Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: FOB4MvcLmG8YNp0LqfaomyC5Xh4uS/ZmyfeTRxGB6Oo=
Subject key identifier: 0F:06:F3:60:AD:E6:70:51:E8:51:F1:BD:D7:62:14:B7:EC:58:72:2E
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 019A258AAAFF68D776B5F91E36736601463C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 160C
Signing time: Mon 27 Oct 2025 12:00:35 +0000
Manifest this update: Mon 27 Oct 2025 12:00:35 +0000
Manifest next update: Tue 28 Oct 2025 12:00:35 +0000
Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: fk1B99wBsK0GmsOOMfdUuFc87E8NLv0I5QWPtUO360s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:aa:ff:68:d7:76:b5:f9:1e:36:73:66:01:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Oct 27 12:00:35 2025 GMT
Not After : Oct 28 12:00:35 2025 GMT
Subject: CN=0f06f360ade67051e851f1bdd76214b7ec58722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:32:7f:e8:c5:ad:f4:ed:dc:dc:1d:86:55:
60:1d:b2:34:a0:35:e2:5e:75:6a:6b:5f:b9:93:b8:
a9:c4:d7:f6:bd:7a:47:5f:68:18:f8:2d:50:94:e9:
da:70:f2:66:40:e7:b6:c5:c6:62:36:60:92:2f:c7:
e2:e4:4c:b3:61:8e:46:4b:52:cd:87:08:97:0a:ba:
db:2d:2d:de:a0:45:b0:0b:47:b0:15:cc:c3:7c:a7:
5b:a0:8c:f4:01:05:ef:fa:6b:f5:51:b4:93:72:93:
11:e5:84:1c:68:ab:fd:d7:ff:cf:96:47:36:51:f0:
74:b4:5a:20:ed:6a:13:81:71:8d:f5:ea:6a:c2:93:
79:81:f4:60:50:f8:a0:62:2f:7a:98:3f:e0:25:f3:
01:20:c5:df:c5:b8:df:3d:65:58:5c:67:e0:2c:38:
ff:38:ef:d7:12:02:c8:d2:6a:6b:87:32:d8:16:49:
a3:aa:5e:ef:8f:69:4b:4b:56:f3:fc:ee:8b:dc:d8:
5c:6c:e5:29:be:e8:ef:89:34:c6:f4:79:89:93:37:
46:52:f2:30:85:4e:b4:db:ea:01:8a:ad:c0:2b:b6:
63:c2:94:0d:ca:c2:27:d5:40:db:01:94:20:48:8a:
e5:d8:ce:13:a1:25:ab:60:f5:49:22:56:47:14:34:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:F3:60:AD:E6:70:51:E8:51:F1:BD:D7:62:14:B7:EC:58:72:2E
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c7:bc:b8:8b:41:be:c6:30:25:af:0a:d9:99:38:73:ec:2e:
21:02:8d:ae:b1:2d:a6:19:97:64:99:31:28:ca:94:a6:94:c1:
fb:b8:d6:e8:3f:51:ab:1a:82:a9:89:b8:f7:02:cd:7c:46:d6:
e6:14:0f:0e:e7:66:bf:d5:ea:e4:b9:a0:fb:b0:03:80:b7:66:
14:f4:8f:b8:d9:be:84:6d:89:38:07:ca:91:40:c0:f9:d3:ad:
69:d6:e2:db:92:46:04:6f:1d:b1:1f:ec:41:46:81:09:4d:3f:
c3:2a:20:af:cb:21:b4:c4:3f:82:b4:72:ab:f0:3b:fd:41:da:
d8:52:f3:11:01:00:39:be:a0:51:e1:c9:ba:95:f3:ab:b2:25:
52:ba:0d:ec:46:23:00:e3:b5:95:e3:31:a8:47:40:e7:74:c7:
e2:20:3a:a2:e1:55:3c:4f:f9:70:35:f9:40:0a:92:c6:e7:ce:
83:8d:e0:2c:c5:c5:aa:25:e3:f0:f7:3f:a8:fd:f5:0a:26:48:
9f:ab:bc:24:29:0d:68:fd:e4:52:27:6c:4c:a8:77:cd:bc:72:
53:ca:7f:d9:79:ad:f2:0d:7e:8d:d3:df:f8:49:34:c1:ac:a9:
16:91:ba:9c:90:35:0c:c2:eb:40:19:88:9a:11:18:86:60:60:
2f:3c:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:07:11 2025 by rpki-client