Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: nJLmcTfJSQz2U/WQjVCYkpKcfnvMByBbWUBC27YZsWo=
Subject key identifier: D4:EC:06:6E:50:7F:40:3A:81:B8:72:A7:11:25:F7:55:9C:41:7B:C1
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 019874F516B0D22724E50E009837258D4144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 12:01:15 +0000
Manifest this update: Mon 04 Aug 2025 12:01:15 +0000
Manifest next update: Tue 05 Aug 2025 12:01:15 +0000
Files and hashes: 1: h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa (hash: gMyDoTfbghGyh3Yg7Wcs9Qgp2ODCZ1LcJvPzyuFIMbU=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: 0s5mMLgEeNp6PW0f9Qewg6auFxreoXaLM5kfQKtsc9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:16:b0:d2:27:24:e5:0e:00:98:37:25:8d:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Aug 4 12:01:15 2025 GMT
Not After : Aug 5 12:01:15 2025 GMT
Subject: CN=d4ec066e507f403a81b872a71125f7559c417bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:4e:f9:c7:e6:bf:73:51:c2:da:9b:dd:43:
89:bc:43:00:23:29:53:3b:e9:89:33:cb:03:3d:bd:
ac:66:bf:7f:86:c8:14:6f:ac:90:23:28:fe:72:09:
bf:2a:1b:5c:ea:35:cb:87:17:21:3f:00:32:5a:b9:
8a:ac:b3:f1:13:0c:bc:92:1b:34:95:8e:5f:a7:13:
3f:6f:fe:bc:6f:2b:b3:ea:2b:87:08:93:ca:91:25:
36:ae:58:26:28:ae:98:ed:fd:ae:74:ad:61:b0:0a:
db:db:ab:47:1b:97:84:9e:ac:2f:98:d8:eb:ac:a6:
2e:c9:f0:25:a4:f8:4b:2d:42:af:3a:d7:82:67:dd:
12:a2:30:c2:96:db:b6:92:4a:c4:30:f2:0b:96:da:
27:25:cb:61:27:25:7c:40:ed:c6:d7:9f:d9:13:49:
d8:48:d1:6c:3e:e2:1d:be:a8:48:32:5f:16:17:21:
89:8a:fe:99:e0:da:f0:38:5b:d2:97:6a:27:f6:56:
eb:1f:59:59:91:1a:fe:7e:2c:3a:8d:62:e8:4e:2e:
1e:89:13:29:86:d0:53:e2:11:01:4b:c4:84:45:57:
e3:e9:bc:ce:73:a8:7c:fe:b2:d3:4a:c4:86:93:89:
6d:88:99:61:5b:c6:ed:8f:84:43:8e:25:61:17:26:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EC:06:6E:50:7F:40:3A:81:B8:72:A7:11:25:F7:55:9C:41:7B:C1
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:c7:44:8e:a6:bd:5a:90:0c:cf:62:fa:aa:c8:6d:47:81:
6f:ae:da:a5:d7:d5:f3:9b:4e:f1:ea:ef:df:4b:af:89:a0:8b:
6a:de:a7:1f:c0:57:6c:4f:06:8b:3f:74:8a:87:b1:f7:45:ce:
e6:ad:a7:a6:9b:ff:45:67:82:f5:d0:6f:90:0c:35:f9:12:7c:
ec:0e:b5:43:9c:8e:b3:c5:09:4b:4e:e5:0d:96:21:dd:fc:3a:
4b:f2:f8:9e:c4:43:49:36:d8:d4:a1:1e:ff:84:af:aa:9e:4b:
78:46:4b:2f:08:a4:e7:75:58:52:fa:2f:b8:8c:7e:c1:01:67:
f2:d8:ef:4d:d4:32:b8:d5:de:8e:3d:38:f3:b7:a8:b8:e0:85:
93:36:8c:36:7f:de:07:21:84:54:0e:fe:51:61:ab:dc:84:5e:
ee:79:4f:ad:54:2b:ee:d4:b7:2f:f6:8b:37:9b:d0:bf:9f:e9:
79:f6:e5:8a:39:06:80:56:9b:95:9a:2c:b3:0f:2f:5c:5e:ba:
e9:0f:eb:a5:c1:46:bb:45:71:06:73:74:14:a6:01:d4:45:1b:
db:a2:63:33:78:69:5d:3b:96:1c:34:b9:83:a2:61:c3:46:ad:
bf:6e:6a:c6:b4:33:d7:98:ad:62:77:d8:74:2f:95:fb:39:30:
d5:79:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:10 2025 by rpki-client