Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: 1XdGGDQ4Rt7CfPkvmbXOGJS92Lhi2gaim4zd+FFDGFw=
Subject key identifier: 77:FC:04:44:46:AD:7E:0D:EF:10:E2:EE:A4:BA:CA:71:3F:A6:6C:CF
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0198447620399F92D087FEEC40A10A077719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 113E
Signing time: Sat 26 Jul 2025 02:00:48 +0000
Manifest this update: Sat 26 Jul 2025 02:00:48 +0000
Manifest next update: Sun 27 Jul 2025 02:00:48 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: YxcDkPBGuGwJd2d02RJPDAM6LwVtT0HCyoDCK4JIt3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:20:39:9f:92:d0:87:fe:ec:40:a1:0a:07:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Jul 26 02:00:48 2025 GMT
Not After : Jul 27 02:00:48 2025 GMT
Subject: CN=77fc044446ad7e0def10e2eea4baca713fa66ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:54:87:e0:44:c8:c8:a7:a0:90:42:08:88:
71:3f:ae:89:61:d1:36:cb:df:91:e8:7e:d3:6e:3e:
48:4d:39:c0:44:66:48:fc:2c:6b:55:24:f0:a3:12:
c4:0c:da:fd:8e:66:45:50:45:84:68:45:fe:d9:95:
9c:af:36:c3:40:56:15:55:07:55:96:5a:f8:b6:e7:
8a:76:5d:7f:47:5a:57:37:a6:82:57:d8:6b:e7:43:
5d:e6:20:b1:ff:01:9d:d2:43:98:8f:0e:ed:fa:cd:
b2:bf:42:8b:da:8f:e0:62:be:8d:f9:d1:12:81:30:
cf:13:2c:eb:73:5b:a7:97:1e:ff:ea:f5:b2:78:3b:
01:bb:e6:43:6d:9c:3f:82:50:e6:d3:ad:8f:fb:b6:
45:ca:80:9d:da:f1:38:cf:f3:d7:fc:d5:56:30:c0:
df:04:76:c5:dc:17:16:3e:84:c2:90:da:fc:b1:17:
87:5d:78:07:bc:aa:ae:fd:93:5a:13:a6:0a:23:43:
2a:27:20:5e:1e:bf:71:aa:d2:57:53:ee:7a:7f:c3:
78:c3:33:67:75:26:1c:ba:d1:7c:48:56:89:c2:23:
42:97:d9:47:86:5c:53:99:eb:24:b3:d3:61:1c:35:
96:04:94:8c:65:3b:2a:bd:47:4e:44:14:a6:72:3e:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:04:44:46:AD:7E:0D:EF:10:E2:EE:A4:BA:CA:71:3F:A6:6C:CF
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d9:95:f6:21:09:da:60:f2:eb:14:cd:88:0d:28:85:4f:f0:
1d:a2:45:36:40:52:04:e2:dd:d8:13:5e:0e:ea:a8:72:2a:e5:
b3:60:d5:71:d7:3f:18:e7:05:b7:5d:99:5d:12:4f:be:51:de:
8c:9e:4a:22:69:46:b6:63:f0:3f:04:0b:ef:43:84:3c:22:cd:
e9:f0:ab:f6:58:01:ab:6b:1a:7a:58:e4:52:85:5f:cf:d3:c3:
73:b2:9d:2f:60:de:19:6f:81:9c:7d:0f:5e:04:14:fa:5c:da:
66:72:25:8f:c0:89:c2:28:f0:20:25:e1:4a:16:78:bf:8c:09:
6e:fa:db:f5:e5:ae:82:a5:13:4f:4b:3d:42:9e:c3:86:7a:e8:
4e:09:74:2b:69:4f:96:10:0b:4f:92:a6:61:3d:4a:92:2c:b2:
b2:c7:19:4a:96:86:7d:1c:10:00:52:af:ef:40:a4:ca:93:44:
d8:7a:86:b2:9c:e4:f9:95:2e:c2:df:08:30:56:4f:a9:06:3c:
13:2c:6e:46:bf:da:46:92:fc:e1:3d:57:d0:50:71:5f:84:88:
2b:f3:4a:a9:51:8a:fb:d2:0c:0f:bb:b1:f4:80:52:0d:10:e7:
37:2d:0c:20:3c:56:de:60:04:71:33:bd:56:9f:7b:10:4d:4a:
d8:01:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:45:01 2025 by rpki-client