Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: vBwhubt/WDLaI7lKhm2T8iSDmO5RGolk1j55z/Je5uM=
Subject key identifier: CF:6E:80:F4:CE:CA:0B:56:E3:49:78:19:F7:BB:1E:7D:C1:5E:EE:45
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 0199239EBE7EE64B9FD47168D7DD3362DE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 15AE
Signing time: Sun 07 Sep 2025 10:00:29 +0000
Manifest this update: Sun 07 Sep 2025 10:00:29 +0000
Manifest next update: Mon 08 Sep 2025 10:00:29 +0000
Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: /7PDJtpgjZpb5jVoLZzraNqguuHTmP9+s+JoYmbKGJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:be:7e:e6:4b:9f:d4:71:68:d7:dd:33:62:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Sep 7 10:00:29 2025 GMT
Not After : Sep 8 10:00:29 2025 GMT
Subject: CN=cf6e80f4ceca0b56e3497819f7bb1e7dc15eee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:17:3a:8d:3f:e8:23:e1:50:4e:d0:3a:df:
e9:f6:b8:ed:d7:cc:32:b7:e9:ba:34:cd:b5:e6:e4:
69:ad:25:01:fb:12:93:a0:51:b3:a2:60:d0:7d:c7:
c9:e7:da:22:4d:90:ef:ff:21:10:18:7c:00:ef:a5:
58:59:82:90:6e:4a:b5:01:47:dc:1b:33:70:36:99:
ba:1e:15:43:69:2b:0e:5a:e3:65:02:08:cd:6b:e1:
14:31:9e:ec:4c:d9:f8:00:fd:8c:93:bd:9a:1d:5b:
ef:a4:46:7a:e5:a7:16:19:5d:a8:8c:cc:84:e8:19:
2c:b4:51:e6:18:54:3a:5d:45:8b:83:f1:5b:1c:18:
ff:0e:5a:23:e8:28:94:6d:0c:7a:41:d5:d5:83:6b:
4d:e6:77:e0:4e:bb:74:04:4d:84:32:34:e1:47:c7:
9b:3d:e6:91:89:f1:2a:94:b4:33:6f:ed:51:79:af:
90:a4:4e:a2:56:d6:d4:3c:df:f5:46:aa:41:11:49:
46:fd:de:bb:c0:bf:0c:ea:f2:8b:63:03:9c:51:13:
90:c7:43:55:d5:9c:be:7c:ab:92:20:34:a1:de:4e:
8e:29:6c:ad:87:0b:5f:0e:07:e2:2f:ce:86:47:d7:
a1:32:02:92:ca:33:7e:12:bf:d4:1e:fc:cc:42:53:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:80:F4:CE:CA:0B:56:E3:49:78:19:F7:BB:1E:7D:C1:5E:EE:45
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4b:12:ad:3e:ca:b2:4a:8d:d6:e1:ee:0a:20:70:27:2b:93:
4a:44:36:9f:c7:38:68:ba:96:00:7f:db:f8:fd:c7:d1:75:68:
88:01:34:77:f0:1c:21:9a:3e:c4:82:6f:81:1d:2d:4a:b5:1a:
6e:a4:8b:aa:9e:f3:cf:63:9e:c8:03:6c:bb:4c:51:a9:8a:af:
75:49:c7:9c:e9:ae:12:e3:05:7a:97:25:70:bb:b5:9d:2f:72:
b1:96:58:28:8b:9a:fa:8a:4a:31:27:e2:d3:a9:9d:f0:45:98:
31:51:e2:de:b8:75:fa:e0:fd:24:3e:cd:b9:fa:56:7b:0d:41:
e8:b9:78:ec:c1:a5:82:43:e3:33:08:2f:72:73:19:07:7b:2a:
b6:3d:ac:fd:5b:4c:58:25:6c:41:dc:c1:de:d2:1a:61:c6:84:
55:4d:60:cf:a2:b7:eb:d6:8d:1e:f1:dd:fa:a6:25:e7:c0:17:
17:fe:0d:b6:ae:15:b2:6e:c0:f3:44:21:67:ea:c9:b4:d9:49:
84:50:8e:9c:83:0d:ac:cd:9d:25:43:79:e8:3d:17:07:5e:bc:
25:a9:d3:ec:be:c8:95:c4:90:ce:8a:d2:15:02:2c:e8:eb:4d:
f1:0f:e1:cc:05:5d:59:e4:c1:f6:aa:76:07:3a:63:d0:f3:15:
42:b1:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:35 2025 by rpki-client