Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: goOxfMuConYU60HdHhBvs2KoFg7C003SAyy9xHfcAoI=
Subject key identifier: 9C:F7:85:C6:56:66:29:B2:80:79:9D:31:EA:22:6C:3F:22:34:B9:53
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01992DEC8E4540717EF4523D21B28EF58755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 10:01:41 +0000
Manifest this update: Tue 09 Sep 2025 10:01:41 +0000
Manifest next update: Wed 10 Sep 2025 10:01:41 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: XAZk1NOZKLEfnAA8GE589U5KXtIvA3/zHxWTbFQHXJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:8e:45:40:71:7e:f4:52:3d:21:b2:8e:f5:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Sep 9 10:01:41 2025 GMT
Not After : Sep 10 10:01:41 2025 GMT
Subject: CN=9cf785c6566629b280799d31ea226c3f2234b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:e4:14:32:47:34:dd:da:47:f2:7d:f6:0d:
4a:b6:d5:fa:4f:e8:a7:91:5b:1d:8d:fe:ab:19:65:
4e:58:50:2d:d0:70:ba:7f:49:a4:13:bc:e8:d5:31:
86:5f:e0:25:b9:21:81:25:ab:8f:fa:41:59:36:13:
74:46:c2:42:f2:f5:5c:dc:73:5d:f8:0e:02:a5:a1:
5b:2c:34:17:c1:f7:78:7c:17:45:34:42:53:04:49:
9a:70:11:bb:92:76:20:8f:93:86:1b:6a:35:34:c1:
e7:20:48:e1:4a:86:7b:8f:5a:19:2e:40:65:fb:95:
92:ea:67:ed:7a:9f:46:03:29:d8:89:26:d9:1f:a8:
8a:0e:ed:5b:da:fc:70:cb:64:b7:0e:7d:23:de:48:
86:ff:8d:fc:c6:9b:46:15:81:51:7e:15:d9:68:27:
06:fc:75:00:ca:60:be:66:bf:bf:4d:4f:19:26:09:
ec:a4:91:5b:c6:c6:77:de:20:79:7e:37:ac:d8:ec:
ff:cc:4d:c0:fc:eb:b3:b5:1e:79:1f:60:a6:02:2b:
ab:1f:5a:98:2c:6c:f0:11:31:3d:4c:3b:5d:4b:80:
85:b6:35:49:5e:13:bb:c3:83:ed:cf:ad:d5:85:06:
2d:d3:f0:b5:78:53:41:58:00:31:67:5d:41:37:47:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:85:C6:56:66:29:B2:80:79:9D:31:EA:22:6C:3F:22:34:B9:53
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f5:12:8b:3b:0a:5d:21:5f:52:b3:fc:4f:e4:af:f0:73:ce:
26:8b:4b:d2:c0:0b:e0:e3:85:57:b5:4d:c9:34:e7:a3:99:38:
e5:7f:cf:93:46:f9:b8:db:5d:a7:ae:0b:55:8b:33:ca:5a:88:
67:69:e8:51:98:db:77:82:0c:fe:37:52:c0:18:e0:bf:ab:14:
4c:d9:8a:85:81:78:f3:96:a3:fd:cc:01:08:f7:4a:cb:14:73:
0b:4d:8a:8d:f1:3f:65:b3:97:1e:dc:25:d6:68:6c:e5:cb:02:
f6:84:91:fa:8b:48:01:75:09:05:69:71:ee:4a:6c:77:6e:2e:
9d:3e:9d:aa:f9:14:31:cd:65:9b:c8:4a:14:5a:6a:78:19:3e:
18:01:57:d8:22:2c:52:bb:f2:51:1b:c8:c9:76:32:d3:10:27:
51:f2:6a:1f:59:99:e0:1c:9b:de:d2:4d:90:47:bb:24:28:5a:
61:90:22:e9:ad:8a:60:d0:fb:fc:db:52:8a:e6:d9:91:d4:8d:
8d:07:f7:29:65:0e:12:87:82:7b:2a:4d:05:c9:a2:8c:de:70:
d7:d0:c8:2e:69:e9:d6:2f:74:13:4f:de:a4:b3:d5:d9:c4:cd:
bb:98:97:4c:a5:dc:ee:03:5d:03:b2:14:19:ec:f0:8b:8b:35:
df:d1:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:33:39 2025 by rpki-client