Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: 3Ls/N3AnKLJ/jX8HtyWVwTTTJl02EyxQeNPwOJ9ntOI=
Subject key identifier: BF:A7:7A:2E:F9:9A:55:3D:B2:AA:4E:42:8F:71:E7:73:93:C3:6D:81
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 019881678F80CC98A3ECA174D83FEF131339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 22:01:44 +0000
Manifest this update: Wed 06 Aug 2025 22:01:44 +0000
Manifest next update: Thu 07 Aug 2025 22:01:44 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: qzdkiuQM5MPvrAYxTQMfe5GrVXyCnQ2mCSVI2mSupRI=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:8f:80:cc:98:a3:ec:a1:74:d8:3f:ef:13:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Aug 6 22:01:44 2025 GMT
Not After : Aug 7 22:01:44 2025 GMT
Subject: CN=bfa77a2ef99a553db2aa4e428f71e77393c36d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:e5:48:74:1c:95:26:85:72:bf:45:c4:09:
23:5b:65:0a:cc:7a:3b:10:cc:f1:d5:9f:0f:40:6d:
f3:82:3f:61:bf:bb:15:dd:31:51:71:fc:f9:32:79:
17:f3:62:c8:5b:4a:af:cb:ff:96:d9:97:60:1a:2c:
2c:fe:55:f4:07:aa:79:41:c9:c1:f4:c8:b3:d3:99:
e9:59:76:41:41:4a:3b:57:fb:43:c9:44:fe:17:d9:
75:6b:79:12:28:70:0b:2a:1e:99:44:f4:3a:f0:bb:
6b:9d:0c:87:a2:b5:24:c9:db:9a:1e:f7:30:99:8d:
a6:65:ee:7c:bc:d0:74:0d:f0:f2:b3:2f:e3:28:df:
8c:85:65:a9:4f:5a:4f:0b:32:e5:41:eb:8c:7e:39:
9a:bb:76:db:2f:eb:1b:7a:9f:73:24:66:90:7d:40:
65:a7:b7:4b:c2:1c:92:eb:42:72:c4:fd:37:62:47:
e0:9c:0d:eb:a2:29:90:22:46:6e:7d:bd:42:d5:85:
d7:a3:ca:aa:5c:db:7e:f0:50:91:0e:46:22:de:89:
6a:b6:4c:6c:f6:42:83:6f:5c:6e:c8:4f:c9:c5:92:
8c:e2:1a:44:ee:8f:8a:f8:41:a7:4f:23:2f:7c:e2:
50:d6:d8:1f:37:8a:bb:9d:55:a0:f2:25:17:6b:fc:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:7A:2E:F9:9A:55:3D:B2:AA:4E:42:8F:71:E7:73:93:C3:6D:81
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:cf:a1:e9:e4:20:99:aa:ed:73:2d:dd:1c:8d:cf:d1:f0:
c6:31:5f:be:11:00:9c:00:ed:bc:33:3e:ad:03:f1:a0:d2:57:
f5:79:f9:fe:2b:c4:be:49:2c:ec:a7:30:bb:8b:ca:32:96:52:
4f:65:66:94:19:31:e1:7b:4d:17:23:af:5b:ec:29:ff:fd:e0:
78:a4:62:40:0d:1c:3b:67:08:36:18:ed:8e:f3:22:7b:7f:5d:
7d:f8:bb:b8:1f:4c:dc:b3:d1:cd:75:40:94:8c:d7:a6:68:3c:
58:45:16:fc:fd:f7:07:55:48:f5:65:2a:23:db:04:49:7d:8a:
01:25:38:b9:22:4f:f2:b8:b4:f4:50:8f:65:79:ca:8b:7b:3a:
6c:05:da:db:38:7d:09:0b:2a:2c:7a:65:15:8b:87:08:50:3a:
38:99:1f:04:30:6b:eb:fd:b0:3d:0f:73:28:6d:f1:0a:ca:2a:
06:71:25:54:2b:b6:4e:4b:fb:1c:49:f8:2a:46:4d:01:65:00:
48:8c:60:0b:d8:fe:6c:4e:47:9a:ec:5e:96:e2:16:e0:89:2e:
cf:26:ef:de:6b:e9:85:58:ed:41:84:e1:50:c5:89:43:44:7a:
f2:4f:90:a8:2a:68:b7:bc:10:69:fe:ee:99:ed:ca:79:0b:b4:
f1:17:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:25 2025 by rpki-client