Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: JPw/H1w7B/wPlYXcaeSVOQSP9bqWQVEPwjIaclTDhFg=
Subject key identifier: 72:3B:56:62:9B:8D:08:0D:B4:6E:11:45:7F:24:EB:CE:90:92:54:82
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019873E359E676CC8F870C7B59B7E8CA579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 07:02:16 +0000
Manifest this update: Mon 04 Aug 2025 07:02:16 +0000
Manifest next update: Tue 05 Aug 2025 07:02:16 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: aexP0uoK2n4otFAAc5gwlZQrc7XbArNlisUHRm+PFUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:59:e6:76:cc:8f:87:0c:7b:59:b7:e8:ca:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Aug 4 07:02:16 2025 GMT
Not After : Aug 5 07:02:16 2025 GMT
Subject: CN=723b56629b8d080db46e11457f24ebce90925482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:f9:b1:80:b9:39:88:22:cf:2d:3f:86:6e:
9a:f3:5b:88:7e:31:2f:1e:6f:95:d3:0d:39:f5:08:
a3:fb:80:ee:70:78:70:9d:29:d0:3a:ba:ca:c2:50:
63:87:ed:ee:87:07:d2:03:45:8a:5a:40:00:fe:f0:
a9:0a:0f:2e:1a:f1:3d:77:8d:83:b8:6f:64:77:ec:
cc:0b:c4:6f:66:a6:e0:50:79:ed:c9:b2:fd:32:2d:
2a:98:68:08:61:cf:d3:70:75:af:3f:ec:f9:84:53:
1b:8a:3b:c6:69:e0:4f:7d:bc:ee:1c:9e:6f:6c:85:
33:32:0b:f0:f0:0d:8b:cd:ab:b6:e4:9b:6d:01:4e:
13:b6:e3:fb:4c:e9:d0:0d:b8:c7:67:54:12:cb:96:
38:87:bd:17:66:32:0c:da:c5:74:c0:03:c9:7c:91:
9e:16:12:02:af:19:9c:1a:a8:3d:ca:e6:85:0d:06:
1f:ab:e7:1c:76:92:d6:0e:d6:92:82:bf:94:18:c6:
e9:c6:9b:43:24:3e:f4:84:56:e9:75:91:8e:89:79:
d0:3a:5f:5c:b4:96:2f:46:be:30:e8:b2:d9:13:fa:
1a:ab:6e:d6:fb:ff:a5:f1:2a:ce:5b:60:ff:14:2a:
8e:ce:67:fb:45:a8:54:67:f3:ce:1d:52:ac:88:b1:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3B:56:62:9B:8D:08:0D:B4:6E:11:45:7F:24:EB:CE:90:92:54:82
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cd:d7:a7:4e:e5:5f:b4:97:c7:6e:d0:a1:b3:14:32:ee:0f:
f2:fe:9d:f8:72:d0:19:1f:95:6e:5c:46:55:bc:af:36:b5:d2:
56:b1:89:c9:92:b9:a8:0a:db:3e:8d:25:3a:c2:b4:47:db:d5:
87:62:7f:3c:09:26:66:7f:50:65:93:54:5f:12:45:6c:33:9f:
e2:2e:02:62:44:29:73:ab:4b:1e:4f:cb:87:3c:15:aa:ca:45:
3b:e9:c6:8b:84:e4:24:62:0c:03:5d:19:e9:03:7f:4c:d3:9e:
30:5b:3f:cc:66:80:dd:0a:5e:ab:8d:60:95:f8:6f:95:f5:5b:
f7:21:73:0a:2e:73:ab:54:df:2d:1e:87:e8:7d:c7:98:72:4d:
4c:32:83:35:68:a1:4d:c7:dd:dc:f2:8a:ce:25:a0:0b:37:29:
d3:01:5b:20:46:b9:55:63:62:bb:89:2e:41:a5:ec:43:eb:ae:
18:7d:6f:8e:14:71:8b:22:e8:18:1d:25:a6:e4:83:be:16:6c:
bd:0d:83:95:2b:f5:92:7e:7b:45:51:52:7c:84:b4:c2:e3:9f:
13:c8:6d:8d:4c:6b:1b:da:cc:f5:46:0e:ae:0e:75:3c:f9:9c:
d2:95:a0:ad:79:f9:25:7b:e6:08:86:ae:2c:7f:4c:d3:25:ed:
4a:c6:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:57 2025 by rpki-client