Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: NrEG3ZtnVTbsaWr0j0nJffH/8ho/IKkXvEIRwV/mZSw=
Subject key identifier: 12:8C:F9:6B:BC:F5:9F:60:BB:82:F1:30:F9:2E:94:17:50:78:EC:90
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019933B780C3162A269AA93B3839A2CAFA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 160C
Signing time: Wed 10 Sep 2025 13:01:27 +0000
Manifest this update: Wed 10 Sep 2025 13:01:27 +0000
Manifest next update: Thu 11 Sep 2025 13:01:27 +0000
Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: DuY7XGct7vA55Aq2N968QVddc8zbfmsRi9tVLKECSXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:80:c3:16:2a:26:9a:a9:3b:38:39:a2:ca:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Sep 10 13:01:27 2025 GMT
Not After : Sep 11 13:01:27 2025 GMT
Subject: CN=128cf96bbcf59f60bb82f130f92e94175078ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:cc:62:f7:c1:f6:b8:1d:1e:99:e1:3b:86:
5c:14:8e:02:e2:58:0d:33:af:83:61:1f:e7:28:51:
af:25:2d:f3:a1:84:91:58:9c:37:10:24:f3:74:0c:
16:1c:c6:50:60:b2:bd:6e:64:8d:6f:58:92:e7:cb:
ac:7d:45:42:a5:c0:61:c4:77:c0:ff:ed:12:67:cf:
2a:c4:35:ab:4f:d2:cb:5a:20:e3:b9:c0:5d:b5:34:
c0:3f:d4:43:5c:58:c2:b8:c3:f5:d1:71:27:00:3a:
24:be:60:8d:23:c9:56:0e:2c:3a:e0:a2:da:b7:9d:
e7:10:87:d8:7c:d6:10:85:54:30:26:b2:cd:92:69:
02:a8:a3:4b:10:99:9d:90:8b:4f:0a:2c:d7:26:f8:
7e:ff:5f:e2:b5:e8:58:ef:b7:9d:12:d4:3f:a6:42:
76:0f:c4:02:7f:77:c9:aa:37:f4:1b:e2:21:b9:55:
1c:eb:f2:a3:c9:42:ab:f1:ff:b9:78:1f:d1:71:57:
e0:c2:c5:2a:63:ae:e2:87:2e:27:fc:ba:4a:7c:ee:
56:28:50:97:42:c4:ca:9a:d4:f2:24:81:34:64:b0:
ab:f5:fc:86:df:e2:61:24:06:22:d5:63:1d:28:d1:
61:7b:73:b6:d0:18:0e:9e:17:92:63:70:80:a4:d5:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:F9:6B:BC:F5:9F:60:BB:82:F1:30:F9:2E:94:17:50:78:EC:90
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7e:50:b8:c3:98:bd:a2:9d:68:7f:71:f1:b4:81:94:79:54:
08:4e:91:d2:c9:fa:9e:96:1d:f2:c7:57:18:57:75:7c:d2:3e:
02:bd:d6:06:6e:ec:b7:4d:8a:e7:8f:98:b4:1b:b5:5c:27:b5:
7b:6d:30:7d:6e:89:ae:bb:4e:37:1d:bf:46:0c:cd:a0:35:9c:
ba:8d:fb:2e:e1:15:a2:b8:db:a9:89:e6:98:da:2a:2a:8d:a0:
0f:fd:c6:49:29:43:b8:47:3f:0b:3c:db:c7:a0:16:15:86:2b:
40:de:73:ce:91:c5:de:6e:4f:02:4f:7a:1d:09:e0:e8:3c:e5:
3a:af:fa:30:5b:b4:69:44:7d:f7:de:43:3f:7a:d0:28:2e:a6:
c4:7c:36:01:6d:5c:cf:f8:db:40:87:b9:08:96:fb:8e:9d:7b:
97:34:56:cc:12:a7:95:9a:54:5b:fb:af:1d:4f:0d:1f:bb:62:
e1:f5:ee:98:54:c5:c0:bc:14:9c:a1:59:9a:fe:5e:ab:31:11:
af:57:7b:c1:1f:b4:43:b6:2c:b1:ee:85:67:4b:91:b1:57:55:
bf:9d:d7:4d:88:88:8c:fa:c7:5e:db:f8:25:cf:44:d1:a2:77:
49:7b:bf:39:2b:cd:0d:48:c7:4d:ec:b2:29:b3:a9:fd:b4:9b:
e3:f7:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:47:59 2025 by rpki-client