Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: faOjt1+X5+cgLMw6gGjaB973HuYI7EE4DfaR3YpVn6E=
Subject key identifier: 66:28:6E:92:99:7B:0B:21:69:E8:46:5A:84:CE:89:C3:C9:49:25:87
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 0199221E314793A29371F5F6F1E053373AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:00:28 +0000
Manifest this update: Sun 07 Sep 2025 03:00:28 +0000
Manifest next update: Mon 08 Sep 2025 03:00:28 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: vjqPZJtRtmsA8eCxZsIMu3MEO5PdRXVmSnU4NlH7JIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:31:47:93:a2:93:71:f5:f6:f1:e0:53:37:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Sep 7 03:00:28 2025 GMT
Not After : Sep 8 03:00:28 2025 GMT
Subject: CN=66286e92997b0b2169e8465a84ce89c3c9492587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:50:30:f2:ae:d4:b8:f7:86:0d:ef:35:a3:2e:
56:d6:41:a8:2f:79:03:4c:fb:bd:2c:b0:f3:ec:5a:
92:a6:7e:5a:8e:22:97:50:f0:2e:ac:1c:16:cd:ce:
90:e1:05:8e:62:b9:6e:43:bc:0a:2f:af:3b:3c:2e:
bc:51:34:f3:7b:cc:55:fe:48:de:9d:be:4e:25:33:
dd:4d:42:cf:fa:3e:85:29:12:8b:e3:5f:70:3d:4a:
54:5b:16:ab:83:53:52:95:f0:aa:f2:9a:79:29:93:
c2:6a:87:fb:a7:66:c5:0c:a5:17:8c:ee:41:22:44:
d7:90:45:b7:18:cb:62:50:a9:13:58:ec:e8:2c:09:
78:35:2d:fc:3a:36:02:4a:0e:3a:32:61:82:d7:a0:
71:83:20:93:b2:d1:da:64:43:c6:75:cc:fc:2d:06:
8a:28:c3:85:2e:54:eb:fc:e9:41:7d:fd:17:fc:67:
8b:a1:67:92:87:00:b8:76:e7:0d:aa:c9:27:41:23:
3e:95:af:33:9d:c0:e0:b7:57:dd:dc:ae:9a:47:b8:
87:e7:b3:aa:54:8a:ec:59:11:75:69:bd:d8:69:2b:
2b:aa:72:0a:d9:41:a4:76:54:7e:e2:dc:bd:d7:c0:
f4:8e:5b:0d:2d:6f:fb:f3:4c:84:0f:5b:b6:2b:ef:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:6E:92:99:7B:0B:21:69:E8:46:5A:84:CE:89:C3:C9:49:25:87
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:89:de:a0:ba:85:2f:cd:1c:ea:48:18:aa:93:41:4f:8f:53:
3b:e2:a7:75:0f:c9:2a:b0:b5:13:76:92:83:ef:8e:c0:28:79:
72:69:af:2e:e6:97:c5:58:5a:9b:34:a7:ea:91:dd:91:81:88:
1e:a8:48:51:f0:ec:ae:c0:4e:b9:6c:c3:4c:2b:1d:8b:43:d0:
97:18:55:8a:b0:3c:4c:f9:8f:05:5b:0a:68:6c:2d:62:9e:d9:
9f:80:4d:41:3a:fd:df:63:bb:a8:c6:c3:77:63:66:9a:9a:dc:
f3:9e:ce:3e:03:bb:65:3e:13:0d:06:cc:f8:2f:12:42:6d:49:
ad:2f:32:bb:78:f3:4e:00:5b:ff:61:3b:a1:c9:e0:a4:1d:65:
ee:0e:eb:7c:8d:4c:33:6d:7b:45:d6:ed:be:4a:2e:d7:22:0d:
b1:8e:96:29:03:d3:23:25:ed:04:c2:fb:41:6a:de:95:e7:bc:
50:f2:a3:7d:1c:1c:67:20:be:9c:24:e7:e5:e1:11:4c:6d:b4:
eb:5d:bf:e8:be:86:98:54:03:6f:17:11:7d:14:f9:77:ce:ce:
dd:f0:24:8b:8a:95:9a:ad:e6:b8:9a:aa:e0:3a:04:db:85:3a:
81:02:ef:01:b7:01:d9:c2:b4:13:03:31:fe:86:28:4c:99:56:
a9:0e:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client