2025 05:00:43 +0000
Manifest next update: Thu 31 Jul 2025 05:00:43 +0000
Files and hashes: 1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: fnbWjxNVr50rKCtcMZJhgB9xFqTAJUtUf9KYnd9oJ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:b4:45:da:e1:dc:40:4a:21:56:68:de:e9:8b:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jul 30 05:00:43 2025 GMT
Not After : Jul 31 05:00:43 2025 GMT
Subject: CN=d0b7a1f6a60cd3d6b5ca12de33a57d7f4c45685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:94:bb:a4:ce:6b:45:8f:13:23:f2:7d:f0:
93:45:eb:a7:c9:83:06:42:6e:a3:37:4c:a4:6c:69:
e3:a0:2a:d0:06:af:9a:21:03:d2:92:2d:5b:b5:6f:
7c:85:58:80:d7:eb:4a:33:9b:c2:67:ea:09:e7:81:
8d:1f:c3:77:07:86:bb:33:18:53:7a:ff:e8:91:f8:
3c:39:f2:e0:1b:30:a1:20:77:06:1b:77:33:d4:c2:
85:a6:6a:e6:27:35:6f:c4:4d:30:bd:5b:e7:bc:74:
89:0e:c2:bd:00:74:da:d4:ae:12:33:b6:cc:3f:5d:
76:e1:9c:7c:e3:fa:a8:83:b7:b3:74:63:3f:ee:20:
43:71:75:58:6a:a6:a3:79:ef:cd:33:dc:f8:b3:b0:
48:a8:73:fc:98:4d:fa:7a:41:90:4a:dc:1c:8c:2c:
af:7e:01:da:55:1a:a1:5e:ef:82:40:91:e9:7f:44:
46:dd:33:e7:4d:10:3b:b1:5d:f8:89:51:b5:9e:fd:
9e:ae:85:d2:5a:0f:b4:55:d7:b7:a2:21:7c:f9:77:
49:37:f4:c1:43:aa:ed:00:5b:9b:9c:01:28:a0:5d:
36:a0:9e:2a:c5:a8:08:eb:c8:6c:63:e6:67:52:ab:
1f:aa:0c:ec:ab:ef:04:47:e1:55:8f:68:44:cd:f7:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:A1:F6:A6:0C:D3:D6:B5:CA:12:DE:33:A5:7D:7F:4C:45:68:5B
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f6:4e:3f:ed:c1:c0:02:b3:72:54:8a:22:f7:76:e9:9a:fa:
dd:3c:d4:62:b9:3c:e3:26:73:1d:bf:4a:8a:42:d4:dc:9f:b8:
ac:15:e8:47:98:3a:79:24:3a:d5:af:00:3f:9a:d3:ab:7c:71:
f5:ae:89:ab:85:56:ca:be:90:4a:16:d9:54:b0:b1:9e:60:45:
30:4b:7e:f8:25:0a:8e:ae:ab:04:2a:bf:fe:20:3c:39:f0:d9:
ca:c3:84:fb:4b:a0:8c:9b:04:72:84:19:f8:92:6c:80:9e:14:
c4:fe:16:60:33:1c:cd:5f:a6:fb:a0:6c:d7:5e:c9:9b:8b:c6:
bb:4a:27:a5:c8:bd:b1:27:13:2f:b1:5b:33:d4:3f:c4:8b:48:
55:9a:70:0a:5f:c9:80:f3:60:1a:0d:35:eb:ae:2e:9d:dd:25:
01:3a:60:9b:8f:2e:aa:fa:95:48:c4:c0:e6:f5:bb:08:ed:ee:
a1:6e:67:49:14:b4:37:6d:8a:dd:04:4d:4e:cd:c3:d9:6c:89:
c7:21:f9:49:64:e0:37:a2:45:e2:a4:99:78:26:5a:a6:c2:1f:
aa:20:63:53:ca:98:df:4f:a4:97:aa:53:b2:d5:d4:40:7b:a3:
93:b0:34:75:34:03:4f:48:75:f8:1e:59:91:5a:5b:75:91:11:
4a:37:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 07:56:48 2025 by rpki-client