Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: 8kkCLUHAHCgw1DDgARKY3fSQ8Fw6dYiAN+1/OVvim3A=
Subject key identifier: 2F:4E:0F:62:1A:0E:B0:8A:EF:CB:CC:BD:32:42:F9:B3:FC:5C:5D:82
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 0199342497C0123BA80A50005DD90424C4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 158F
Signing time: Wed 10 Sep 2025 15:00:37 +0000
Manifest this update: Wed 10 Sep 2025 15:00:37 +0000
Manifest next update: Thu 11 Sep 2025 15:00:37 +0000
Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: gK4lRePEQFBktNq8Eu4t7AkLvDlJL9mD8T4H0+tCJKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:97:c0:12:3b:a8:0a:50:00:5d:d9:04:24:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Sep 10 15:00:37 2025 GMT
Not After : Sep 11 15:00:37 2025 GMT
Subject: CN=2f4e0f621a0eb08aefcbccbd3242f9b3fc5c5d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:ef:46:ff:d4:b8:15:a1:82:a6:8d:f1:a1:
37:ea:60:50:7d:47:d3:40:df:cb:63:4b:2d:cb:16:
5d:59:b1:e9:c7:ce:0e:e1:04:35:64:a1:a4:87:47:
ef:42:df:33:9f:fc:6d:71:d7:19:a7:55:d0:0c:0a:
76:5d:ee:7e:43:aa:da:73:af:18:69:a2:c7:32:24:
45:3e:61:4c:32:f2:e6:fa:07:29:f9:8a:f1:3b:5a:
6f:21:53:79:92:8c:f9:42:d4:43:76:ed:eb:32:32:
45:60:e9:4e:87:3a:ca:8f:5b:29:7e:ee:db:d7:97:
70:93:9c:2e:33:b5:da:58:83:df:04:f1:0c:37:0d:
de:28:3c:bc:38:15:8e:45:7b:97:a9:5d:9e:6f:80:
a2:8c:04:7c:9a:6d:db:b8:77:ce:aa:bb:15:b6:a0:
31:69:0f:1f:6f:60:62:a0:39:56:35:6b:d9:2d:56:
31:3d:e6:3d:7d:ff:cd:49:50:6e:e2:88:08:82:34:
c0:f8:e0:ef:8a:22:8c:2c:ad:e2:a1:83:ca:38:6a:
0a:88:c6:bd:78:8f:cf:91:2b:b4:b2:4e:f9:ea:bf:
86:6e:59:24:98:a9:a7:9b:f6:9c:32:4f:eb:45:8b:
cf:36:d1:1e:3d:8d:2b:bb:49:d4:81:e8:1c:f2:c9:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:0F:62:1A:0E:B0:8A:EF:CB:CC:BD:32:42:F9:B3:FC:5C:5D:82
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:05:4e:8f:25:08:3e:54:af:9d:4c:1e:68:85:60:da:d3:c8:
ae:f9:fd:06:2f:71:3b:fb:00:4d:dd:72:ab:2f:c2:75:f3:c1:
41:51:c2:51:ac:11:94:80:5a:42:de:b3:04:b1:20:85:aa:a1:
a2:9c:00:70:d7:73:c3:ab:ec:35:f6:72:20:b6:96:b5:05:89:
70:e8:dc:f2:fe:ec:e1:fc:45:5d:45:26:27:95:cf:66:f0:4b:
74:57:61:f5:4c:c0:69:49:2e:3f:e7:73:5c:7c:0f:16:b5:d9:
a0:5b:de:50:d8:62:3e:43:3e:c3:d0:06:cf:24:ec:46:e1:1e:
e0:f7:9f:df:e1:d8:80:01:15:66:f5:26:f1:d3:4b:54:9f:0b:
02:00:97:5b:fe:4e:86:b7:6e:6b:94:b9:fb:40:94:0a:aa:54:
3c:9e:dc:c1:93:d5:28:9b:83:14:db:52:3d:9f:25:ab:68:c6:
a2:7c:57:5e:de:a4:08:8d:47:2a:7a:b0:bf:57:a3:ef:b9:25:
ed:39:d1:fe:0c:87:e5:31:e0:c3:11:a2:bc:fb:cb:b0:e7:27:
a9:ab:76:e0:1e:e6:1e:0b:f8:67:4a:1a:99:94:f8:16:98:d3:
28:2b:f4:56:23:89:cd:d2:24:11:51:b0:49:4e:46:90:f0:32:
8f:c2:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:06:12 2025 by rpki-client