Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier: ZJLJ7Qya36N0qLX48YBB9r8IYOl5Ij/72/JmU5CQ3zg=
Subject key identifier: 4A:AC:4F:CB:8B:4D:98:09:26:DB:0E:DD:D3:92:65:81:F5:6D:52:91
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial: 019923D5E8F7BE3F459AEC5DED310505E4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 11:00:45 +0000
Manifest this update: Sun 07 Sep 2025 11:00:45 +0000
Manifest next update: Mon 08 Sep 2025 11:00:45 +0000
Files and hashes: 1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=)
2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: 2FHiItVaSfpEu9WcdyNAqKS6pdyqVNNQe6nbPbxTPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:e8:f7:be:3f:45:9a:ec:5d:ed:31:05:05:e4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Validity
Not Before: Sep 7 11:00:45 2025 GMT
Not After : Sep 8 11:00:45 2025 GMT
Subject: CN=4aac4fcb8b4d980926db0eddd3926581f56d5291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:e4:b5:9b:39:6f:e6:eb:93:d5:6e:8c:63:
a4:af:10:0a:ea:1b:07:03:d4:bb:cf:36:c7:39:a2:
af:73:7b:66:0a:28:ff:a0:87:c2:e0:e6:78:8f:f7:
0a:b5:d2:50:4f:9f:d1:39:cc:95:ec:16:20:69:86:
34:46:97:81:2a:a9:c9:33:52:70:a2:ca:ab:6f:ee:
ee:86:eb:54:30:29:f6:64:71:79:ca:68:6b:bb:0d:
0a:96:bb:8f:e8:24:eb:7b:12:db:20:0e:72:a9:1e:
8d:34:ab:48:09:4d:28:22:55:2b:7e:a1:e0:96:eb:
7e:38:81:33:f8:51:19:39:b0:59:4f:53:38:d6:25:
67:28:36:3c:ac:c3:d2:ba:1e:ea:56:8d:1c:b9:60:
60:b9:e2:7b:18:9a:0d:07:bb:f4:d3:84:7d:18:a3:
94:24:21:7a:9f:ab:54:14:27:85:1e:3d:3b:94:2b:
df:b7:08:6b:08:8f:94:f0:46:61:1c:da:dd:68:87:
06:d8:dd:e7:b5:94:d4:9b:5b:20:4d:85:d1:a2:be:
86:94:75:19:34:a8:2f:2b:66:95:51:d0:3e:b7:3f:
2d:84:8f:f4:38:42:43:d6:34:81:ae:d6:1f:bd:06:
8f:ff:fa:ed:78:6d:f5:2a:5c:80:5d:f9:d0:b8:67:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:4F:CB:8B:4D:98:09:26:DB:0E:DD:D3:92:65:81:F5:6D:52:91
X509v3 Authority Key Identifier:
keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:9b:76:aa:c3:42:e2:6b:1a:2d:2c:22:1f:7e:8f:e5:54:
b2:eb:96:22:8a:43:4b:d3:f4:ec:9f:7f:60:46:7e:a0:4c:34:
de:e5:f1:26:72:2c:65:ae:04:a9:78:d5:e9:91:99:1c:79:d9:
54:f7:77:f6:3d:0c:d6:7c:45:2b:be:b7:d2:40:3c:75:e4:a1:
22:2e:8f:5e:24:9d:fb:5b:2a:31:8a:18:38:ce:5b:6c:69:fb:
0a:8c:2e:48:50:a8:b6:f2:3c:18:36:43:e5:4b:d4:a1:a1:85:
62:e1:07:0e:b5:99:41:c4:fa:0d:22:5b:56:ce:08:bb:52:18:
e3:57:e5:44:a9:72:06:27:9e:0f:56:b4:4a:12:83:d8:c4:0f:
ab:e2:36:d3:56:7e:23:29:14:29:fd:72:d0:28:83:5e:f0:48:
70:00:92:0a:4c:63:45:a4:7b:3f:44:b0:6d:9a:4c:d6:b0:20:
c8:d8:25:76:eb:b2:ba:62:e1:30:5d:94:71:d0:e6:8b:43:c6:
41:df:15:8a:f8:2a:71:c1:66:73:11:f1:0a:c7:92:77:c4:61:
7e:ff:3d:24:f7:12:29:ec:6b:bd:46:99:aa:82:0a:57:3b:7b:
00:23:1b:11:7c:c5:8a:4d:e0:ba:fc:20:54:0b:c8:15:c6:c0:
5b:d5:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:25 2025 by rpki-client