Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: QWsS8gY/lxScuAI3ggGTZsf0UgU4X7/gc2QKP/cKkcY=
Subject key identifier: 01:87:D4:C6:63:6C:2F:83:03:0E:79:6F:04:09:B1:DC:F4:DE:5D:C2
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 01989636E45EF4938AFC836430D60542C807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 23:00:36 +0000
Manifest this update: Sun 10 Aug 2025 23:00:36 +0000
Manifest next update: Mon 11 Aug 2025 23:00:36 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: DImh/1R9LHPsQhUyk91Gp9mzWsZ16vEU/B8Z9B1E16U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:e4:5e:f4:93:8a:fc:83:64:30:d6:05:42:c8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Aug 10 23:00:36 2025 GMT
Not After : Aug 11 23:00:36 2025 GMT
Subject: CN=0187d4c6636c2f83030e796f0409b1dcf4de5dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:80:53:43:93:5e:e7:5a:89:4c:87:ef:f0:
e9:70:3d:a6:88:42:dd:ce:fd:c5:0e:f3:2e:1d:9a:
85:3f:48:cf:89:d3:b1:ad:39:cb:81:90:75:91:d6:
55:c5:e5:d2:0b:12:d4:ce:cf:97:19:28:6a:4e:81:
aa:87:12:bf:47:db:4d:d9:bd:c9:aa:65:d2:fa:5e:
30:a7:37:3c:d4:dc:e1:98:88:c9:44:32:f3:37:e8:
af:72:15:f8:25:03:0a:c1:95:9f:72:b1:88:b6:4d:
5e:be:08:8b:f9:e2:af:bd:32:4d:87:22:a8:21:2c:
fe:09:95:01:b2:da:e0:74:9f:46:84:31:64:85:04:
3c:0c:d4:9b:6b:da:49:04:d7:d8:5d:cc:4c:44:21:
fd:49:ad:98:ae:d5:16:a9:62:29:d4:cf:31:a6:ae:
67:d0:54:0a:86:04:d5:03:4a:a0:45:f9:ec:68:40:
8e:e5:47:0b:57:45:da:fe:09:62:44:78:e9:28:3b:
c1:16:d4:fb:fe:8b:7f:d8:24:0f:9c:17:d0:76:03:
db:75:f7:2e:38:b4:73:76:92:11:ea:3a:ce:cc:4c:
a7:1f:aa:05:84:a4:0f:7b:ff:67:94:7e:b0:9b:db:
e1:94:a1:cf:1d:98:88:18:0b:ae:61:bc:b3:c2:26:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:D4:C6:63:6C:2F:83:03:0E:79:6F:04:09:B1:DC:F4:DE:5D:C2
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:12:86:5c:a3:9f:d0:7f:e6:33:8a:55:69:84:af:03:85:05:
53:db:40:7a:ae:3a:0b:3d:35:dc:f8:85:50:17:ef:4a:cb:43:
3e:ba:c3:2e:81:1b:22:8e:7e:f4:bf:ab:1c:da:a6:26:0a:ce:
b9:d2:cd:4a:e0:68:d0:0c:fe:4d:94:13:22:b6:9d:fe:44:cd:
d5:13:86:c7:8e:51:8e:66:e5:63:4b:64:38:8b:95:5b:48:62:
e3:44:d3:a5:f7:b6:75:59:c7:36:31:9c:76:cb:54:2d:8c:6b:
c9:4b:f0:54:36:2d:df:93:6f:37:0e:81:60:f1:c9:37:63:70:
22:4c:e6:a3:91:50:78:64:b6:ad:24:9a:df:3b:12:e9:68:99:
e2:a3:22:bb:91:88:ad:f8:a8:70:87:5c:c3:5b:de:c0:80:a9:
c4:16:48:79:a0:9c:0d:09:d3:63:ac:34:46:9b:32:c5:ec:5c:
91:f2:41:8c:ea:50:1b:83:4d:6d:eb:4f:15:69:f7:dc:92:3d:
0e:de:ac:67:52:d6:10:74:0e:c1:c9:f5:09:45:34:9d:b5:01:
32:b0:b0:f9:08:86:18:0d:08:cf:7b:f6:1c:46:bb:cf:7b:2a:
33:ab:c9:07:99:2d:d5:c4:26:85:ea:ae:e4:b8:99:83:22:76:
08:e4:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:24 2025 by rpki-client