Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: OoFkHK8T449dfDW7ebn2ePwnqLcm5qY2Zr+o/erEUXA=
Subject key identifier: E7:E4:5D:06:6E:8B:F2:84:E9:5D:F2:DD:46:15:5F:6F:7B:8C:9F:83
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 01987C09474B62C3D352A94F361AE98F3C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 21:00:39 +0000
Manifest this update: Tue 05 Aug 2025 21:00:39 +0000
Manifest next update: Wed 06 Aug 2025 21:00:39 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: XWSjaydv0rI8STHCD5uXK35JLXKOZnc9LXMaTvUIMZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:47:4b:62:c3:d3:52:a9:4f:36:1a:e9:8f:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Aug 5 21:00:39 2025 GMT
Not After : Aug 6 21:00:39 2025 GMT
Subject: CN=e7e45d066e8bf284e95df2dd46155f6f7b8c9f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:b5:78:57:4e:38:38:46:a0:fc:1d:d4:17:
3c:d7:25:1b:7d:11:f3:f3:5c:c5:0a:47:8b:9b:8b:
b1:ea:7b:77:e3:85:d0:86:44:39:9c:f8:16:af:17:
25:2b:4d:34:ee:37:d6:36:5b:23:9e:c4:76:40:3b:
c2:1c:12:b0:12:81:7c:20:70:00:94:b4:af:46:0f:
af:81:ba:bf:3b:3a:00:2f:c7:36:a5:01:88:d6:b4:
1e:18:e3:bd:3f:8e:3e:d5:6d:8b:83:23:6a:70:df:
a3:9d:f3:01:d2:39:41:35:c9:1a:84:35:2a:70:30:
3f:8f:ef:c5:e8:ce:fc:65:e8:0c:d5:71:54:6a:c5:
11:15:d8:37:75:83:1f:a9:58:47:4a:88:c2:f7:8d:
36:ad:cf:f2:77:09:bf:de:e8:31:1c:cb:e2:17:77:
0a:fe:f0:ff:be:cc:8d:4d:7c:95:ed:85:e2:b3:73:
2e:5c:58:6d:14:a6:38:97:02:b4:45:ff:df:7e:1c:
41:ae:e3:b7:7d:da:3e:74:e0:6d:7d:7e:00:7f:92:
22:9a:52:3b:79:e3:46:92:ca:c1:f3:b0:df:67:40:
e8:34:93:0e:a6:c3:6d:b7:ae:19:2f:10:fe:6b:32:
92:5f:31:1b:9c:c9:95:a3:8b:20:2d:29:e8:e5:16:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E4:5D:06:6E:8B:F2:84:E9:5D:F2:DD:46:15:5F:6F:7B:8C:9F:83
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c0:59:e7:ec:b5:a6:b2:18:11:5e:b8:81:4c:47:df:81:17:
b1:41:4d:e5:d7:fb:26:b4:21:c6:b6:99:b3:c1:ac:29:bf:de:
fe:93:66:34:e7:5f:0d:d9:fa:00:95:a7:0a:db:45:5e:57:28:
80:9b:9a:2d:fc:e1:b0:8d:86:92:92:10:88:f9:69:86:a8:c9:
5f:46:62:f6:58:05:fb:09:2e:9c:16:6d:5c:cd:05:29:95:e5:
05:d6:7c:13:97:c4:82:16:f9:07:9e:4b:46:18:e7:6b:42:0c:
3c:42:a9:23:ae:ae:88:f1:62:8a:f7:62:62:c0:b9:0c:70:0b:
36:8d:14:b6:99:e4:80:f5:ab:61:d4:b2:39:02:3b:71:d7:84:
ca:c2:5a:f7:06:68:9d:ee:6f:a2:15:f7:3c:1d:7a:57:5e:1c:
91:16:06:e6:fb:d3:c7:d8:9c:0f:c4:74:2b:94:44:ce:41:f9:
0a:47:41:ec:29:0f:43:6d:86:86:ab:3e:5e:8e:62:a1:9e:32:
a6:5c:b1:3c:c3:dc:1e:0f:41:4b:ca:d2:0f:bf:69:a2:bb:c5:
24:bf:77:68:d5:b8:07:41:fb:63:91:08:47:f5:cb:f8:93:0c:
42:e7:85:60:3b:ad:4b:a5:98:e1:d1:29:f9:be:4d:98:c3:14:
6c:f6:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:00 2025 by rpki-client