
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: XFidPqfe/hrb+bn4haUh5y2zJiXQcfqIx6pTYjSnOtc=
Subject key identifier: 53:55:34:84:BA:AF:EB:D6:D6:05:9C:E7:D9:B3:F1:EC:D1:7D:8B:41
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 0199180945C23B38DD9EF7DFA234C5F7EE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:01:24 +0000
Manifest this update: Fri 05 Sep 2025 04:01:24 +0000
Manifest next update: Sat 06 Sep 2025 04:01:24 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: 4tcjQf+aiwJY27/64KM1qQBQIr174se7wfkmFy3/Q0o=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:45:c2:3b:38:dd:9e:f7:df:a2:34:c5:f7:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Sep 5 04:01:24 2025 GMT
Not After : Sep 6 04:01:24 2025 GMT
Subject: CN=53553484baafebd6d6059ce7d9b3f1ecd17d8b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:ac:d9:38:d5:04:ec:0f:55:25:a5:7b:4f:
72:5c:27:a3:6f:b6:77:63:7a:db:ec:6b:a0:90:e7:
64:6e:a8:da:15:bf:b4:17:78:12:e2:cb:78:3d:a5:
fd:41:71:a6:d2:9d:82:5a:02:70:77:61:cf:8d:01:
8f:31:f4:3f:0a:d4:8f:36:76:b6:64:bb:a7:d0:6b:
e5:fb:a0:e7:d5:53:9a:d8:7a:88:23:70:72:0d:39:
f9:8a:f3:26:14:4d:f1:73:7d:27:51:ee:a9:2b:cc:
16:f1:1b:93:1b:1d:ab:23:9f:b1:ce:fb:f9:8b:15:
6c:43:d9:d7:01:20:56:8c:0a:31:7a:8d:c5:bf:cd:
cb:35:0d:b0:fb:07:e0:49:28:b9:33:db:25:28:b6:
56:f3:16:be:94:4f:2b:a5:b1:ce:d5:e1:bf:db:2a:
5d:df:e8:b2:bd:7a:75:be:68:b3:4a:c8:51:0b:0c:
83:dc:80:f6:f7:1a:35:15:b9:05:7f:26:65:10:5e:
52:90:59:57:d5:fe:95:d5:56:30:37:61:b1:1c:7c:
94:bd:47:db:10:26:db:be:87:70:71:35:fb:fe:6b:
c5:c7:dd:28:dc:b0:fa:74:40:1e:46:70:8d:f7:c6:
43:1a:36:c4:d4:02:65:f7:bc:1e:a9:38:5a:df:18:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:34:84:BA:AF:EB:D6:D6:05:9C:E7:D9:B3:F1:EC:D1:7D:8B:41
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:99:22:a2:2e:ae:6f:3c:0c:e6:0a:d1:e5:60:2c:e9:35:fe:
bd:fc:10:a7:b4:38:f2:6c:45:a5:29:cf:96:a4:50:b0:53:76:
e1:72:9b:a6:42:43:9c:4e:26:db:c4:9e:33:e3:69:90:98:48:
ea:bd:db:60:9c:58:7e:75:24:0a:06:1f:63:e3:0b:5a:aa:18:
95:b4:6c:45:4f:b9:3b:a0:89:ea:7b:38:de:c4:73:73:34:18:
4f:36:0f:3c:67:e5:2b:9d:40:4f:1a:da:6c:2c:e8:66:b4:ea:
c6:ab:d8:c6:9a:d9:05:3c:b5:18:e2:aa:c9:f8:ed:15:05:c8:
90:11:37:95:c5:fa:cb:b6:ba:e8:cb:cc:b9:1b:48:17:ed:89:
c4:2b:02:6b:a2:a6:f8:0a:83:d1:16:7d:17:27:a0:7b:cc:a8:
eb:e0:b9:fe:16:a2:08:d5:ea:f3:b3:d1:81:48:e3:48:f5:c7:
91:ac:9e:2f:ad:d7:ea:71:04:a2:89:37:64:a1:a1:58:cb:80:
59:07:18:0b:57:3f:ed:d7:df:ae:4e:d8:61:a4:e9:fc:be:6d:
95:6e:58:7f:67:79:6c:59:fa:20:91:94:0c:a2:a8:a8:a8:0a:
95:6e:f9:0f:94:d0:17:05:4f:63:38:21:12:e6:ed:0b:99:d7:
20:12:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:45 2025 by rpki-client