Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: LgIGpMhivxEZNkXIZ/gWdIF24yHWRQP3gkMNBpf6x2g=
Subject key identifier: 80:96:57:8E:71:22:69:A5:68:26:72:26:CF:A5:41:81:87:89:EC:4A
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019933ED9CF924F89FA556AD51AF74C96CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 14:00:34 +0000
Manifest this update: Wed 10 Sep 2025 14:00:34 +0000
Manifest next update: Thu 11 Sep 2025 14:00:34 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: f9LQgrD6nfaeW73PSCq3YuZ62NdhKAfLfEYxn52BK64=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:9c:f9:24:f8:9f:a5:56:ad:51:af:74:c9:6c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Sep 10 14:00:34 2025 GMT
Not After : Sep 11 14:00:34 2025 GMT
Subject: CN=8096578e712269a568267226cfa541818789ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:12:c2:dc:6b:81:ee:e1:71:36:54:37:9e:
e4:e3:0c:de:2b:2c:a0:f9:7b:3b:9d:19:1a:bd:76:
98:0f:95:dd:2d:51:55:09:81:0e:f7:37:40:ff:8c:
43:dd:55:9e:76:bf:7c:f4:2d:9b:1f:44:3e:2b:3a:
17:fc:e7:26:94:8f:02:79:6e:41:e6:83:1d:18:2f:
b7:06:3f:cb:52:21:98:4a:5d:a8:c5:3e:3d:b6:99:
1a:a0:1c:8a:61:60:66:64:06:84:e7:9c:dc:44:38:
c0:d7:e2:52:31:2d:af:bb:e6:f0:8a:df:b7:77:51:
b1:da:03:e4:3f:3d:90:c8:09:2d:17:09:4d:2d:75:
2d:d8:f9:b4:0d:3e:1c:94:42:10:75:5f:1a:e6:e2:
6a:90:f7:cc:39:a3:a0:78:b2:54:05:d4:28:db:9e:
a3:43:5a:9b:02:69:92:e3:88:15:b6:0b:4a:97:f4:
bb:ac:0f:1f:f7:43:42:40:88:6a:00:a9:8e:d1:d4:
98:00:ea:cf:7e:c0:c6:f1:f9:8d:e9:60:45:ce:07:
91:7e:fc:89:09:d8:35:e5:c3:74:2f:c2:88:75:66:
b9:3b:39:0f:70:f2:d8:c0:55:8a:58:f7:87:85:0d:
24:5b:37:07:e6:a1:18:7f:e1:42:f3:7e:7d:39:f8:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:57:8E:71:22:69:A5:68:26:72:26:CF:A5:41:81:87:89:EC:4A
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:eb:ae:6e:1b:d7:9e:db:d7:8a:c8:3a:71:c8:a8:c2:c9:e2:
f4:5a:11:32:7d:9a:ed:0e:89:97:5b:f4:e0:7e:3f:99:8b:e8:
ba:9f:b2:4d:55:08:d1:80:84:6c:23:c0:b5:be:21:7b:a5:30:
ab:89:e0:1d:d3:b4:cd:11:46:bb:6d:3f:90:e3:ee:0c:63:a2:
53:54:d7:49:f3:c1:3b:fd:3f:8d:a8:cd:4e:32:d0:a6:38:e5:
b3:43:9b:e0:60:56:7e:7c:3b:0c:81:15:e6:88:4e:c1:6e:79:
c2:f4:8f:94:da:15:a8:f1:c4:d2:a8:05:11:31:d9:51:79:05:
de:c2:59:02:15:b8:06:bd:c4:70:b4:c1:40:b0:61:f7:dc:00:
d9:ec:ea:c0:90:e0:ae:af:08:12:c0:e9:ec:f2:59:9d:5d:b1:
38:71:be:2f:0c:1c:eb:40:3c:86:92:d5:33:0f:90:00:5c:2a:
9b:a6:11:66:42:1a:79:09:4d:52:b9:b9:c0:ae:dd:1d:7f:82:
77:07:20:19:c0:b9:e5:11:94:6e:65:f5:81:11:4d:02:a1:9b:
ad:22:31:3c:fe:1b:f3:67:f5:74:f7:f0:78:3b:62:b7:09:48:
95:bd:a2:b0:75:d6:5c:20:d1:b3:8a:90:d6:0f:d0:22:fd:bd:
91:00:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:07:09 2025 by rpki-client