Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: tp2oa1mMcXx7v9kH2hqEzIqDNC6dWz+t7fL2pGDS1so=
Subject key identifier: 85:93:05:E4:7C:AC:CC:DA:45:D8:94:BD:F4:DF:DE:5D:32:03:C9:71
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 01993492C62C8C80B9F6AAD5CB4E59B6E141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 17:00:58 +0000
Manifest this update: Wed 10 Sep 2025 17:00:58 +0000
Manifest next update: Thu 11 Sep 2025 17:00:58 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: mJC1W8Cuhvgxp8u7fVcUFXKCbCC+UNk+N+KKueowDug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:c6:2c:8c:80:b9:f6:aa:d5:cb:4e:59:b6:e1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Sep 10 17:00:58 2025 GMT
Not After : Sep 11 17:00:58 2025 GMT
Subject: CN=859305e47cacccda45d894bdf4dfde5d3203c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:1d:9a:01:ee:f8:81:a1:b7:36:ac:6a:f6:
dd:bf:6b:bf:e5:ef:2d:d9:24:f5:48:3b:7a:3d:86:
36:f6:f7:95:f8:af:86:59:2c:05:24:c4:04:dc:6e:
fc:6e:3c:87:b7:d3:91:7e:4b:ae:d5:87:76:ab:92:
13:8a:7f:84:9a:73:e5:af:a4:c2:6c:fb:0d:f9:27:
f6:35:9f:f5:fc:d0:4a:cb:a5:50:b0:15:0b:9e:00:
f8:8c:bc:83:96:da:1d:8d:a0:1d:74:18:3b:5a:fd:
11:88:a8:75:e3:85:27:07:d5:94:b7:65:31:c7:62:
f9:69:fc:34:62:68:94:3b:f9:de:ea:9c:f0:86:8e:
51:0c:00:e6:9a:21:58:ca:33:d5:dc:a4:9b:dc:7a:
5c:91:c4:07:20:52:0f:f8:8b:22:54:62:c3:a6:3a:
6d:c6:d0:2a:80:15:75:8a:7d:f9:fc:53:36:8a:a1:
7b:e9:67:49:18:2a:89:f4:fb:76:0e:46:b5:58:64:
69:21:ad:db:f4:f3:11:2b:67:0d:7c:29:d9:ea:5a:
00:4b:70:ed:85:4d:e4:96:0e:2e:e9:57:9b:4c:50:
0f:a1:7b:e0:2d:11:6d:93:71:62:ec:ec:d5:48:64:
47:6d:6f:4e:1c:c5:6a:e2:80:ca:f5:05:a1:0b:a3:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:05:E4:7C:AC:CC:DA:45:D8:94:BD:F4:DF:DE:5D:32:03:C9:71
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ca:4d:26:28:06:0e:81:b0:e6:16:36:2f:70:42:43:09:25:
3b:b3:5c:1e:ef:cd:ac:99:6a:55:b8:0f:f0:6d:32:24:bd:e2:
94:a5:80:9a:da:1e:8a:64:9d:84:41:ac:2b:14:37:b6:ae:06:
b1:24:d7:cf:e0:e6:db:e1:f4:ae:b3:6b:9d:98:f7:5a:8a:0f:
d5:1e:b1:b5:c6:d4:0f:4a:61:cf:a7:2d:17:da:24:f7:2d:b6:
99:d5:2c:21:0e:b2:b7:ca:33:eb:60:60:8e:94:8b:e4:00:24:
f1:40:85:ad:f9:3a:5d:3b:91:85:d6:64:ec:b2:d4:41:59:1d:
15:0c:92:c5:2e:94:6d:c0:2f:5e:cc:b1:90:9f:a5:bc:2f:e8:
89:1d:0c:72:ac:3e:3a:d1:9b:ec:62:37:6c:b5:69:75:3e:8f:
d1:19:70:41:3b:54:bb:d0:a0:6d:98:0f:c4:63:de:a6:98:d3:
71:fd:c7:87:85:3f:c3:53:96:43:f1:95:36:36:82:9b:0d:7a:
33:cd:f3:f4:35:18:3e:bb:bf:a5:44:02:7b:2b:42:3d:00:ad:
49:9e:7f:8a:7f:6f:62:76:47:ae:e4:6c:47:17:57:1f:fd:d1:
3e:ff:26:8f:bc:9d:c7:d7:9e:b9:42:15:49:9c:19:82:4a:6d:
5c:8b:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:36:53 2025 by rpki-client