Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: iLBUHla1cZ1n8C3vhrLoJ4O3CA03Vk0xNWkZhd/giP8=
Subject key identifier: 98:5C:AA:CA:90:35:89:36:07:3E:05:3D:66:79:A3:81:73:39:F5:F1
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019853E92E6674A66F8AE55AA8DCE4EE7176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 08E3
Signing time: Tue 29 Jul 2025 02:00:47 +0000
Manifest this update: Tue 29 Jul 2025 02:00:47 +0000
Manifest next update: Wed 30 Jul 2025 02:00:47 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: nbT8OS4nI/E5PaSr6xsjTK2IoU8A56LePpd0BdkPCOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:2e:66:74:a6:6f:8a:e5:5a:a8:dc:e4:ee:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Jul 29 02:00:47 2025 GMT
Not After : Jul 30 02:00:47 2025 GMT
Subject: CN=985caaca90358936073e053d6679a3817339f5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:cf:81:7e:9b:27:e6:d8:da:fc:43:70:3b:
5a:e8:19:0f:67:d2:20:ec:07:ed:00:17:e4:8b:b9:
35:4f:e6:aa:5a:2b:6f:e4:ea:11:a5:b5:22:18:14:
f1:a2:21:69:09:17:ab:a3:e4:68:e4:06:08:47:0c:
97:da:3f:33:ac:61:1d:cc:92:36:ec:ab:ee:5b:fe:
07:e2:c6:fe:71:3a:c8:42:6a:29:c5:4c:7c:4f:dd:
73:50:fa:be:d2:6b:bc:52:34:56:1c:62:5b:8b:22:
bc:f4:ca:35:39:4e:62:9f:96:78:a1:d5:0b:c6:1a:
b2:c5:29:73:af:bb:c0:85:f0:1c:a7:73:83:59:65:
8e:92:07:aa:db:3c:73:95:82:de:5b:dc:2f:e3:f2:
94:9b:6e:2d:3b:5b:6b:c8:36:51:43:8c:6d:0b:5f:
51:77:50:fd:81:62:a9:10:1f:28:05:4c:96:e0:94:
12:3c:a0:bd:14:36:e4:04:7b:84:39:3e:85:12:c9:
6b:1d:4b:68:6a:c1:c7:6d:e0:07:a8:c2:4c:a4:33:
01:3e:40:27:cd:23:6b:20:e8:77:19:ad:04:5b:a5:
d6:d0:5e:da:7e:c3:53:7f:6b:af:d6:45:23:36:ea:
54:b1:be:6d:31:a4:c7:b9:de:db:83:d8:db:29:fa:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:AA:CA:90:35:89:36:07:3E:05:3D:66:79:A3:81:73:39:F5:F1
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b6:75:fa:41:16:57:d8:81:07:c3:02:c3:5b:7a:37:f8:0c:
92:cc:aa:20:72:ee:81:08:fb:9e:c0:26:3f:01:53:29:c1:1b:
cc:b9:f0:e4:71:81:db:0e:ab:6e:ab:60:62:5e:0a:ca:90:d8:
f1:7f:85:83:a2:60:68:74:2c:4c:16:8c:b2:49:a4:d0:07:ae:
8b:f6:83:d3:f9:c2:7e:28:5e:0b:19:9b:35:71:87:53:31:0c:
d7:13:53:43:a6:4f:5a:83:a6:70:b4:f3:ce:8f:87:40:74:6e:
fd:49:d4:9d:94:fb:ec:bf:dc:6e:5d:66:2b:43:63:8b:1f:fe:
24:a1:61:5d:57:62:29:d3:68:c6:f4:b2:a1:44:3b:86:65:55:
41:c6:77:f1:89:c7:d1:5b:2a:77:37:07:b0:d8:a9:a4:8d:82:
f9:84:01:dd:78:27:85:f8:5e:0a:23:34:05:92:c1:28:2f:19:
95:d2:01:50:1e:89:a8:60:71:95:79:1e:0a:43:40:33:fd:4f:
6a:21:10:19:5f:32:3c:aa:54:13:b5:fb:f1:7f:7e:39:17:48:
50:ac:58:0a:0e:c8:e7:5e:73:52:3b:e3:d0:7f:3c:50:c4:7e:
89:04:94:0b:7d:87:7f:f8:91:6b:c1:6d:36:46:ce:fd:db:c5:
fa:76:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:35 2025 by rpki-client