Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: UWOBZtv6yU2vhQpgjwamzics7qvkssR8unjqQvrOt1k=
Subject key identifier: 8C:32:0B:00:FC:F9:DA:D2:84:7B:DA:54:3B:D3:92:7A:07:73:25:86
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019855DF4211F871A42EF52200473F28022A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 10B6
Signing time: Tue 29 Jul 2025 11:09:11 +0000
Manifest this update: Tue 29 Jul 2025 11:09:11 +0000
Manifest next update: Wed 30 Jul 2025 11:09:11 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: CLXlSyl+J4I71Z7ks2sg83/ZQh4RceQ8Ktr84kbiFRw=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:42:11:f8:71:a4:2e:f5:22:00:47:3f:28:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jul 29 11:09:11 2025 GMT
Not After : Jul 30 11:09:11 2025 GMT
Subject: CN=8c320b00fcf9dad2847bda543bd3927a07732586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:34:de:6a:2a:87:cf:15:9c:32:3b:0d:05:
e3:87:5a:bb:dc:e3:2e:22:41:f1:4b:e5:4f:ef:f5:
9b:67:a6:16:1f:9b:3e:50:2e:f5:ff:67:bf:67:fc:
b5:ba:ee:8f:6f:a3:87:03:2f:75:d7:8e:ea:8f:3a:
74:04:d6:63:41:fb:ed:80:dc:59:8d:01:4b:3a:a1:
5e:7e:10:52:b1:0d:2d:92:95:30:c5:28:81:e0:70:
75:9b:94:de:8f:26:0c:29:6e:ed:50:0e:7e:25:73:
20:4b:5f:6f:e5:1c:83:2d:35:ef:4a:7f:64:c3:18:
46:c9:8f:8f:35:75:9b:61:9c:5a:ab:0e:14:62:cd:
f4:3b:21:9a:1d:4b:48:0b:a7:6b:a1:56:f2:85:2c:
28:2a:19:db:57:47:d3:86:3f:39:41:ed:aa:98:34:
75:1e:d1:ec:ca:4c:8b:42:48:e3:af:9c:0d:34:f0:
b4:07:5f:ba:11:2f:4a:bb:56:ca:2a:b9:9a:b7:ef:
4f:e7:8b:df:aa:ea:e3:d8:ce:65:dc:84:c3:af:ca:
c7:fd:7a:01:02:13:9e:13:76:98:eb:8f:09:ee:4b:
25:77:4e:24:d4:44:12:02:41:60:18:1a:9e:3f:8c:
4a:35:a7:c1:89:53:db:0c:23:55:b0:dc:d4:e9:b5:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:0B:00:FC:F9:DA:D2:84:7B:DA:54:3B:D3:92:7A:07:73:25:86
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:62:4a:52:88:75:05:ab:25:ba:82:97:d4:28:07:72:b3:34:
25:7e:1f:18:a7:ae:cf:c5:30:04:85:37:54:d0:c7:3e:52:84:
5a:d6:a6:e2:13:ca:85:1d:91:78:f2:8e:67:8f:78:cc:d7:32:
1f:2c:b8:f2:06:05:c5:aa:a5:0d:e7:ee:9c:65:f7:44:a5:ba:
95:b3:af:6b:9b:cf:87:4a:a1:06:b6:e5:8a:87:1d:7a:5b:e8:
0c:1b:2f:b5:06:ca:69:5b:74:37:48:9f:27:b4:1c:07:a2:f4:
bc:c2:db:bf:c0:ba:07:85:86:89:c0:f6:11:bb:a4:02:c9:20:
d8:fd:0e:b3:93:85:bb:03:e0:b2:00:a3:11:08:9e:ad:9d:1a:
d7:73:51:85:84:31:58:d4:26:99:96:dd:bd:7e:7c:ce:fb:28:
d9:1c:5b:ce:65:27:03:97:02:01:70:dd:fb:e1:71:15:c6:98:
68:64:29:0c:c4:7a:6c:99:94:78:8f:26:65:03:74:12:8e:26:
03:91:93:d5:fd:3d:6d:b7:cc:c0:ac:81:16:92:11:39:4d:f1:
6d:d3:da:b1:18:c7:45:99:4b:b0:7a:8b:e1:22:25:3a:97:7e:
cc:35:7f:71:7a:68:df:03:8d:e5:31:7d:8e:86:f0:d4:14:4c:
bd:15:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:36 2025 by rpki-client