Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: 3XukYrbvnZt2rr63pWixWkQZU6x5ioe57qQudjVbmtg=
Subject key identifier: 18:69:90:DE:75:74:52:AC:9F:91:9E:3E:63:55:0C:D3:F6:7B:E5:7A
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 019931C8B44113109681F93AC95E834CCE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 04:01:00 +0000
Manifest this update: Wed 10 Sep 2025 04:01:00 +0000
Manifest next update: Thu 11 Sep 2025 04:01:00 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: TC3jkHe8P5k/x0Qd0M1GBP11YJc7/ytXmhfSqs3ieb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:b4:41:13:10:96:81:f9:3a:c9:5e:83:4c:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Sep 10 04:01:00 2025 GMT
Not After : Sep 11 04:01:00 2025 GMT
Subject: CN=186990de757452ac9f919e3e63550cd3f67be57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:3c:92:e0:d4:98:f7:e4:6c:8a:23:c1:5e:
cc:d8:1a:e0:32:6e:fd:bb:ed:d1:97:c6:4b:a9:2d:
df:e1:2a:1a:37:8f:c7:85:2e:e1:56:d7:d3:fb:3b:
21:dd:34:85:95:bc:e6:40:ef:94:7f:4c:bf:79:bf:
4e:9e:1d:63:7a:00:b0:c3:f2:00:f6:48:9e:df:b8:
b6:d9:2c:b1:6d:b5:63:ff:be:09:76:ba:4c:a1:c3:
82:66:d0:a8:d5:b5:98:cc:5f:31:ee:4a:c9:69:5d:
fe:0d:8e:1f:74:b1:7a:8e:86:3e:6b:d9:bf:63:b5:
1d:64:c0:99:35:bd:39:71:66:8e:8f:5a:80:3d:a0:
b2:43:e2:70:92:78:42:15:6c:25:00:29:78:9a:0f:
68:ef:49:e8:e5:06:78:e7:fb:f4:9e:8d:95:9d:c9:
7d:65:e5:df:f7:54:dc:23:93:50:e6:74:97:03:d7:
e8:fd:9a:74:22:e2:3a:b4:7e:ed:9e:36:b4:ef:07:
56:22:1b:36:e1:b7:7e:0b:1d:09:f8:db:42:3a:01:
83:cc:5b:01:80:44:f2:be:57:5f:fe:a3:58:8b:3e:
23:a5:8c:de:b6:6c:1f:3c:42:ae:f4:0e:64:77:70:
f1:4c:e8:08:ed:a3:50:c3:7f:3b:ea:0f:b9:76:b3:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:90:DE:75:74:52:AC:9F:91:9E:3E:63:55:0C:D3:F6:7B:E5:7A
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d2:7e:25:dd:ef:f6:b6:00:6f:bf:cf:c4:af:1b:5f:2c:b0:
df:b5:76:89:15:29:91:f7:2a:aa:c2:cf:87:4d:5d:8e:fe:7b:
b4:a5:91:59:7a:23:eb:37:e1:70:8d:82:b5:d2:56:4c:e5:b9:
e7:fd:d5:a1:2e:ba:3e:c5:15:02:4c:50:23:a3:18:01:3b:a2:
71:0f:32:26:9f:f0:5d:e2:3a:10:b7:32:48:0a:40:f0:81:f2:
bf:02:60:32:ee:58:3b:e9:6f:8c:f5:c7:44:0d:af:7d:1f:29:
3e:56:a6:a4:72:8b:82:2f:35:67:eb:dd:9d:b3:36:a2:07:d8:
71:7e:cd:80:00:c2:ef:b0:87:7b:7c:65:bf:7f:82:d1:6a:54:
b7:8d:81:8a:b1:5b:b3:b3:dd:d7:e4:4b:ed:fb:e8:21:65:54:
6b:f3:e5:bb:e0:00:ff:ae:48:7f:83:55:02:fc:34:8d:a5:ce:
b8:c1:73:2c:06:1c:c0:61:6c:39:3c:cc:79:7c:b4:a1:89:81:
49:98:d1:89:58:40:62:52:5b:21:be:83:50:f5:c9:fb:1a:16:
4f:98:2a:10:df:6f:df:0f:f9:aa:c9:69:7a:1c:66:1b:8a:c1:
f3:8f:57:ef:e1:31:c4:fb:ba:85:20:3d:9c:67:6f:cb:fb:eb:
74:b9:f2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:19:26 2025 by rpki-client