Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
File: xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json)
Hash identifier: HICzLGxpF6t0E8IyRmldksNWOZdr912F3lw6z9Vqcgk=
Subject key identifier: F1:39:64:93:3D:7F:AE:2F:97:E9:FC:95:D0:1A:5D:F9:1B:92:13:C4
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial: 019922FA4A3903FACF3D8B47175938D5EF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
Manifest number: 0BB7
Signing time: Sun 07 Sep 2025 07:00:52 +0000
Manifest this update: Sun 07 Sep 2025 07:00:52 +0000
Manifest next update: Mon 08 Sep 2025 07:00:52 +0000
Files and hashes: 1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=)
2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: 82PxVnHL02t9w7659zX1b+cMC/Wr6u+9zLr8mSi3CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:4a:39:03:fa:cf:3d:8b:47:17:59:38:d5:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Validity
Not Before: Sep 7 07:00:52 2025 GMT
Not After : Sep 8 07:00:52 2025 GMT
Subject: CN=f13964933d7fae2f97e9fc95d01a5df91b9213c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:2b:c0:51:0f:07:89:31:0b:5e:42:24:64:
c5:b8:3e:6c:c1:91:34:be:f6:05:54:94:cd:1d:b6:
65:58:e5:f1:31:8b:d9:b6:25:6a:40:61:c1:09:8d:
83:dd:a0:1b:96:95:42:b9:c1:6a:bd:32:54:3f:bb:
db:76:1f:e5:3d:9e:38:94:c0:54:fc:81:d2:cb:cd:
4a:b2:1b:36:4e:20:fe:f6:87:0e:b0:8f:90:92:3a:
a9:46:f4:83:af:61:59:48:eb:2f:bf:95:20:eb:dc:
d4:69:e1:ed:a5:6d:09:b1:3e:45:25:f9:d4:3d:08:
9b:61:cf:99:94:0a:42:0c:35:e5:78:2c:15:e2:44:
13:00:1e:50:8f:9f:29:51:b4:b4:04:98:33:bb:1e:
e2:e2:9b:b7:1d:2a:89:a1:e3:f3:c3:f4:6c:3c:d0:
ef:dd:5c:56:48:0d:97:0f:3b:e6:3f:ef:d6:d1:b9:
07:59:2a:db:bd:55:3e:d1:aa:fc:32:53:2b:c8:60:
99:1f:98:2a:e6:20:c8:1e:cc:4e:54:e2:79:d6:48:
c9:0f:d4:68:0f:e3:89:c7:3e:9e:b8:d9:80:1e:7b:
e3:a3:c5:e8:0d:1d:d0:1e:6b:0f:f6:bd:a8:0e:17:
2f:c0:47:6d:ad:70:d1:33:88:f2:1f:65:e3:a4:a0:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:64:93:3D:7F:AE:2F:97:E9:FC:95:D0:1A:5D:F9:1B:92:13:C4
X509v3 Authority Key Identifier:
keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:41:04:cf:fb:97:1d:87:5e:b1:cd:99:cf:38:c5:f4:39:
8b:0e:e4:6f:0f:ba:72:fe:bd:7c:eb:22:0f:11:7b:dd:f4:97:
e4:fd:51:ab:54:71:67:95:d7:96:49:a9:4f:f9:70:26:36:ba:
c1:c2:be:53:10:9a:eb:25:07:e9:ad:41:6c:8c:b7:47:a2:63:
7c:bc:a6:1a:9a:5f:51:3b:d5:ec:d6:77:d0:de:69:2d:34:8d:
f0:5a:c4:c5:79:3c:f3:1e:59:0b:44:2a:a2:39:4e:be:ed:d9:
bc:8b:1b:0d:1d:17:3f:7f:81:85:11:51:93:79:e9:82:06:6c:
74:18:dd:5d:00:a7:15:98:d3:ed:d9:04:83:bc:23:80:34:87:
d8:d1:59:47:5a:ec:88:ef:1f:ce:0e:03:6b:d0:ba:8a:0e:df:
21:e6:9c:c9:38:60:ba:ee:3a:9f:1d:4d:72:a3:8f:1f:4a:c4:
73:c4:ea:8a:24:21:de:22:95:d6:13:d6:cc:40:47:20:b9:74:
26:bf:3c:9b:89:93:b6:ad:02:6c:ba:03:04:29:81:c6:81:73:
80:19:24:c4:19:a2:6a:2a:8d:5b:06:c0:1e:cb:59:76:ef:d6:
c1:8f:3b:d8:4f:81:4e:55:13:4a:a2:65:05:1e:ca:06:03:18:
5e:d2:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:02 2025 by rpki-client