Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: to6DhWRWPkBQMut/LZaWLa4gOWN2hzu8SD3eAm5NKgA=
Subject key identifier: 12:C4:21:F6:3D:10:1E:33:64:ED:0B:9E:85:48:7B:D7:8E:FE:F5:95
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 019874F51185C76EB8364ABE30FE7895F106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 156F
Signing time: Mon 04 Aug 2025 12:01:14 +0000
Manifest this update: Mon 04 Aug 2025 12:01:14 +0000
Manifest next update: Tue 05 Aug 2025 12:01:14 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: egjG4jXZ5tj66rehakwi/NtAFr7cXn48gCHNw32ifjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:11:85:c7:6e:b8:36:4a:be:30:fe:78:95:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Aug 4 12:01:14 2025 GMT
Not After : Aug 5 12:01:14 2025 GMT
Subject: CN=12c421f63d101e3364ed0b9e85487bd78efef595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:69:03:d3:bf:dd:13:59:18:04:a8:54:5e:
a0:e5:e7:d8:cc:20:58:c4:a4:f9:a7:45:62:d5:4d:
a8:09:e3:0c:0b:30:a0:23:c8:21:f2:e1:c7:23:85:
d7:11:39:a4:be:c2:58:c1:4e:5b:00:42:b0:36:c4:
25:b0:37:14:ab:d8:7d:b1:fd:73:24:7a:b3:ff:ef:
e7:96:3e:60:70:99:e1:13:ff:7a:96:61:ea:34:cc:
4d:cc:42:cf:a1:ca:d3:88:41:ba:ed:98:53:9c:b4:
67:d0:86:38:b6:17:16:77:cc:4f:4d:73:79:70:8c:
f6:90:5d:41:ca:b5:35:b2:38:75:53:62:f6:e2:29:
4d:9c:d8:4b:a0:f6:95:22:c7:d9:5f:0d:c0:6c:5d:
bd:c0:ac:6c:e9:e0:2e:17:93:86:d9:b5:5c:cb:61:
95:68:22:3a:a1:d3:59:24:83:f9:3e:91:75:44:cb:
d3:f8:f1:22:ce:c7:db:92:00:dc:e0:4d:0a:75:19:
07:96:d1:2a:40:11:6f:74:ec:56:47:f4:ee:cd:68:
55:d5:47:e5:d7:0b:f6:ef:6a:87:4d:58:7c:b0:4b:
c7:a8:31:56:59:d9:2e:5f:7e:43:d3:eb:e1:04:1e:
70:03:e4:6b:f0:4d:3b:29:33:ce:a9:0c:66:dc:cd:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:21:F6:3D:10:1E:33:64:ED:0B:9E:85:48:7B:D7:8E:FE:F5:95
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:3f:20:cf:0f:5b:2b:18:98:12:c1:60:da:05:f8:01:a5:
e6:cb:cd:3d:01:a4:91:7c:97:a6:49:3c:ab:4d:61:71:11:21:
81:e6:35:f8:9c:88:4e:7f:15:01:d4:f9:49:ae:ab:82:e6:3e:
0e:b3:e9:e0:8d:7a:d5:57:a1:be:b8:5d:e7:f3:a5:71:0d:e6:
fb:67:c8:55:bd:f7:b4:1b:8c:57:32:f2:e2:71:18:e2:e6:5e:
d9:7a:5b:d2:bf:28:a4:af:51:7c:49:fa:3c:5b:dc:3c:d1:90:
38:a2:00:ab:96:b8:8e:85:4b:25:74:70:48:d2:3b:88:1d:56:
95:f0:f3:fd:8c:ba:e9:99:d8:92:bc:a1:40:8e:27:7f:e7:3e:
84:87:1e:ca:c4:64:90:44:49:8e:64:9c:14:84:38:88:77:dc:
24:4a:9b:e9:86:d9:dd:97:96:8f:b6:a3:e1:b9:ae:33:2a:51:
75:c2:87:d5:8c:1d:08:c8:63:4f:28:00:40:f9:f4:dd:6c:ed:
b2:d1:20:85:6d:34:f0:07:bc:ff:5e:d9:f0:9b:98:16:63:d8:
ae:6b:b8:de:c8:fd:c3:b1:f3:59:eb:45:00:33:4f:d2:51:3e:
89:64:5a:d5:1e:7d:e6:27:59:89:10:2e:a2:c3:87:a2:07:5a:
69:17:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:07 2025 by rpki-client