Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: ouQ18F7Op5EHq6rojwslVS5SBkOclV2DgG/fJFvffW4=
Subject key identifier: B1:E9:02:2B:79:C7:16:4F:1D:03:6B:17:16:98:D1:A4:14:90:27:CB
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019917643167060AEC75F3AE9441E7E1BCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 01:01:06 +0000
Manifest this update: Fri 05 Sep 2025 01:01:06 +0000
Manifest next update: Sat 06 Sep 2025 01:01:06 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: noWFhbJuxLqJD4ol22GQRU/SF7ZgqPznySqKj6qmVQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:31:67:06:0a:ec:75:f3:ae:94:41:e7:e1:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Sep 5 01:01:06 2025 GMT
Not After : Sep 6 01:01:06 2025 GMT
Subject: CN=b1e9022b79c7164f1d036b171698d1a4149027cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:96:e5:0f:c8:5f:9c:4e:eb:45:e4:ab:98:
e5:d4:9e:bb:2f:66:72:59:b5:38:d9:e5:62:d0:b2:
20:df:05:25:05:ec:b8:f2:ef:1b:3e:60:4e:42:db:
ed:92:d8:09:f7:66:d7:89:01:78:36:b7:83:ec:a2:
17:86:cc:5b:89:4b:5c:d5:55:58:2b:ca:99:28:76:
0a:c6:0e:34:a5:ec:1b:4e:38:8b:a5:92:9d:fc:04:
d5:c0:a8:83:c8:03:0b:82:1b:38:c6:9e:50:3d:ae:
ab:44:28:77:5c:8d:82:fc:09:97:eb:f0:22:43:1f:
01:d6:3d:0a:c7:5c:e5:56:30:28:2d:81:3b:ef:fd:
75:21:1c:79:bc:34:71:85:14:da:91:15:3f:c3:20:
25:b2:a7:1b:82:14:ed:d5:5f:e9:9b:f3:ee:76:7d:
5b:86:f2:cf:be:73:8d:9f:3e:7c:9b:74:82:e1:75:
24:63:6e:f2:cd:50:11:6b:99:0b:0e:29:71:58:3c:
83:6b:5c:1d:f7:c1:22:86:f4:ea:d4:17:3d:32:89:
33:5e:ee:4c:6b:0c:58:fa:16:46:09:21:86:d3:ff:
10:26:d8:dc:0e:b7:e9:34:bb:98:a3:93:64:97:30:
0c:b0:a2:99:2b:b3:0b:ee:6f:99:4c:2b:52:91:5d:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:02:2B:79:C7:16:4F:1D:03:6B:17:16:98:D1:A4:14:90:27:CB
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bd:bf:7f:ed:fa:de:74:a3:d4:f8:40:52:cd:07:7c:1c:c7:
ce:c2:4f:09:d4:7c:2d:fb:7e:89:df:f7:17:79:46:15:6b:99:
52:34:f1:51:50:0a:c9:22:24:f0:8f:65:5a:49:b1:9e:d0:ef:
9a:16:6f:b9:50:0c:9b:b9:06:51:08:e7:06:6b:e1:03:4a:36:
ff:ae:00:44:3b:1e:3e:e0:90:18:27:06:fb:1d:4b:f1:3e:a8:
19:a2:68:dd:51:fa:a6:d5:8d:d9:1d:87:8e:b9:3e:db:9e:2b:
69:5f:6c:c9:4a:4d:f7:56:7a:63:9b:aa:a6:69:9b:8d:fb:12:
be:15:f4:5c:91:b6:ad:2b:6d:30:b0:c8:ae:e3:0b:7f:9a:83:
07:45:f4:28:46:85:64:3d:0a:c5:99:79:88:ec:c2:6d:ea:de:
02:9f:77:aa:9c:b1:26:e8:d5:c6:c1:d0:84:53:27:92:08:45:
02:0f:20:98:80:87:3d:48:cc:e5:9a:75:e2:e4:85:0d:5d:c5:
ef:76:f3:d4:84:9c:f4:d4:9e:e5:b9:d9:8b:dc:a4:81:e6:4d:
f1:82:54:ba:52:e7:74:53:21:53:33:d0:25:83:d5:10:98:7f:
df:3b:14:9f:c0:f7:11:43:da:37:c3:37:05:f2:8b:f8:e5:9f:
42:0f:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:33 2025 by rpki-client