Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: DwphvBj/9eUlm/vrE1xIE7MTy7bUY3WOQlWZo7aGd7c=
Subject key identifier: 72:4B:B5:D1:6E:08:EB:28:B1:95:AD:9D:29:36:86:70:83:94:F0:82
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 019922FA92976FC55F8A6BFE942D356EFAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 1372
Signing time: Sun 07 Sep 2025 07:01:10 +0000
Manifest this update: Sun 07 Sep 2025 07:01:10 +0000
Manifest next update: Mon 08 Sep 2025 07:01:10 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: 0K48GXydV3H2MBK1e9RDIItwNl2CsMiyruOP7Rfjbw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:92:97:6f:c5:5f:8a:6b:fe:94:2d:35:6e:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Sep 7 07:01:10 2025 GMT
Not After : Sep 8 07:01:10 2025 GMT
Subject: CN=724bb5d16e08eb28b195ad9d293686708394f082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:1f:55:02:51:df:c2:b0:c4:10:97:19:1c:
88:f4:d7:73:08:6f:f6:55:36:e5:ec:d5:a0:b8:c6:
b9:7d:b8:71:20:ea:1d:c6:27:01:88:8f:16:16:fb:
1f:47:5f:e9:c4:23:e2:e1:b3:0c:8e:b9:1c:50:43:
64:77:78:e7:a0:dd:4d:19:1a:2d:5a:fa:94:cd:9c:
59:d9:06:5c:75:2a:8e:a8:1a:84:07:c7:e6:bb:de:
7d:d9:05:35:da:5f:84:18:1f:d2:1e:e3:b3:18:6d:
57:3d:c1:30:d7:1e:b7:24:f5:62:78:e2:a6:6b:91:
2e:db:a0:3b:e8:bd:6a:f0:82:cb:e8:81:17:a7:14:
25:ba:d9:48:be:c0:0e:a2:c5:d0:15:8e:1e:e7:04:
c3:a7:33:34:38:7c:2b:e7:dc:13:e6:f7:17:1b:62:
8e:ec:21:8f:46:db:38:2e:32:a6:1f:80:bd:af:a3:
8c:07:04:be:55:34:82:2a:d5:7d:ac:a2:ac:b7:2d:
3b:e4:1e:a6:61:0a:b8:a9:5f:03:bd:fa:ef:c9:3a:
dc:73:1b:ba:97:7d:86:4b:42:74:76:70:55:93:87:
80:c7:4c:6d:54:93:17:d0:f9:cc:c0:f8:99:2f:dd:
32:24:b8:48:43:30:6a:77:20:38:e1:04:0d:fe:80:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:B5:D1:6E:08:EB:28:B1:95:AD:9D:29:36:86:70:83:94:F0:82
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:9c:0a:d3:f6:35:f3:5d:1b:50:17:d8:6c:70:70:d3:ed:
5d:83:33:24:5f:66:4c:db:5a:2a:7f:55:9f:1a:7c:50:d9:66:
bc:58:d4:d0:6a:9c:5f:c0:fe:b1:0a:c0:46:ae:c8:6b:a6:56:
2f:6a:be:fd:23:e3:fe:6d:e5:10:dc:9c:af:73:e9:17:1a:79:
57:c3:c8:d8:ef:a7:88:1f:3c:9c:54:66:d2:50:d2:d6:3e:e8:
55:71:44:d3:aa:80:c2:b4:b6:a0:7d:ef:3c:64:65:e9:7e:37:
a1:59:c2:7a:66:7d:e2:07:37:6d:9c:69:e5:03:6b:a8:1b:96:
ab:b1:8c:cf:50:ee:e7:78:70:3f:76:69:f4:9c:0b:4e:a1:69:
72:09:74:f9:db:d6:bb:80:9e:21:03:b0:09:6a:e3:5d:6f:0c:
b1:2f:a5:c1:5c:e3:e0:f4:06:cb:52:e0:0a:20:32:b1:df:5d:
35:70:81:62:67:fb:f6:2b:27:d1:9f:25:b4:c8:2b:cb:45:61:
46:ca:8c:33:62:e7:1c:80:56:60:c2:6b:3e:2f:80:81:fd:a1:
11:bf:5b:c0:45:5d:16:31:f8:88:8d:54:c5:5e:e0:59:34:96:
39:fe:c3:6c:c9:04:2e:9d:36:7d:2c:3a:fa:4e:5d:81:81:89:
96:0f:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:02 2025 by rpki-client