Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: M8bVenmVW0L7iqjRJfmr1b9vW3WRqLTkHZ0lLn+zdKw=
Subject key identifier: 16:0F:A6:54:52:22:B8:D3:E3:55:73:6B:A3:43:C6:F3:4A:89:09:2E
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 01994F2DE0A8ED17DB90D39859F1E829B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1625
Signing time: Mon 15 Sep 2025 21:00:30 +0000
Manifest this update: Mon 15 Sep 2025 21:00:30 +0000
Manifest next update: Tue 16 Sep 2025 21:00:30 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: 92fXoK3y/zC9i1r8QYX/PDzs7ZdXnC9yEEU8w2+7IsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2d:e0:a8:ed:17:db:90:d3:98:59:f1:e8:29:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Sep 15 21:00:30 2025 GMT
Not After : Sep 16 21:00:30 2025 GMT
Subject: CN=160fa6545222b8d3e355736ba343c6f34a89092e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:2c:87:49:b2:28:60:b2:f0:62:17:42:9e:
36:dd:44:d3:6b:a0:b8:ba:06:08:19:b9:b2:1e:b2:
10:da:f2:19:07:28:ff:a1:ef:07:8b:4e:4e:fc:76:
63:05:bc:23:4b:ed:14:45:7b:4b:93:86:6e:b6:d6:
5d:85:41:3e:5c:ec:d5:1d:33:eb:80:ee:65:33:02:
f5:cf:ce:c6:2e:03:d3:5a:ec:8f:44:b3:2a:8f:14:
05:21:91:b3:dc:84:9b:91:e9:4a:99:19:e9:08:99:
ba:70:2d:93:d0:ab:91:38:df:d4:d9:d8:7a:3c:a1:
9e:d0:96:16:b9:9c:b9:39:e4:d7:aa:0b:9a:09:9c:
c7:6d:78:67:86:c7:c1:6b:b4:8a:bc:40:b9:5c:47:
f1:94:32:d0:e7:07:3b:52:25:bb:ca:94:ce:be:32:
eb:d9:94:4e:4d:ac:6c:af:76:cf:da:ff:63:33:44:
79:07:77:14:75:5d:23:b0:1c:8c:b8:3b:1f:c5:69:
2c:33:dd:36:3a:7a:63:c3:dd:15:8b:09:cf:4c:62:
8d:69:eb:a6:24:a4:55:d6:2d:88:ee:09:55:f0:b0:
4c:21:fd:c1:2b:47:c2:71:47:cb:9d:db:68:7b:f1:
f8:d8:6f:76:50:40:1f:8a:af:94:d9:8e:10:60:9f:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:A6:54:52:22:B8:D3:E3:55:73:6B:A3:43:C6:F3:4A:89:09:2E
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:15:d6:64:67:06:d6:f6:b4:b4:75:62:3b:bd:f3:a1:08:07:
9a:ef:b3:b2:68:e9:ba:f2:73:66:0b:16:64:46:2e:6e:7e:38:
34:d7:b2:d6:4d:d9:d6:b9:bd:98:6b:02:c5:50:d6:0b:ca:fb:
a8:3d:cb:82:d5:97:dc:56:91:86:1c:3f:08:ab:a7:bf:08:1d:
6f:71:11:f0:1b:68:20:0c:7d:69:fb:1f:38:29:b4:57:e5:6d:
1a:1a:aa:7b:5e:9d:5c:28:fc:31:07:59:c4:b2:04:3a:1f:9b:
6f:1b:2a:08:c6:59:be:9a:84:b8:0a:96:4f:1b:93:3b:48:76:
55:93:77:a3:4d:0a:b3:5f:6e:17:2f:0b:45:b0:8e:33:40:61:
f9:94:b5:88:ce:a7:67:d4:a7:09:68:24:21:6f:6d:d9:40:7c:
0e:7e:34:c7:8d:58:6c:74:94:95:ff:18:64:e3:5f:5d:ac:df:
4a:81:da:e7:c6:9d:bd:56:a4:4c:41:40:b0:18:65:02:01:24:
05:b5:c8:60:63:5e:c3:75:c9:70:ce:45:f3:16:14:b8:e5:d5:
ad:23:66:db:c4:d4:c0:a0:82:b9:d1:bd:0d:e6:f8:fc:a3:b7:
cd:a6:ab:9e:58:68:20:b5:7e:fd:6e:e6:12:ec:65:b1:72:e3:
3d:c4:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:51:36 2025 by rpki-client