Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: PxKI+cxQ0WcU08FTJYRs20zBIoRrEgnt3AbtqSXbQNw=
Subject key identifier: 90:92:29:14:7F:4B:27:2E:6C:01:9E:28:CB:D7:D6:3A:C4:01:23:8C
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 019935DC6CEEFD86131957A6CA179BB157AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 160E
Signing time: Wed 10 Sep 2025 23:01:01 +0000
Manifest this update: Wed 10 Sep 2025 23:01:01 +0000
Manifest next update: Thu 11 Sep 2025 23:01:01 +0000
Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: AN3w8aa32ltsGmfVFWG05Nb3Z0POABlZNoYc0oruDBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:6c:ee:fd:86:13:19:57:a6:ca:17:9b:b1:57:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Sep 10 23:01:01 2025 GMT
Not After : Sep 11 23:01:01 2025 GMT
Subject: CN=909229147f4b272e6c019e28cbd7d63ac401238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:3a:82:bd:2c:f2:fd:b7:1c:81:20:51:f7:
26:c1:8e:9b:dd:2f:e1:06:5a:bd:4e:7a:3a:04:20:
57:3e:14:99:86:ba:9b:87:66:98:0c:39:2a:b3:6c:
5d:ab:9c:1c:1e:7e:3a:de:ac:11:0a:67:58:99:c2:
d6:4c:6a:1d:86:35:bb:93:05:8a:f0:54:cb:10:35:
43:b6:03:bc:48:3a:05:fc:04:5f:76:ee:fa:4e:06:
60:40:e4:08:2b:b0:af:26:ee:c9:04:35:3d:45:7b:
64:e9:4b:49:be:3f:7f:a0:54:68:e5:ec:39:80:fb:
6f:e0:a1:9a:76:50:13:82:40:c0:ad:3c:ff:cb:0a:
74:ea:71:9d:89:f6:fd:d4:56:32:5a:d3:a0:83:e6:
e1:f5:dc:f6:64:7c:4b:cc:c6:32:c2:e4:4d:e2:18:
b3:cd:15:04:44:d1:f8:92:e4:3c:10:57:2a:dd:ca:
fc:6a:90:72:07:02:c6:35:1b:00:c5:d9:01:10:74:
ab:bf:aa:9d:52:d8:fc:14:22:b6:b6:69:86:1f:4c:
ea:a4:7b:eb:01:d3:dd:14:f4:97:ce:ea:33:7d:e2:
01:d1:62:03:05:92:d7:d5:db:a9:27:09:35:07:5f:
b2:07:f4:4f:81:4d:c7:ae:77:c2:07:aa:2a:9f:f9:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:92:29:14:7F:4B:27:2E:6C:01:9E:28:CB:D7:D6:3A:C4:01:23:8C
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:cb:b2:24:38:ea:6b:77:83:7c:5f:d3:6e:7d:78:7c:cf:
b5:20:89:47:5f:58:b5:80:9d:84:64:03:97:5b:f7:63:c7:86:
fe:3a:38:3e:73:ab:67:c6:98:a0:c0:7b:c4:04:6f:95:9a:2f:
cf:31:98:03:c4:ed:00:2e:d6:28:9e:2d:25:c1:44:e5:81:8c:
9b:5a:b6:48:27:4f:c1:7d:98:60:39:68:6b:87:65:c5:f7:9e:
ba:28:02:0b:f0:b1:e4:46:d2:89:00:dc:e9:1e:25:2c:5e:c0:
34:ae:56:af:aa:94:87:80:c5:fa:cb:3b:9f:2c:c2:62:2b:a0:
88:27:d0:68:6f:d0:15:e3:91:ec:1a:e1:04:c4:74:01:db:73:
80:fb:40:42:52:ca:db:42:5b:6b:0d:58:8c:00:d4:1a:95:76:
3e:54:0b:f0:1e:9e:25:70:53:c0:fa:1b:57:3f:9f:25:fd:6d:
b3:f8:39:6e:ad:60:d8:62:de:4f:69:82:34:0f:87:c0:21:6d:
07:93:87:13:79:82:53:8e:bf:c9:3c:4b:cd:59:54:f7:98:10:
e4:42:b4:a0:5d:e9:91:c8:b7:89:00:ac:22:fd:2e:00:5d:d4:
6a:e8:00:3e:a0:fe:10:a6:a9:10:51:86:00:a7:89:40:78:af:
64:58:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:34:16 2025 by rpki-client