Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: 7c7L7P0D3nVuflAEOzBprG/9ekBXwj2J7Zn7O+S3kWI=
Subject key identifier: 37:62:A7:0F:EC:58:AB:F0:20:1D:16:25:4B:35:91:72:D4:3E:37:19
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 0198C5DB50A9ED27BE0840F7858AAB8BBC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1642
Signing time: Wed 20 Aug 2025 05:02:21 +0000
Manifest this update: Wed 20 Aug 2025 05:02:21 +0000
Manifest next update: Thu 21 Aug 2025 05:02:21 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: vAEn81bqQfUiFOD8cB1C4fYvFkuctScW3/QIY39t/oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:db:50:a9:ed:27:be:08:40:f7:85:8a:ab:8b:bc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Aug 20 05:02:21 2025 GMT
Not After : Aug 21 05:02:21 2025 GMT
Subject: CN=3762a70fec58abf0201d16254b359172d43e3719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:2e:98:21:36:79:bc:59:fb:f1:32:c1:42:
d7:b5:80:e8:09:2f:7b:b9:3d:de:e5:10:2c:4b:8e:
f4:64:ba:5d:93:76:86:c1:a3:24:75:be:b5:a4:39:
8c:a4:c9:9a:9a:f1:90:49:33:90:cf:eb:cb:3e:11:
8b:cd:3a:cd:3d:1f:92:42:2e:b1:9e:25:fc:e0:1d:
97:da:b0:52:1c:88:38:59:c1:56:97:19:8e:21:27:
87:64:df:c5:9b:c2:74:9a:2e:a9:15:e3:2b:f0:f1:
46:04:1e:01:b7:57:a8:a0:49:85:8e:11:78:a2:42:
f7:e2:d6:d6:ad:ef:61:ad:16:b4:33:52:43:4d:f1:
e3:99:ff:d7:60:24:6f:f4:1a:8d:b8:24:a1:51:f1:
d2:fb:fb:d6:f9:5a:98:4c:9d:ff:23:0e:0f:20:52:
8f:08:95:88:55:52:d0:89:58:ea:67:3e:e2:03:c9:
b9:21:64:89:6e:dd:42:9c:bd:72:53:b1:87:c2:6c:
31:4c:be:d9:c5:de:d3:09:9a:eb:21:dd:96:93:d0:
a6:9a:9f:bf:96:a3:9a:ea:95:08:b9:4c:ff:38:9d:
ea:9a:79:f0:38:40:18:ab:a5:67:ee:3e:90:d0:22:
ff:3d:86:4f:7d:07:27:fa:64:4f:8e:eb:f2:6d:c8:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:A7:0F:EC:58:AB:F0:20:1D:16:25:4B:35:91:72:D4:3E:37:19
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4f:d3:07:8f:e6:9d:78:cb:06:f1:ca:17:7c:29:67:12:d7:
25:40:4d:02:dd:f1:f0:cd:2c:25:47:c5:d3:72:a1:86:a7:aa:
81:b8:83:c4:aa:82:e9:04:40:61:71:35:87:00:a2:77:4d:c4:
93:da:a9:82:a4:35:a0:ad:90:6d:d9:6d:47:dd:16:a6:00:bf:
95:98:0f:fd:9c:13:e1:46:e6:88:f7:3c:86:68:34:4e:cd:0a:
f3:7d:ce:03:e3:6d:00:dd:10:5c:71:d6:c5:09:29:2e:65:0e:
c1:53:06:3f:6f:9c:66:9d:f3:bf:62:bb:0f:1a:cb:a1:7b:46:
d3:05:35:d3:62:ed:15:fb:69:f8:35:60:19:84:ef:be:9d:3c:
41:15:7a:b1:07:5a:6f:4f:6f:a5:f1:3c:04:ee:7e:ba:3b:90:
2e:8a:57:89:a3:dd:9e:26:3a:30:68:d3:90:47:43:7b:86:5f:
22:7d:b4:e9:0b:00:2d:cc:db:e4:54:09:40:76:98:bb:f1:35:
ac:d2:96:69:27:e5:aa:37:91:92:f0:52:7d:ae:3f:ed:32:53:
46:dd:5f:81:15:e5:8a:de:0d:75:94:6e:59:2f:6a:3c:c7:e6:
a7:f8:a6:50:33:2e:bb:51:d6:76:93:61:31:ac:72:57:b6:71:
12:5e:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:10:58 2025 by rpki-client