Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: K7KaJqR5vJnyoxEeO2t5mKzyRkhO3uNDBUnQ37H8HlQ=
Subject key identifier: 03:44:43:AF:6A:17:38:DF:93:B5:7C:DD:3C:36:4F:10:81:55:27:32
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 019896A5105C92FB5A54C95F9D79D32DAC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 01:00:56 +0000
Manifest this update: Mon 11 Aug 2025 01:00:56 +0000
Manifest next update: Tue 12 Aug 2025 01:00:56 +0000
Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: MhBwqXaCkVLjiQLT6V+26pD9OwrDRh9ROC2Eiyjx5RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:10:5c:92:fb:5a:54:c9:5f:9d:79:d3:2d:ac:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Aug 11 01:00:56 2025 GMT
Not After : Aug 12 01:00:56 2025 GMT
Subject: CN=034443af6a1738df93b57cdd3c364f1081552732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:11:3c:28:f7:6e:e9:7e:cf:64:71:d2:a8:
1e:c9:ea:c8:de:33:40:f1:50:8f:87:4a:97:55:53:
26:90:05:71:54:6a:38:83:27:2c:f3:75:88:f7:2b:
98:c4:15:fc:a5:2b:0c:8f:b6:0e:98:7a:6b:4c:40:
10:4e:0c:92:50:14:66:b7:fc:7d:be:c8:65:8f:9d:
6b:63:5b:f0:80:e8:84:00:dc:09:74:54:41:10:b1:
97:70:ce:9a:80:46:38:19:44:70:12:5a:f0:5f:ea:
6e:70:30:88:7d:69:aa:73:7f:21:ca:f1:9d:1c:68:
09:d3:4c:fd:f4:6a:47:fb:f6:de:7c:18:e4:79:eb:
f4:7d:32:81:2a:63:81:63:d7:35:71:24:23:92:15:
23:56:6e:38:47:87:83:17:91:6b:81:83:ca:6d:b4:
f6:36:9e:62:1e:06:f7:13:a9:36:6a:af:d0:fa:36:
40:8d:22:df:1c:35:da:75:3c:df:2b:90:ad:34:b6:
b8:a8:96:50:b9:d8:57:e1:5b:1a:ca:b8:e6:54:26:
8d:f2:03:b6:ad:55:8b:fe:70:f8:93:8f:d9:eb:ca:
ae:c4:ed:5d:7c:d0:b8:e7:3f:6b:1d:57:c0:83:cf:
ea:90:74:cd:e2:05:f4:f6:bc:89:07:c8:84:7e:5e:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:44:43:AF:6A:17:38:DF:93:B5:7C:DD:3C:36:4F:10:81:55:27:32
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:36:ff:f1:b6:0a:3d:77:19:4d:04:71:03:16:e0:c7:4e:a2:
8d:a4:82:e3:d4:09:cb:21:24:99:ce:5d:b1:18:a2:02:75:b2:
be:09:4a:70:80:80:ed:33:53:33:cb:b9:2e:e5:4a:b2:e6:7f:
d3:0c:cd:5f:e0:ed:ba:0d:32:41:fd:b3:32:20:b7:66:c2:e8:
53:db:5d:c6:d9:12:6a:1d:45:61:48:62:7d:c1:7d:b4:95:b5:
b0:55:63:64:66:cc:a9:b9:1e:a2:f7:10:ae:9b:61:3b:59:08:
b3:75:51:34:18:18:d6:f7:5a:61:38:a1:3e:5c:3a:57:73:97:
ae:ad:e9:7b:3a:f5:3c:0a:06:ce:07:f2:cf:88:92:3c:7d:86:
86:2e:f7:d4:b3:13:24:9a:c6:5e:a8:0b:c2:32:22:13:f4:18:
eb:98:4c:8a:e3:e1:4a:c3:41:d3:2d:53:3c:5d:2f:e1:e0:5f:
74:00:79:db:82:98:2b:4a:39:7e:85:c2:ca:d3:6f:69:79:d1:
94:1b:8b:ec:6f:d3:ac:64:67:2d:bb:ef:01:cb:f0:19:33:c2:
cf:fe:08:7f:01:b7:1a:46:92:b2:ab:e0:dc:54:6f:22:7b:46:
a6:59:49:ad:39:00:4b:70:fd:a6:c6:f9:bb:31:c7:73:dc:d0:
eb:aa:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:14 2025 by rpki-client