Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: klQ3gwc9GEE0t4teDhVvCcefKZ2z0CQ/AihOvB2GbR8=
Subject key identifier: F8:B3:C1:52:EF:1A:C3:9C:C6:B1:ED:8B:FC:46:EF:E6:74:D7:62:87
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0199326D9B6D61E6302D98EFD85E4135A06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 09A8
Signing time: Wed 10 Sep 2025 07:01:07 +0000
Manifest this update: Wed 10 Sep 2025 07:01:07 +0000
Manifest next update: Thu 11 Sep 2025 07:01:07 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: 5517s2aWtUgSqLnn2MmalRCyMrcM5vv/j1sEY+dq1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:9b:6d:61:e6:30:2d:98:ef:d8:5e:41:35:a0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Sep 10 07:01:07 2025 GMT
Not After : Sep 11 07:01:07 2025 GMT
Subject: CN=f8b3c152ef1ac39cc6b1ed8bfc46efe674d76287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:88:56:89:20:bd:8f:cd:f4:20:d5:23:e9:
b5:0a:a1:22:c2:2d:3e:0a:6a:29:7b:1e:70:5d:b1:
2c:8d:0d:91:29:80:45:1b:d5:c6:a5:79:bb:e3:41:
e0:a3:2a:ae:38:97:a3:89:33:99:91:45:c9:f3:20:
c9:97:a6:32:b1:cf:b7:61:45:5c:a0:1c:91:e9:b3:
29:66:e3:92:95:72:60:10:0e:f2:ec:5c:53:77:26:
56:b5:09:f7:02:cc:7d:3d:af:a2:69:5d:34:d5:f4:
5a:42:6f:ef:df:44:5a:dd:f9:ec:61:f4:c3:65:5a:
a7:97:f8:9f:d4:20:ce:fc:63:4f:ad:b3:c4:b9:2c:
03:b7:ae:25:47:c2:e1:d1:a5:cd:38:e1:4a:38:fb:
57:35:ca:da:9c:23:6e:a6:8c:60:82:76:a3:25:c6:
99:20:20:aa:ae:78:3a:4e:43:4a:ce:92:67:a8:0c:
4e:75:0d:7a:a2:20:6d:ff:e4:68:24:dd:4a:24:da:
63:b1:65:2a:eb:48:9d:85:b6:f3:76:9e:93:7b:b1:
f7:34:49:51:d4:b6:d3:22:87:5c:ea:0c:68:2b:f9:
bd:98:0a:41:fa:33:49:f0:c8:87:36:07:71:b5:22:
ab:dd:1f:5b:ef:6c:b1:55:1f:af:7d:80:97:29:cc:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:C1:52:EF:1A:C3:9C:C6:B1:ED:8B:FC:46:EF:E6:74:D7:62:87
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:e7:b6:4c:2f:ee:10:22:12:5c:c9:5d:8d:12:4f:07:7a:
75:a1:c9:b2:45:6f:9f:77:9f:21:0f:ff:59:c0:cc:9c:1f:20:
e9:03:89:fb:e2:0e:ca:d5:69:bf:29:77:b3:9f:10:62:41:86:
d7:f0:4a:0e:fb:ab:6c:b4:51:65:49:3b:4e:ce:b0:9d:fb:d3:
6a:73:ab:03:4b:70:75:e2:a5:59:2a:a8:29:8a:80:3f:21:54:
84:2a:ab:d3:9d:be:7a:e7:d4:e4:88:e1:43:82:d6:56:63:00:
4e:27:10:1f:a7:68:d9:34:1b:e0:bb:a0:0e:79:1d:8f:50:b3:
22:8c:d7:0c:b2:a0:71:b8:88:ae:23:67:2a:2b:ca:c0:ad:2c:
b5:36:e7:ca:b6:e9:72:e1:99:94:6d:1d:bc:07:30:cf:89:03:
7b:3c:1e:93:13:66:a8:75:bd:34:c5:79:8d:8d:8e:3b:9a:ff:
23:a5:ad:7f:09:8c:36:9f:c0:f1:88:0d:e1:9f:07:6d:dd:eb:
62:0b:89:0e:23:c1:33:94:81:04:27:17:6c:eb:85:e4:86:55:
fa:80:2f:53:c8:47:10:69:7d:84:ab:83:18:93:93:5e:bd:02:
35:22:7d:49:28:49:a8:de:82:7a:51:8c:4d:12:e2:2c:3f:b6:
8e:00:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:21:44 2025 by rpki-client