Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: KNCCCbd0eGdLB++NcxWDB0gY18dcGa+fKbS1XYG4o/w=
Subject key identifier: E2:51:D8:FA:5E:AD:C6:1B:DA:90:7D:04:51:D9:F6:F5:38:F9:76:78
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01993500524111AE0070AB213CF4D75EE04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 19:00:37 +0000
Manifest this update: Wed 10 Sep 2025 19:00:37 +0000
Manifest next update: Thu 11 Sep 2025 19:00:37 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: jZnXrspQwSiC8NAQtR1NynOhte+F2/RSubkUzsC9fKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:52:41:11:ae:00:70:ab:21:3c:f4:d7:5e:e0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Sep 10 19:00:37 2025 GMT
Not After : Sep 11 19:00:37 2025 GMT
Subject: CN=e251d8fa5eadc61bda907d0451d9f6f538f97678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:e3:ae:b3:83:1a:22:e8:71:5e:fd:41:56:
02:b5:73:e1:a1:b0:ab:e1:fc:30:51:aa:03:3f:02:
8e:06:32:1a:d9:7e:89:4b:f7:b9:6a:5d:76:e4:f8:
5f:08:a4:5b:04:d8:4c:ba:2b:52:4c:53:be:6e:47:
3c:b5:41:4e:c0:20:78:66:c8:ea:b2:9d:d8:98:c2:
bc:56:b2:d3:af:2d:4b:ef:ad:e5:b8:dc:ef:b8:83:
c8:78:e0:3d:4e:04:f1:21:b8:44:a9:8c:c0:b9:02:
fa:9a:0a:69:43:68:c5:45:d1:2b:82:d9:d3:0b:61:
70:5b:ee:ed:96:32:81:80:00:48:93:12:25:81:a9:
f4:7e:53:f6:30:1e:97:69:1a:6b:0c:9f:e5:05:d4:
60:f5:ae:46:9e:1c:63:ee:e7:81:03:20:cf:1e:41:
ba:c7:ec:74:c5:ea:2a:6b:50:d7:93:db:b6:b7:f5:
c5:90:66:a7:5d:23:65:4e:71:4a:0f:3c:e3:08:5f:
24:33:be:e6:1b:82:dc:55:a0:2c:51:b4:1c:3d:7c:
9c:88:8c:da:97:79:72:ed:a6:8c:5f:5b:54:a7:fb:
ab:db:45:81:ab:2a:ac:16:8d:fd:6c:43:de:ca:fb:
9b:14:4d:f5:d0:a5:dd:9c:99:6c:b9:d0:7f:22:91:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:D8:FA:5E:AD:C6:1B:DA:90:7D:04:51:D9:F6:F5:38:F9:76:78
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:af:38:6e:15:86:56:44:e1:c8:b1:c9:e3:87:e6:e6:68:
33:38:39:60:ff:48:60:0c:4e:59:16:bb:57:8f:c3:f4:53:cf:
8c:72:7f:aa:b5:ea:eb:83:61:12:64:4f:0f:25:fe:ad:84:c0:
f6:ae:09:c2:74:7e:a8:2a:79:8f:fd:9b:c8:7b:16:17:05:a8:
ec:d4:87:dc:55:32:a0:90:7c:b2:11:f7:34:b9:ec:fb:b1:d1:
2c:83:c4:47:92:d0:1e:22:66:52:05:a9:74:ed:65:19:bb:f2:
7d:63:87:c7:8f:0f:87:58:76:38:a5:eb:c4:42:51:0c:d3:76:
ae:5a:07:22:2a:5b:0b:11:ac:e3:4f:24:f4:db:88:0d:0e:82:
ed:0c:13:f2:d0:58:39:79:d6:07:bf:c9:3d:83:1a:9e:6a:82:
f2:13:89:d6:02:4f:35:d9:8f:99:19:eb:4e:25:8e:d1:e9:20:
8d:ad:25:07:f7:32:31:21:d6:9d:67:b2:84:70:fe:b2:5e:fd:
fb:b8:65:74:3b:e8:17:93:0e:7d:6c:2c:bc:49:33:7f:0b:1d:
bf:d5:f5:2c:b3:e2:ee:36:3f:8f:ba:b4:2e:e0:5d:50:48:79:
d9:e2:a2:8a:02:ae:d8:c5:b9:43:7c:4b:bc:18:a6:42:ce:26:
e4:3a:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:38:10 2025 by rpki-client