Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: E+Tb23Ev7eRcBDUf/cg7PWnUI7z/hh+23WbwdGhI7DM=
Subject key identifier: 18:DD:69:0D:34:3C:85:D7:DB:2A:61:14:EC:BF:F5:3A:6C:BC:9B:F8
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 0199337FEE7B281C6A2E3CE5317BACF240EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0F01
Signing time: Wed 10 Sep 2025 12:00:45 +0000
Manifest this update: Wed 10 Sep 2025 12:00:45 +0000
Manifest next update: Thu 11 Sep 2025 12:00:45 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: 4V9HdGepgNUc76hYSG+3omyF2ygYF/smSb4/if9MY0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:ee:7b:28:1c:6a:2e:3c:e5:31:7b:ac:f2:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Sep 10 12:00:45 2025 GMT
Not After : Sep 11 12:00:45 2025 GMT
Subject: CN=18dd690d343c85d7db2a6114ecbff53a6cbc9bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:bf:d5:98:19:a8:38:e1:3b:22:7e:e7:a5:
ad:1e:81:4e:c8:e4:40:47:7d:92:03:b4:03:99:86:
3a:38:d2:ea:cb:e2:2e:dd:41:2c:91:ec:75:74:34:
fe:26:7f:22:d2:dc:10:bc:84:69:29:af:11:ed:b9:
37:db:88:c0:01:9c:c2:42:9d:cb:86:af:14:19:ee:
de:b3:81:a7:a8:19:c5:4b:6b:34:92:1f:6e:ee:fe:
4c:82:8c:09:57:0f:56:25:d4:9e:23:ef:75:b3:c6:
63:95:a2:c3:61:87:a0:6a:f6:cb:5d:f1:8f:a5:4c:
19:db:f0:03:c6:6e:05:a1:b3:58:2b:e6:32:89:e8:
11:26:5e:e6:52:50:a3:bd:3a:43:98:58:1c:15:51:
23:8e:71:5f:14:be:bb:41:f2:3e:c8:f9:5c:43:1f:
e5:11:1e:e7:94:61:b0:cf:99:1d:86:e5:d1:bf:6d:
53:93:f4:76:92:23:9e:4b:75:33:30:aa:b1:72:9a:
fb:eb:73:77:55:23:55:94:e7:9c:00:57:47:6c:ef:
a4:cb:e0:58:ae:80:c3:b5:5d:27:44:69:bd:df:9f:
a0:f0:63:4b:65:08:a7:d6:eb:e3:3d:72:25:22:06:
8f:6a:6a:3d:81:96:c9:15:1b:93:db:08:a5:f8:c8:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:69:0D:34:3C:85:D7:DB:2A:61:14:EC:BF:F5:3A:6C:BC:9B:F8
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:54:da:98:64:4d:d3:7e:07:e9:73:25:17:79:0c:a0:ba:f7:
0a:40:8a:89:0c:02:a8:6f:7e:4a:18:05:fc:1b:6e:ea:5f:c3:
6c:58:8a:bd:04:cc:8d:52:b4:ce:b1:07:1a:f6:61:23:a6:48:
67:69:96:49:18:11:a7:de:bb:61:13:19:ea:f6:09:c8:33:3b:
c7:86:3b:59:29:94:75:74:7b:01:6c:d6:47:a7:44:d6:c0:a1:
15:f0:c7:f0:15:47:6f:f2:8c:d2:eb:84:c0:db:60:41:d6:33:
cf:ec:a8:e5:0e:9b:72:ea:77:87:6f:cb:1f:57:8a:c1:84:55:
13:03:cf:a6:21:ed:39:23:78:99:d9:66:2b:fa:56:e0:46:36:
40:c0:d2:38:0a:dc:ee:d7:5b:d5:7f:01:97:cb:e9:6e:cd:22:
f1:26:2e:c7:01:8e:e3:e2:6a:b9:b0:06:4a:9a:3b:ef:ff:92:
bf:11:1a:bd:e9:cf:04:c0:0c:3f:36:d0:8a:24:61:a1:06:08:
a3:70:d5:e3:95:3a:ec:f2:a9:62:a3:1d:72:f1:b5:ca:57:14:
a3:fc:3f:ba:1d:d1:81:1b:e5:93:d1:73:db:bf:eb:ab:bd:6a:
db:5d:70:39:06:d3:6b:1c:8f:59:e7:21:e6:aa:ac:c1:cd:4e:
8a:63:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:50:12 2025 by rpki-client