Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: s6QhzV4a+zsG79mmn36bw384dgGOL/iF1anSiff8JN4=
Subject key identifier: 12:F0:94:46:D3:01:BF:05:AB:C9:3B:FA:C1:B7:D0:FE:E7:9E:E6:0D
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 0198789A74E8CA5CE7BAF60DA69FE4DD8E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 05:00:45 +0000
Manifest this update: Tue 05 Aug 2025 05:00:45 +0000
Manifest next update: Wed 06 Aug 2025 05:00:45 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: EpdBzRHMrVdiCvjuyahdxWA2mIa2+oTHODOlelx6bs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:9a:74:e8:ca:5c:e7:ba:f6:0d:a6:9f:e4:dd:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Aug 5 05:00:45 2025 GMT
Not After : Aug 6 05:00:45 2025 GMT
Subject: CN=12f09446d301bf05abc93bfac1b7d0fee79ee60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:e9:ea:b5:36:18:b5:60:e6:95:0d:6c:40:
e0:c2:98:63:9c:0c:73:8e:d8:5a:5d:32:e5:31:14:
5a:48:a2:16:da:c7:18:fc:e5:24:97:bb:0a:4a:77:
69:36:74:8b:b5:a9:cb:12:24:4f:ef:09:ca:f0:32:
8b:c4:a0:01:99:13:31:80:22:f1:a2:e4:12:af:5e:
7a:85:a3:27:8b:3e:a9:23:4f:da:0f:64:16:1a:f0:
61:2e:99:fd:6c:84:23:85:aa:14:2b:04:21:5f:f8:
ae:9c:8b:43:85:6d:a4:da:4d:a9:97:56:fd:b4:b5:
4f:21:85:04:44:56:b1:53:24:1e:56:70:ab:ab:35:
58:ab:12:19:d9:1e:11:db:66:1d:21:a3:75:b0:52:
33:cf:a9:32:05:2e:1a:61:e5:7a:25:da:4f:48:d2:
74:18:e1:a4:59:0f:8f:b9:80:d5:ab:16:cd:71:56:
ac:7a:81:e4:f6:e4:10:76:9a:93:c7:d7:ce:e6:b3:
e2:98:e8:c8:fc:f5:89:cf:1c:f6:f3:7c:9e:c3:f6:
2d:01:37:5d:73:c6:d6:00:c7:cc:25:8f:10:9a:cc:
19:9e:18:ba:fe:bc:68:4e:81:37:14:f8:0e:5d:e1:
e8:2a:9d:16:c9:2d:17:7b:23:4f:e6:45:6e:ba:fb:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F0:94:46:D3:01:BF:05:AB:C9:3B:FA:C1:B7:D0:FE:E7:9E:E6:0D
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:bd:e6:68:e0:e2:6b:52:33:e6:c3:cd:ff:be:4d:33:d9:
df:64:83:49:e6:3f:da:4e:42:ef:bb:69:8f:2a:55:47:7c:3d:
a0:8f:74:e9:08:ab:3f:bb:17:c8:6c:0f:99:b4:a7:4d:a7:32:
1e:e7:7a:f6:c5:58:26:98:9c:34:b8:48:85:57:dc:fc:d4:2d:
d2:ab:52:84:a7:1d:d4:2d:13:27:09:e3:fe:65:29:db:52:3c:
f9:cd:90:14:69:f3:05:70:bd:87:9c:53:59:aa:ca:26:8c:7b:
fc:02:1a:90:ef:96:16:ce:79:66:c0:14:e5:7c:91:8c:cd:fb:
6b:22:73:79:d6:e9:85:49:ad:da:29:42:09:bd:dc:7b:9f:50:
4c:16:2a:e6:67:dc:f7:a0:ad:16:34:ef:af:1e:cc:4f:85:f0:
81:22:3e:1b:ab:6b:5b:c9:28:c6:e1:d2:54:0b:d2:57:28:0b:
f9:cc:0e:42:93:56:39:1a:62:8e:41:10:d7:d9:12:3c:bf:94:
e9:4d:3e:50:72:c3:2b:29:d2:ed:0f:49:ce:2a:4a:d9:b5:41:
94:f3:db:40:e4:25:6e:ca:e1:2d:81:57:31:5b:e4:ae:d9:20:
9b:b6:ef:e9:a3:01:84:5e:f9:5a:5a:ad:7f:37:eb:9d:81:0d:
ce:a7:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:10:27 2025 by rpki-client