Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: yIpe4E1lgpilWP96Ea4t1zwebOp9/q8T8lM7YI000xI=
Subject key identifier: 0F:9A:94:6F:D3:D1:6C:B6:65:F9:DB:A0:3D:92:ED:8F:D6:F9:07:57
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 01987CAE6A328A368B84B6B6277426C0FA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 00:01:01 +0000
Manifest this update: Wed 06 Aug 2025 00:01:01 +0000
Manifest next update: Thu 07 Aug 2025 00:01:01 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: 2SfpjwwSmzOjSZijrGf1B2vD7/eUnv4gjYe055QFoiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:6a:32:8a:36:8b:84:b6:b6:27:74:26:c0:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Aug 6 00:01:01 2025 GMT
Not After : Aug 7 00:01:01 2025 GMT
Subject: CN=0f9a946fd3d16cb665f9dba03d92ed8fd6f90757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:87:40:d6:e6:3d:ce:fc:71:08:b0:a6:b2:
c2:0c:5c:9a:21:f1:8f:70:1f:3f:58:61:13:37:53:
5c:5b:94:85:7f:28:e3:75:62:bf:6d:fc:84:9b:86:
42:fb:38:39:f7:61:27:c4:83:25:09:55:1d:db:a7:
b1:8f:06:bc:77:72:87:49:5d:8c:14:94:df:f4:06:
6a:68:0a:d3:8d:03:72:41:8d:6c:5e:a0:b6:6b:51:
a1:a8:32:7e:f5:5b:2d:71:92:61:81:ce:a3:33:04:
ed:f0:3b:a3:b7:07:df:37:a3:79:09:f0:37:a7:97:
ca:27:70:72:8d:71:2e:2d:e1:b9:0d:d0:3e:6c:3f:
f8:e5:e3:97:65:54:2d:68:2f:df:9e:06:3a:2d:60:
e2:24:50:75:28:9c:a1:28:46:fc:fa:e7:9e:78:0c:
2c:cb:95:a1:48:28:63:50:a7:a8:2e:40:5c:54:25:
d9:56:b7:12:7f:e4:c3:3a:21:9d:cb:d9:a1:bf:04:
e3:62:7d:1c:75:07:92:a0:27:71:d9:98:01:68:0b:
f6:67:6d:85:5f:5f:0e:fe:4b:36:da:75:63:e6:9f:
d0:11:f5:b9:93:23:a7:73:9f:6c:74:fc:ef:79:cb:
c6:4f:1a:8b:77:16:bd:75:c4:aa:94:98:7a:12:ba:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9A:94:6F:D3:D1:6C:B6:65:F9:DB:A0:3D:92:ED:8F:D6:F9:07:57
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fd:7e:2a:ff:9b:e4:ad:06:b0:6f:5f:19:d0:1f:ad:4e:44:
fa:bd:f0:bb:47:6b:ad:bd:68:5b:c2:fd:6c:36:0c:e0:1f:ef:
48:c8:de:35:29:e5:73:76:f7:79:99:cc:d3:b5:6b:ea:f6:25:
a2:f0:05:e3:05:d8:00:de:a8:d5:b0:c6:12:b8:f3:4d:05:45:
e7:bf:0f:b5:bf:8b:71:e5:22:fc:71:90:04:56:42:13:56:7b:
7c:17:bf:fb:2a:eb:1b:95:f9:c8:c1:b5:8b:fd:92:cf:01:34:
ef:45:c2:6a:5c:39:79:0a:a9:a9:13:4e:73:1e:e0:9e:33:c8:
12:89:df:9d:fc:2d:40:23:93:ac:7d:bf:5a:78:30:7a:7a:f7:
b3:c2:71:76:00:39:33:32:1c:6f:ef:72:4f:c3:32:2f:0f:e8:
0c:06:5f:aa:89:06:75:6b:a2:a1:e4:a8:07:ea:34:26:77:d2:
82:04:63:ec:e0:54:5c:3a:4c:bc:e1:f3:31:b1:16:4f:fa:78:
e2:17:67:a5:48:9a:02:53:3e:c6:1f:2c:fc:5c:4c:22:d0:63:
a4:db:27:31:a4:90:a2:60:96:a4:23:a4:93:c9:a7:e4:42:c9:
e4:08:56:a6:da:cb:ce:91:d9:9e:3b:09:08:96:c8:37:36:f7:
02:c1:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:09 2025 by rpki-client