Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: 6Z27XvLXI1t+5RbuPgV9Lsn1I2u5x8aW8BSBsDrZ86M=
Subject key identifier: B5:90:3B:A1:0B:F5:84:10:EA:9C:44:E0:AD:B1:95:1B:C3:48:A9:11
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019933EE102DC8F4F793BB12ACF9EA3BCF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 14:01:03 +0000
Manifest this update: Wed 10 Sep 2025 14:01:03 +0000
Manifest next update: Thu 11 Sep 2025 14:01:03 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: gqfrL1LT350fXNikXmfe+ylKGWAaa5qDmLBeSTHcj4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:10:2d:c8:f4:f7:93:bb:12:ac:f9:ea:3b:cf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Sep 10 14:01:03 2025 GMT
Not After : Sep 11 14:01:03 2025 GMT
Subject: CN=b5903ba10bf58410ea9c44e0adb1951bc348a911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:1c:f3:85:f0:d8:ec:f6:24:6b:ee:b5:56:
a5:6c:f6:9f:77:a9:d6:22:d8:d6:32:19:60:19:22:
90:aa:95:08:43:4c:7f:d5:f6:4b:74:af:29:b1:f2:
42:fc:fc:aa:33:5e:1d:ff:d3:f5:eb:83:dc:8d:97:
8e:27:9f:ca:32:c1:c8:a7:8f:5c:59:d8:3e:e4:e1:
57:1e:35:1d:25:b4:b4:7b:6c:9f:ca:1d:99:7c:f0:
78:f7:eb:a6:2c:fe:01:5b:8c:ba:61:f6:ac:65:00:
03:7f:c5:c9:72:3e:82:c3:c8:cb:f1:07:ac:64:97:
43:ba:49:69:a3:01:1a:86:92:af:9b:e1:ba:2b:ec:
b1:55:8f:5e:4e:5b:b3:45:80:db:79:f4:6f:0b:f1:
a0:03:ee:79:bd:d0:67:97:36:01:2d:07:2d:54:f6:
c5:64:b3:79:ee:79:9f:63:35:73:3b:ca:54:7b:ed:
f0:75:06:65:48:ad:2b:a5:70:c2:da:d9:72:26:78:
b5:d9:19:93:ca:4f:e3:47:07:72:bf:95:e8:08:4f:
42:66:2e:36:fe:64:ed:15:2b:5c:1e:2b:2d:99:1d:
24:ba:05:ee:f0:11:3e:e7:e1:a0:a7:2a:9f:0a:80:
a7:34:99:10:38:63:6d:22:77:a9:10:44:43:11:29:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:3B:A1:0B:F5:84:10:EA:9C:44:E0:AD:B1:95:1B:C3:48:A9:11
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e3:dc:1e:1d:3b:b0:c8:98:cf:61:af:2a:89:7c:7d:cc:e7:
1c:bd:72:20:2c:d2:7d:74:96:49:a6:f5:3c:a8:f3:c3:04:9c:
41:d4:9d:0e:1c:c8:6c:45:4e:a9:c6:da:54:4f:ad:19:8f:8b:
b7:e9:1b:b6:84:2c:62:8f:f9:90:aa:68:24:22:01:f8:a0:92:
a9:bb:f5:58:e1:07:44:26:a6:28:76:d3:a4:d5:6f:f6:f0:7d:
17:5d:f2:8d:41:74:f0:9d:9b:1a:97:e9:ab:9f:95:a6:61:52:
9c:52:8a:ef:82:9c:f5:9d:27:05:9e:42:96:af:dc:e8:e8:77:
84:14:c7:c6:2c:d4:56:13:22:68:63:a8:1c:a3:0d:f7:12:7d:
c6:6c:24:0e:d4:b6:11:79:66:87:6c:71:05:e5:7c:59:d6:1b:
d8:6d:b7:e8:c6:b8:d5:09:8c:8c:51:57:06:09:d1:d9:8c:df:
16:5e:7c:51:c1:5b:4c:ca:0a:2b:67:63:93:e3:b9:b7:8f:22:
0e:b9:7e:46:07:c7:28:51:6b:f1:9b:7a:3c:43:2b:c0:09:6f:
52:57:92:59:83:b7:41:c7:f1:5f:a0:6a:12:24:2f:3d:8c:41:
17:b0:7d:25:ff:87:e2:05:c1:ae:2e:27:12:57:e9:6b:1c:87:
f3:23:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:09:10 2025 by rpki-client