Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: i6gblGFPYrjhLfHY3mmzmaF2A3A8Acwc+0RQVe+xgQ4=
Subject key identifier: BA:DB:D9:DE:D7:09:30:C7:A0:6B:8A:67:B5:EF:DA:16:97:9C:8F:37
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0198518D1D493592DAF25640608656FE00B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 160A
Signing time: Mon 28 Jul 2025 15:00:58 +0000
Manifest this update: Mon 28 Jul 2025 15:00:58 +0000
Manifest next update: Tue 29 Jul 2025 15:00:58 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: kbGDmRUmdrMEToEZKTOLvj8QE651yvMgVEPhRw7nYqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8d:1d:49:35:92:da:f2:56:40:60:86:56:fe:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jul 28 15:00:58 2025 GMT
Not After : Jul 29 15:00:58 2025 GMT
Subject: CN=badbd9ded70930c7a06b8a67b5efda16979c8f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:99:c8:7c:6c:63:da:80:6b:0e:2f:dc:16:
eb:fb:62:ab:90:b8:5c:b2:d2:3a:59:a4:6e:c7:87:
4c:ba:c9:de:28:c4:c3:a7:98:19:3d:8d:08:de:69:
1a:0a:64:f5:07:1e:81:41:61:7d:67:0f:d6:0a:73:
e4:0e:0c:23:41:c6:00:9b:25:96:9d:a7:fa:2d:4c:
0e:b9:07:c0:5d:87:c3:85:bd:ad:8e:63:55:0f:4c:
e3:f7:40:9f:5a:0d:02:09:e5:3d:a4:23:9a:ca:6c:
a3:79:91:5c:c5:89:ea:5a:9d:0c:e8:9a:27:31:44:
68:0a:c6:36:fd:9d:c7:4b:7a:00:2b:e8:63:d2:09:
c4:88:57:2b:08:56:ec:21:3a:02:0a:c5:1b:34:f9:
bd:44:f3:7d:01:da:bd:d2:fa:0a:8a:11:22:43:21:
d7:b4:6e:52:78:9e:fd:36:59:5f:87:a3:fa:18:dd:
0e:55:5e:98:30:33:21:a5:3d:35:4a:3d:e6:81:6f:
f8:e4:14:f0:f2:2f:2f:32:d8:ec:e9:27:9a:48:25:
a0:bf:8d:81:10:c7:ae:09:48:ec:04:29:6d:a0:e0:
e9:66:37:4c:79:78:8c:94:40:6e:7b:5e:40:69:f4:
b6:96:d8:75:3c:95:b9:75:85:4d:44:a1:52:48:ae:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:D9:DE:D7:09:30:C7:A0:6B:8A:67:B5:EF:DA:16:97:9C:8F:37
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:6e:03:1c:23:cd:ad:ea:a7:73:95:77:a2:33:65:2e:d7:
af:17:86:3a:81:cf:bd:80:e2:31:32:b3:fd:ac:ad:24:a7:10:
40:f0:5c:75:30:4a:9c:10:b4:2b:aa:1d:6d:c8:0e:72:f4:be:
c0:3d:9d:54:fa:7e:e4:23:8b:c2:4b:32:bd:47:69:7d:a8:10:
8c:f3:dc:60:13:b4:c7:55:f9:a9:c6:5e:df:74:15:83:85:51:
37:21:be:11:a8:d0:0b:1e:16:7e:88:9f:c2:45:8b:27:35:b2:
04:43:36:4b:dc:a9:ab:7b:47:42:c8:2b:59:b3:7a:c9:2c:99:
09:58:d8:75:f1:66:ca:9f:ef:84:3c:c9:6d:f6:5f:b8:ee:e3:
49:96:13:d9:b2:bc:7b:e6:13:67:56:f5:1e:ad:06:42:33:7c:
be:61:08:81:54:4a:68:71:d6:cf:66:93:ab:3b:4f:85:4a:9e:
13:da:b2:de:66:84:7b:e4:13:80:ac:22:51:13:74:ee:84:76:
0c:6d:07:b8:df:4d:c3:61:77:4b:e4:7a:06:4a:02:d0:05:e1:
16:56:0d:55:e7:b8:b0:ab:2f:cf:bc:4d:cf:36:6c:7d:62:5e:
63:ae:c0:c7:2c:9d:6b:5f:aa:70:48:15:f8:eb:e8:8f:f6:4a:
47:fb:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:09:33 2025 by rpki-client