Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: LUqwxpwjutV20kD/l71bFP5MHyJP9TjT1C/0YCZOxCw=
Subject key identifier: B2:89:2B:AC:F6:E1:4A:18:C8:C7:74:14:06:E1:B3:4E:61:76:96:7C
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 01985BD9896D4EAC664323E47477E6E9FE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 160D
Signing time: Wed 30 Jul 2025 15:00:39 +0000
Manifest this update: Wed 30 Jul 2025 15:00:39 +0000
Manifest next update: Thu 31 Jul 2025 15:00:39 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: vgXNUhuxMMH+tCbTJ0pAtCI4jU/3MxB/V5gQU4wbIIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:d9:89:6d:4e:ac:66:43:23:e4:74:77:e6:e9:fe:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jul 30 15:00:39 2025 GMT
Not After : Jul 31 15:00:39 2025 GMT
Subject: CN=b2892bacf6e14a18c8c7741406e1b34e6176967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:f4:ea:35:9b:7c:34:bc:86:48:c3:be:11:
69:52:c4:e4:69:0e:60:4c:f8:dc:e4:7e:72:5e:d8:
da:62:57:35:ca:c7:41:2c:0c:8e:4a:cc:a3:ad:e8:
b6:8a:90:7b:06:07:48:6e:7d:ab:02:08:75:a5:92:
26:d9:a9:3a:ff:d5:e5:eb:64:d8:62:ec:07:bc:33:
24:df:df:26:f0:19:1b:65:88:75:6f:3d:af:52:9f:
ab:ab:d6:8b:f2:e1:83:48:4b:74:ac:a5:35:fb:ca:
16:cf:85:51:7d:9f:81:96:a0:3d:f6:a7:4b:f7:34:
2b:37:1b:12:ac:e1:ac:23:86:f4:f9:05:33:ab:86:
97:b3:5f:35:d9:78:30:b8:9b:03:71:21:0d:50:ec:
23:79:fc:1e:3b:e1:16:e5:ae:ea:4c:d6:f5:40:66:
bb:4d:ae:3b:20:7a:dd:1e:43:45:ed:a7:8f:46:4e:
75:11:b7:39:70:23:5f:25:83:df:49:99:6b:c9:cb:
34:c6:4c:ed:a6:09:61:4e:fd:83:42:e7:d9:83:84:
b9:5e:0b:b2:75:3a:02:da:32:0f:3b:ee:55:11:a9:
5b:99:fa:71:8a:21:e1:51:e5:cc:70:da:3a:7a:4b:
cc:c2:9a:c6:c0:10:8b:9a:b2:bd:f0:f2:fd:5e:a4:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:2B:AC:F6:E1:4A:18:C8:C7:74:14:06:E1:B3:4E:61:76:96:7C
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dd:65:e3:8e:d8:fa:4f:ad:1c:3d:43:ff:79:06:c6:b5:a2:
53:e7:33:97:57:58:3a:0e:55:c9:8a:a3:e0:49:23:c4:e8:ca:
92:eb:d2:c4:89:27:60:ea:e7:f1:55:de:1a:f8:d3:98:c4:ba:
ea:0f:3d:1f:29:7e:4d:56:38:de:86:1e:6a:01:cd:51:44:50:
d6:b4:06:ca:da:6f:f8:c9:34:90:79:1f:76:18:c4:b8:6e:b6:
e4:16:23:d8:03:c2:71:e5:af:37:c0:f0:cb:a3:96:78:ca:b7:
45:20:1c:7a:06:45:44:39:f0:39:31:08:b1:a4:69:a0:27:3a:
06:22:8d:d9:6e:e1:03:5f:62:91:a6:64:6d:3d:ce:9f:c4:da:
18:56:68:41:4f:7b:4e:29:aa:33:0a:e7:aa:8f:06:b3:7e:f6:
f2:7c:8e:65:16:c6:0d:95:1b:d0:3c:31:86:40:cd:85:e3:8b:
8f:f5:b1:eb:e1:37:24:08:d9:bc:b6:8b:16:57:b5:f7:ef:24:
e3:59:77:e3:d8:30:83:38:18:51:d3:86:8d:50:4b:c1:8c:a6:
f4:bf:b0:c9:3c:03:ff:a4:3b:4a:33:9c:aa:fa:91:3d:40:87:
3f:75:78:38:dc:1a:6d:52:06:cf:67:b2:e7:c0:15:85:c7:4c:
ae:db:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:37:01 2025 by rpki-client