Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: d5vnIVjQUVDBhCiPcz93gcFB4tEkJluo+hAXkbHbrVg=
Subject key identifier: 85:1E:99:57:C1:14:78:90:ED:FA:7F:16:B9:6C:48:0E:C9:3B:B0:EB
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 0198458871F6764C8795D1A0E95D4D5B1350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 160D
Signing time: Sat 26 Jul 2025 07:00:26 +0000
Manifest this update: Sat 26 Jul 2025 07:00:26 +0000
Manifest next update: Sun 27 Jul 2025 07:00:26 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: c8BuOrnEWnJOE8bLpEYG6BiFEuAkkaZbSseTZVFKeeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:71:f6:76:4c:87:95:d1:a0:e9:5d:4d:5b:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jul 26 07:00:26 2025 GMT
Not After : Jul 27 07:00:26 2025 GMT
Subject: CN=851e9957c1147890edfa7f16b96c480ec93bb0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:a2:58:89:32:5b:ed:46:ae:97:71:ea:f7:
3a:92:da:42:e6:13:39:d0:47:6b:7d:35:2e:ed:f8:
59:b1:ea:dc:0d:d3:6d:f1:7f:82:53:6e:6e:5b:7a:
d5:49:4d:23:04:d6:5a:64:de:b3:90:6a:52:3b:df:
c6:e9:7d:c3:ca:ec:27:72:52:b0:78:9a:1a:e0:f7:
38:75:b6:17:fd:ec:ef:54:8c:e6:79:67:04:bf:74:
f6:29:28:b1:3d:67:4c:57:38:a6:10:95:42:ac:20:
af:a4:69:7c:4c:63:de:05:32:0a:09:e6:ac:04:35:
e9:0a:ca:24:ef:c2:86:88:59:2d:32:bd:68:b1:36:
b3:4d:7c:66:54:0f:ba:05:8c:8d:d7:0f:a7:f7:8f:
b1:5a:b4:44:2f:4f:13:7b:8d:37:29:65:af:47:5c:
1f:f8:1f:93:3c:90:92:77:ed:c4:f4:23:be:c3:d9:
c8:4e:2d:6c:00:f1:ec:34:5e:61:8c:3d:eb:f8:cc:
b9:6a:09:2f:18:66:5b:0a:bc:a2:37:4a:3f:c5:85:
5d:36:7e:50:48:b0:0c:1b:d1:87:9b:b4:7c:b6:41:
fd:2c:1f:d6:a9:bd:38:d6:c5:df:1c:46:2f:55:f4:
c1:ae:77:85:18:12:2e:0a:68:a0:48:e7:c3:75:14:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:99:57:C1:14:78:90:ED:FA:7F:16:B9:6C:48:0E:C9:3B:B0:EB
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:fd:38:54:d5:af:51:ef:7d:e0:f7:a6:01:ee:c1:57:85:
04:84:d4:a5:80:3e:bb:fb:f2:39:b5:18:1d:ea:52:9b:bd:3f:
f5:57:7f:60:9e:ad:51:9c:6c:b4:a5:c4:43:76:c1:8e:42:69:
2b:e9:99:58:8f:be:91:a8:ab:d4:85:99:94:ed:bf:28:79:51:
c6:c4:07:16:d0:4c:40:7c:5d:10:ee:fa:14:19:46:f6:07:8a:
bb:bd:72:0f:0b:29:80:78:f1:ea:86:0b:b8:e5:89:bb:79:ab:
19:32:f9:b2:85:69:88:c1:e6:f5:be:40:fe:e9:84:f6:c0:43:
88:40:9d:df:92:32:ce:ce:84:1e:b0:ca:0c:3a:9e:db:2d:32:
70:7b:20:32:9c:fc:4e:fc:d3:13:7a:de:cd:3c:bb:7a:33:5c:
e9:6c:38:c4:1b:44:ba:13:83:5d:9a:c8:54:df:d5:9a:2e:09:
dd:23:5b:73:a0:3d:72:f5:d9:38:68:43:a8:94:a5:6a:04:4f:
91:ed:0e:a9:01:75:dd:a0:ce:4a:bb:14:b1:9b:33:47:67:dd:
83:80:e8:7e:d7:08:62:cc:d8:f9:dc:63:1e:aa:03:ff:1e:79:
ca:56:72:b3:25:7a:22:3a:b8:d0:56:e8:15:69:b7:4b:7f:bf:
6d:69:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:17 2025 by rpki-client