Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: CnIx4kitoi3E70CxNwvZVzMf0ghO92dDUSJA+h2zXKc=
Subject key identifier: 7A:27:9A:E0:E3:77:14:80:C7:D8:85:28:66:9D:43:DA:54:82:F8:8B
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 019872982DE42EC31F343335BBCD95D67458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 01:00:32 +0000
Manifest this update: Mon 04 Aug 2025 01:00:32 +0000
Manifest next update: Tue 05 Aug 2025 01:00:32 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: hm/UQRN5U868QWD98e6s3j+VtHX69pP8Rogw/ekHTGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:2d:e4:2e:c3:1f:34:33:35:bb:cd:95:d6:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Aug 4 01:00:32 2025 GMT
Not After : Aug 5 01:00:32 2025 GMT
Subject: CN=7a279ae0e3771480c7d88528669d43da5482f88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:63:fa:ec:76:dc:46:58:8c:59:7b:1f:36:
fb:62:5a:6e:dc:98:4c:e1:a6:e2:2b:00:87:fd:10:
c6:f7:b1:8e:9e:88:ed:ba:5a:b8:85:60:70:a7:e4:
12:d6:63:4d:ca:aa:0e:4e:d9:88:d1:49:6b:9e:5e:
31:c7:a4:2e:8c:38:38:64:d6:4a:db:a5:f4:99:30:
a1:88:99:9f:83:8e:af:30:e3:5b:38:13:9d:dc:8e:
f3:c4:cd:4c:f5:0f:17:c8:bd:f8:e6:f8:f2:a0:8e:
4f:43:a0:39:cf:68:d8:ac:e2:b0:a1:4a:fd:c0:a5:
40:73:01:59:fb:4a:b7:0a:47:9c:9c:f5:40:34:62:
f7:1d:7e:f5:f4:3e:a5:e2:da:fd:7c:fe:4a:43:e9:
0b:4d:62:a9:25:7b:61:a9:a1:a7:32:08:66:2b:ce:
53:00:91:eb:10:dc:fd:91:e4:82:4c:df:ae:04:0f:
f8:a5:03:d5:72:45:0a:d7:84:14:dc:c0:46:2a:6e:
57:62:5a:8a:ca:5c:a2:2f:6e:a6:84:4b:92:a4:19:
99:42:61:a9:c6:73:ab:76:49:0b:c0:5c:32:ea:39:
57:3d:b5:a9:e9:5b:32:45:98:cc:d8:f7:71:3f:8f:
0b:fa:fb:1e:2e:3c:91:18:55:b4:05:6b:3b:44:f2:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:9A:E0:E3:77:14:80:C7:D8:85:28:66:9D:43:DA:54:82:F8:8B
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:73:a8:35:ef:db:97:e8:29:7c:d6:4c:bb:d7:c6:ce:96:fd:
3b:40:e9:b0:46:a9:cb:32:e1:67:af:19:da:ab:90:a9:eb:7d:
6c:e8:cb:1a:4f:94:97:4d:e4:86:85:27:01:20:39:4b:13:8a:
8b:87:57:c7:6d:2f:0e:b8:84:be:32:4d:b4:d2:b8:ff:bd:8c:
9d:55:0b:6f:d5:c3:1a:b5:83:7b:3c:55:58:d5:14:63:2b:46:
4c:59:01:60:eb:93:9f:3f:0c:d0:1d:d4:b4:f3:00:ce:58:25:
f5:49:75:d5:e6:af:75:6d:b4:0d:3b:e6:e9:07:a6:8a:77:58:
68:1a:b5:40:5a:5a:ca:74:02:2c:6e:b0:90:d2:f0:d8:1d:36:
ee:59:55:0b:2d:c0:1b:70:53:e7:61:87:f2:1d:ec:af:57:9d:
14:21:f2:de:66:34:c3:00:b4:e5:34:0d:e3:c4:e5:2c:0c:9e:
4d:1d:cf:ae:b9:49:bf:0c:7e:47:93:00:e9:4f:c2:20:b3:43:
df:b0:f8:33:32:82:07:f3:ce:1d:8c:f6:4e:35:1f:8e:a9:b6:
a6:29:6b:45:8e:f9:27:c1:45:c5:c9:8c:6a:8f:f3:b0:62:d9:
8e:c9:ed:dc:2a:ed:01:39:61:18:dd:fc:ab:eb:66:52:1c:2c:
45:6b:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:08 2025 by rpki-client