Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: iNf15j8SvTMaXfwadGII3z0D6ld6ihdTrfDUtkxt2Ys=
Subject key identifier: 9F:A3:BE:11:B2:63:40:F1:00:77:F9:24:7F:2C:C5:D4:A8:81:71:E7
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019934924BBCFE82B245E8B50493694B6C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 17:00:26 +0000
Manifest this update: Wed 10 Sep 2025 17:00:26 +0000
Manifest next update: Thu 11 Sep 2025 17:00:26 +0000
Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: u6LEKAiGAcJC7WDmQwKswh3wbdPVC43V2yUjMn6zxB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:4b:bc:fe:82:b2:45:e8:b5:04:93:69:4b:6c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Sep 10 17:00:26 2025 GMT
Not After : Sep 11 17:00:26 2025 GMT
Subject: CN=9fa3be11b26340f10077f9247f2cc5d4a88171e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:cd:9c:3d:34:4d:4f:9d:e5:ad:a3:59:cf:
82:3f:a9:0a:23:4b:f4:c0:22:cb:34:ac:a2:84:f1:
7a:7f:64:74:42:e0:fa:fc:63:e6:ff:b7:ee:4e:b7:
e9:f5:ef:86:4e:4f:53:9a:74:bd:30:f0:88:5a:ac:
f1:33:2e:a3:0b:eb:2d:8f:7b:90:c5:f2:6b:d0:c9:
57:f3:46:d0:86:49:48:64:c0:20:9d:d3:07:f5:fc:
b2:e9:c4:f6:5f:ff:1b:6c:f0:27:60:9d:ed:59:bb:
de:e0:ce:da:a8:97:59:f6:2a:bf:ab:19:98:45:85:
96:3e:75:e1:96:cd:38:ec:45:f5:85:88:3f:da:70:
4e:49:56:f4:2d:3e:da:bc:39:a2:b2:7b:e5:c9:c8:
2d:98:3d:6a:ce:76:dd:b8:4a:9a:e1:c3:06:76:21:
b6:e4:c3:81:64:4b:ca:f2:9f:22:6d:5e:28:ee:ce:
f8:49:d9:03:d2:74:29:a5:a4:d6:20:71:51:42:ce:
2d:b1:52:3f:c1:c5:77:34:dd:06:0f:2b:17:cc:23:
58:49:e2:07:03:7e:3f:57:6a:64:82:95:e4:0d:d3:
90:ac:d1:56:98:6c:7e:0e:b3:a4:e2:49:49:5a:82:
cf:6e:f8:37:cc:c2:fa:e9:b8:7c:a3:7d:c3:e9:62:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:BE:11:B2:63:40:F1:00:77:F9:24:7F:2C:C5:D4:A8:81:71:E7
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:b5:f5:51:06:aa:58:0d:74:71:45:3b:c7:d7:bf:1a:3b:
59:65:1b:e4:04:4d:ff:0a:47:42:ca:cd:05:10:a2:4d:ff:9d:
00:a9:60:2f:a5:58:7f:4f:81:a4:7c:79:3f:21:d6:ec:29:81:
1e:d8:31:43:91:4c:08:af:69:7d:7e:12:02:53:40:14:90:33:
43:ef:c3:ca:c4:3b:f5:ce:0a:23:6d:b4:32:c0:a0:87:4a:96:
24:0a:38:78:89:49:6b:86:c4:90:e1:9d:32:fb:31:ff:76:6b:
a7:ed:15:cb:d7:fd:df:82:d6:ec:d2:8e:ad:bc:13:c3:51:a1:
8f:e2:86:48:44:7b:e1:81:dd:70:f1:77:21:e7:54:08:1d:d5:
73:14:0c:b7:72:fb:0d:d5:98:b5:b1:9c:21:88:b7:72:72:97:
20:3a:b9:34:bc:aa:f0:3b:73:bb:d9:40:a6:7f:fc:6a:55:a9:
9e:0e:37:b7:00:dc:e5:52:9d:7d:31:8c:4f:0f:ca:05:07:5f:
65:b8:74:dd:ae:cf:c5:69:09:a8:f6:3e:9a:eb:dc:0b:61:5a:
3a:6b:03:13:ec:f8:96:11:00:de:22:66:f8:3c:17:f2:71:03:
f7:a5:35:59:ec:d2:60:fe:df:1c:f4:5f:44:bb:58:b4:b6:64:
b5:64:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:51 2025 by rpki-client