Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: CMFIApWqo5UWYapgpgg5Sv9wXjSFsoF2OvLleFQi/Dw=
Subject key identifier: 84:CE:54:46:89:74:03:51:08:71:EA:9A:D4:D6:03:89:FE:7E:4A:32
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019933131CD69592A7AF8D42E3634FB121DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 10:01:54 +0000
Manifest this update: Wed 10 Sep 2025 10:01:54 +0000
Manifest next update: Thu 11 Sep 2025 10:01:54 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: ojxW7BnHp+5czYCCGuprldmrZEhGVghbbhE5VB+p3vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:1c:d6:95:92:a7:af:8d:42:e3:63:4f:b1:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Sep 10 10:01:54 2025 GMT
Not After : Sep 11 10:01:54 2025 GMT
Subject: CN=84ce5446897403510871ea9ad4d60389fe7e4a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:f8:9f:9f:11:df:4b:6e:92:d6:a0:51:15:
35:c2:f2:03:ed:e1:35:b3:49:62:60:95:7b:4d:f0:
1e:79:53:6a:43:fb:5e:8c:a4:26:27:44:ff:a6:59:
d1:d9:d8:6f:ad:36:f0:8b:0f:20:7a:8f:dc:ce:24:
61:aa:18:9f:c5:7f:de:a6:e6:77:87:d5:db:5c:bb:
34:8c:6f:31:3d:63:76:b2:06:57:2d:c1:35:3d:f7:
10:58:6c:48:d8:a8:59:d8:20:e3:91:99:80:ce:80:
dc:9f:ad:23:f6:a0:22:f3:6b:00:6e:88:63:61:a3:
f3:6f:6a:bd:11:3d:65:ee:c9:6e:a6:28:92:de:40:
a2:d1:34:5b:2f:f0:79:33:f8:6d:54:a1:03:1d:b7:
54:bb:f5:38:f6:d2:db:2b:74:87:bc:78:cb:bc:cb:
85:73:96:e2:cb:b3:0b:c3:f8:6f:24:81:8b:db:15:
20:c8:dc:71:81:f5:55:4f:19:94:3e:57:17:98:dd:
34:31:54:b8:92:70:87:ad:6e:0c:4d:66:f6:ff:f1:
78:ea:df:86:5e:5a:4a:d2:02:50:2d:ab:c5:ac:62:
65:3c:c5:cc:04:8d:e9:3a:fd:cb:6c:78:75:03:12:
9a:1c:00:07:05:73:8b:20:86:2a:f6:40:4d:77:6f:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:54:46:89:74:03:51:08:71:EA:9A:D4:D6:03:89:FE:7E:4A:32
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:df:5e:f1:b0:04:a1:20:12:72:c1:a1:1e:e4:e2:ad:44:5f:
53:f5:67:8d:64:5a:72:0d:01:a5:22:52:77:e0:2a:e9:65:41:
5c:ab:e4:80:3b:ce:43:03:b6:7d:5b:48:d8:07:86:49:79:95:
6d:d0:38:6b:48:6f:5f:c8:d4:d6:c0:b3:d1:e7:f1:6e:3d:5e:
03:6d:e8:64:b9:9d:22:a5:75:4c:d8:2a:11:11:f7:6b:e2:17:
a7:d0:11:5a:9e:bd:8f:97:a8:bc:aa:ac:ac:6b:81:f9:30:d6:
58:90:c7:18:53:c2:0e:b0:c0:84:e4:e8:c5:3e:31:df:de:93:
84:95:4b:46:90:bf:49:d1:2a:8b:59:80:06:55:23:50:2e:56:
7b:14:be:9e:e3:ec:22:47:52:2e:0a:be:74:e8:3a:e0:43:90:
ed:fb:23:7c:11:0a:26:48:6e:31:2a:b7:b6:e3:e5:8e:57:bd:
b5:f4:03:d2:97:8d:fc:5b:fa:4a:d8:9f:9f:a3:57:8f:52:7b:
8a:b8:ff:15:b9:28:17:5b:3f:81:65:fa:e5:6f:50:fe:35:ec:
0e:83:32:4d:c5:af:3a:23:de:da:13:e3:c9:7f:a4:72:c7:8c:
48:c8:e1:b9:01:37:06:4f:3f:4d:f0:8a:4b:72:a3:c8:c1:c9:
46:ac:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:37:22 2025 by rpki-client