Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: w73jls/tA4dWgU4f7nhFdP3w8zR0pCur7mUhm9e3hG4=
Subject key identifier: B3:D1:80:DD:D1:9F:32:33:AC:56:A3:FA:C7:CB:36:68:62:37:A0:AE
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 019921E76DFDAF3574B6A732BE461BEACFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:39 +0000
Manifest this update: Sun 07 Sep 2025 02:00:39 +0000
Manifest next update: Mon 08 Sep 2025 02:00:39 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: jAMeoCvFTK/RpApSAGvtYVm8i4DBEmZx2Dw6zJpJmlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:6d:fd:af:35:74:b6:a7:32:be:46:1b:ea:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Sep 7 02:00:39 2025 GMT
Not After : Sep 8 02:00:39 2025 GMT
Subject: CN=b3d180ddd19f3233ac56a3fac7cb36686237a0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:c2:2b:02:0c:c5:4d:bb:4b:a8:34:f5:a8:
a6:0c:28:a2:5b:21:bd:15:19:e6:2c:78:d7:44:93:
8d:22:53:c7:4e:ee:0c:84:27:f1:ec:b3:6b:10:a2:
97:86:57:6b:b0:44:7e:6b:06:34:9f:5d:22:51:e8:
a8:92:4b:97:c1:89:4e:ff:92:1e:aa:2f:39:8f:06:
a3:4f:32:36:c1:cc:9f:09:53:08:27:ae:de:a4:f3:
df:4e:0b:1c:22:14:0c:8f:5a:09:3b:4b:ad:62:fd:
ec:91:42:92:9d:7c:ca:59:76:f5:b6:72:b9:f1:d7:
ae:88:bd:72:d3:68:a5:33:d2:0c:b5:85:20:da:87:
56:76:6d:5b:0e:21:5c:77:67:d5:60:8c:e8:bd:2f:
61:0b:bb:76:aa:94:68:35:62:ce:b2:57:e2:af:7f:
f3:63:5c:33:c2:d7:8c:27:bc:e2:d9:c2:2e:62:b2:
ca:d4:47:ee:25:b3:5b:41:ec:b3:9e:7c:fa:f8:ce:
cc:bc:06:1c:a2:30:88:2c:25:43:9b:85:a1:71:19:
cf:61:44:ce:9f:09:73:9f:df:ba:2d:e9:35:bf:be:
86:1c:bf:2b:cf:17:89:71:7b:e9:86:7c:8b:0d:d1:
28:5c:42:4a:fa:96:de:29:eb:35:9e:7a:54:37:22:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:80:DD:D1:9F:32:33:AC:56:A3:FA:C7:CB:36:68:62:37:A0:AE
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c5:eb:de:ca:39:c0:7f:bb:76:f1:73:a8:bd:06:b5:bd:ee:
67:5f:dd:52:3d:d5:99:aa:3e:4f:90:39:a3:a3:9f:52:d8:df:
55:24:a4:31:67:ef:29:35:89:7f:68:6c:50:f7:2d:7e:88:61:
c4:ff:75:0b:cd:91:93:24:69:98:16:77:37:bb:fd:88:22:5e:
c9:dc:25:aa:1d:18:82:3f:b2:00:b8:e3:3f:73:ea:53:f7:5a:
55:fb:de:e9:97:e8:df:48:a9:55:7c:09:4b:70:d3:38:77:63:
e8:4d:21:31:9f:90:9a:db:4f:e7:7c:2f:45:da:00:14:66:db:
8b:24:5f:0d:d9:0a:4a:30:cf:8b:83:f3:b5:4c:68:a0:e4:f4:
a4:a0:97:4a:40:a5:f6:a9:7f:9d:fd:52:18:7d:42:50:19:30:
8c:c4:f5:03:5b:4f:fb:09:09:64:c7:c7:2e:5a:bd:fd:09:7a:
66:82:b2:5c:19:09:91:88:a1:21:d2:23:53:bf:59:1b:43:61:
22:8f:52:51:80:20:b2:d9:5d:2f:58:0f:78:22:44:46:16:7e:
65:0d:17:da:de:d2:bc:24:43:5e:11:15:43:c0:52:8e:a5:b9:
54:16:d0:22:bf:be:7f:ac:a7:57:0a:41:1a:27:66:d8:0a:3d:
7f:a2:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:02 2025 by rpki-client