Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
File: xHKa8T09FW9BGXaxduVU-mcddvc.mft (raw, json)
Hash identifier: K8BEoScvcumZAEoKONmiMP191KkQz9ayJErBikoxCY0=
Subject key identifier: 57:27:A4:78:2E:92:47:9C:51:F7:ED:81:8B:DF:82:25:D5:89:9B:33
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial: 01984B539EDE99D64A9F6166A3A692409DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
Manifest number: 1346
Signing time: Sun 27 Jul 2025 10:00:27 +0000
Manifest this update: Sun 27 Jul 2025 10:00:27 +0000
Manifest next update: Mon 28 Jul 2025 10:00:27 +0000
Files and hashes: 1: qFZMGyq85ztg5ytAQ7RbzglxnGU.roa (hash: kMRZIxRuZxVhg2DxKXhubRuKlbKba7EMDPUaAyexKng=)
2: xHKa8T09FW9BGXaxduVU-mcddvc.crl (hash: 3a+LqstdnvDOKThgcGwDDL8ko9Q6UANNQDZ+FkIWsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:9e:de:99:d6:4a:9f:61:66:a3:a6:92:40:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
Validity
Not Before: Jul 27 10:00:27 2025 GMT
Not After : Jul 28 10:00:27 2025 GMT
Subject: CN=5727a4782e92479c51f7ed818bdf8225d5899b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:63:cd:60:96:d8:98:cc:27:51:e9:99:67:
5d:8d:4d:8d:86:6e:cb:be:7f:95:20:e6:73:53:db:
a9:ea:7c:ce:db:c4:3f:6f:1b:99:e6:3c:55:35:25:
56:97:25:bf:8b:be:06:f0:40:ad:06:4f:60:24:bb:
20:02:9d:03:09:14:22:13:ff:6c:45:7c:e7:4d:d5:
3e:92:03:03:a9:b7:a3:6f:bf:39:29:c2:24:2b:66:
44:27:20:0d:c6:ad:c7:d0:00:fc:7b:06:f1:9a:19:
ee:ea:f9:cc:3e:5b:87:00:88:d1:28:e4:02:3a:62:
d7:29:93:b7:01:4d:b5:3a:36:51:9d:fc:85:82:1b:
64:52:26:32:8e:ec:34:b8:95:c3:ac:d3:ae:2b:3a:
14:2c:d4:72:21:c3:18:7f:85:d8:41:ef:a6:0d:8c:
55:f1:f4:9e:a4:e9:ca:6a:4f:06:7e:25:ea:59:0a:
45:8e:c2:63:e5:8e:89:23:4e:94:2e:a8:9e:12:60:
d2:35:e3:bc:dc:3d:98:25:46:23:51:d7:98:09:6e:
dc:ec:11:02:ba:75:25:a4:f9:7f:8e:a0:0b:a6:c4:
2d:b8:bc:d1:92:c6:78:fd:5e:8d:20:42:af:f7:45:
93:9c:76:9b:fb:71:4c:74:05:fc:06:5f:40:38:e8:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:A4:78:2E:92:47:9C:51:F7:ED:81:8B:DF:82:25:D5:89:9B:33
X509v3 Authority Key Identifier:
keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:64:65:9d:d3:34:1b:77:42:a6:e3:d2:5c:f3:4a:5d:92:
ab:a8:44:91:0a:8a:24:08:6c:48:cf:ed:c2:03:62:ec:00:eb:
56:3e:d7:f2:c8:ed:0c:8a:01:f4:cc:e0:98:05:ea:0f:11:f4:
1f:00:d1:d9:45:0b:79:56:6e:ec:e7:2d:97:37:d5:16:15:20:
0f:20:56:dd:b7:8e:60:94:b5:1f:06:75:96:0f:56:bd:4d:8c:
1a:cf:cd:d8:65:c5:52:b7:df:1f:b7:b7:78:f0:48:08:4e:a0:
34:3d:9a:91:16:eb:2e:29:af:56:7a:e6:08:d3:b3:bf:9e:38:
c3:32:b4:74:eb:e7:f4:4d:28:46:c5:c7:23:84:61:2c:7e:16:
b5:4c:84:7b:4e:11:7f:1c:91:34:78:95:a8:76:e7:15:4f:44:
db:15:61:78:e8:02:de:56:e3:a3:33:38:50:27:17:6f:d1:17:
20:d1:14:fc:9b:45:1b:20:40:cd:df:ef:88:dd:c7:58:2f:ce:
76:a2:39:9a:58:3f:b8:e2:12:9b:40:44:c2:21:08:43:90:d5:
b5:98:56:90:22:e3:32:9a:7a:f1:c4:28:d4:f3:b3:80:df:cc:
10:d1:9f:c5:8f:2a:55:2c:74:80:b2:d2:2e:27:22:25:eb:9c:
54:ba:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:51 2025 by rpki-client