
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: rDMccuBPiX/JZ1Vs/zH+rzz7SFZO1r8m/YtPUkWrY2g=
Subject key identifier: E4:EB:05:1D:1F:76:6A:C4:1E:6C:A5:C1:B5:48:37:9C:B6:CB:35:76
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 01993500AF9CC2A4CAC879FB75D1079CD0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 19:01:01 +0000
Manifest this update: Wed 10 Sep 2025 19:01:01 +0000
Manifest next update: Thu 11 Sep 2025 19:01:01 +0000
Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: LRtkva2azmEbPqOnoFar1bg0CklBPk0fykdkx4LljmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:af:9c:c2:a4:ca:c8:79:fb:75:d1:07:9c:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Sep 10 19:01:01 2025 GMT
Not After : Sep 11 19:01:01 2025 GMT
Subject: CN=e4eb051d1f766ac41e6ca5c1b548379cb6cb3576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:82:e0:9b:ab:3e:3f:60:82:b1:62:b3:9e:
32:fd:0c:23:89:94:93:a7:97:ec:13:2e:ca:a8:fc:
d1:ef:0f:c1:53:b5:75:0b:83:eb:24:b8:1c:f1:fd:
9f:18:a7:eb:43:c9:d2:1a:fa:2c:a7:6b:8d:4c:cb:
64:20:a6:d7:79:b4:3f:32:31:aa:48:05:c7:b9:45:
72:77:b7:fc:6e:3f:c8:ed:d0:53:79:1c:fd:52:4a:
08:a4:91:8d:e6:3e:68:88:fc:e4:9e:23:7a:82:68:
39:fe:f9:f0:fa:ed:da:35:9b:8b:a4:5d:a3:b8:87:
35:c5:52:4b:f8:ff:b1:dd:9b:d4:d9:bf:6d:94:7d:
9d:de:f7:de:5a:f3:dc:8a:46:01:cc:54:2b:64:71:
19:2d:11:13:c0:fc:ea:17:6c:90:49:89:cf:10:ed:
65:80:df:08:db:ea:af:96:75:b0:90:86:62:50:d1:
f4:ea:32:c4:0a:73:03:ba:92:65:e2:ab:1d:d0:93:
81:54:3c:49:71:1b:e6:c1:33:3d:9d:26:ee:45:34:
5b:96:c4:ef:d6:99:52:ab:d3:26:26:cb:3d:a1:6e:
5d:3e:a2:84:03:1c:0e:41:46:b0:71:08:67:e5:da:
63:b1:cf:7a:43:95:8e:7e:e1:d1:91:8c:98:90:35:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:05:1D:1F:76:6A:C4:1E:6C:A5:C1:B5:48:37:9C:B6:CB:35:76
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:18:a9:30:3f:40:f8:9e:cb:7a:31:ec:a3:c6:7e:1f:d8:
b8:9d:33:fa:18:83:fd:f1:c9:c3:ec:b7:3d:e4:03:0b:78:ab:
6a:80:d8:5d:dc:02:ea:0e:22:ee:7e:cc:76:0d:23:eb:b5:83:
70:8e:fb:d3:46:0a:9a:98:9b:4d:f3:92:58:be:95:df:a1:1c:
e4:52:c6:86:74:a6:17:57:77:ac:08:7d:66:97:02:bd:35:47:
a3:9a:61:92:b1:0f:8e:73:26:b6:74:66:9d:7e:69:3a:a4:ba:
6f:18:44:2f:8a:5a:56:a2:90:32:fa:14:04:b1:87:d6:a7:26:
ce:95:ee:2e:c8:3d:a9:bf:71:55:dd:07:ab:cc:2e:c4:06:f2:
82:4b:80:ed:71:cf:40:8f:e2:a7:64:b9:37:7e:7c:5b:bb:4d:
ab:96:12:eb:8d:ef:f9:ce:f2:e6:56:ed:4d:3d:ba:d4:54:12:
9d:83:29:59:7a:ab:ad:2f:97:e2:b9:61:a4:d1:8d:f5:6e:f2:
b5:78:36:a1:ce:f4:f4:f3:d6:58:fb:0d:d3:b4:18:a0:fc:5d:
9a:18:b4:61:89:8a:79:1d:c9:6d:64:1b:1f:8c:6b:13:82:9f:
57:9e:44:54:bc:d8:75:08:22:73:e3:d0:48:96:59:24:01:ea:
11:2a:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:24:06 2025 by rpki-client