Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: hMx5hNq80Jpe16F0V2D9nMW16isd8Q6SsfUgGy6TU8g=
Subject key identifier: 50:A6:45:21:41:E2:8A:76:48:2E:5C:3D:DB:0B:48:EB:EA:A0:93:69
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 01984AE5B8B47AD270D340F2A4DAE7C73229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 04B6
Signing time: Sun 27 Jul 2025 08:00:25 +0000
Manifest this update: Sun 27 Jul 2025 08:00:25 +0000
Manifest next update: Mon 28 Jul 2025 08:00:25 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: BLoC/+cIbTYkpCGEDtPAYSw6QQFNXVT6aUJFkgjstNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b8:b4:7a:d2:70:d3:40:f2:a4:da:e7:c7:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jul 27 08:00:25 2025 GMT
Not After : Jul 28 08:00:25 2025 GMT
Subject: CN=50a6452141e28a76482e5c3ddb0b48ebeaa09369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:05:68:20:7c:8f:cd:2b:7b:ba:47:de:f6:
fa:57:7b:b5:63:3e:a8:44:88:8f:04:50:68:1a:5c:
2a:09:22:73:fb:13:8b:93:05:dd:f2:68:2a:24:21:
96:9d:6f:9c:8a:1c:57:85:99:84:63:fd:8b:d2:31:
f1:43:23:6c:25:06:06:ba:9c:df:ac:a2:6c:07:21:
d8:14:9e:41:39:f3:80:7d:08:22:3a:e3:ff:66:ed:
90:3b:d2:1d:35:1b:61:69:6e:19:ce:e3:cc:36:f1:
b1:0b:6d:68:cc:79:10:45:d0:5c:51:4e:b0:52:12:
3f:e4:32:7d:e8:06:10:a8:47:28:5a:7b:89:e2:78:
9a:5b:66:73:2f:61:88:aa:53:17:23:03:d8:6c:2a:
90:f9:12:35:60:d4:74:fc:eb:5f:e2:c0:85:ec:6c:
05:26:c0:e8:82:11:12:02:0f:7d:85:3c:71:99:57:
67:20:44:37:e4:2f:3a:08:e5:72:5b:13:12:5d:40:
ac:af:cc:6d:14:d4:85:82:10:92:97:8a:f0:cb:b0:
6b:0e:ee:e7:6f:db:9d:4d:9b:32:83:07:8f:60:f5:
5c:71:64:04:fe:00:93:ae:a5:d2:a0:b0:ed:6a:2f:
53:f9:1f:c4:cf:58:a8:2e:03:ca:22:4f:f1:a7:47:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A6:45:21:41:E2:8A:76:48:2E:5C:3D:DB:0B:48:EB:EA:A0:93:69
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:2f:8a:69:2f:30:a1:f7:37:52:d1:f7:ca:6f:6e:ee:94:
0c:f6:41:06:e2:f4:59:e6:07:9d:d5:ef:58:07:7e:26:ec:01:
df:1a:b6:6a:7c:ea:1a:43:14:b5:1a:44:32:ab:d9:16:44:89:
e4:1b:c4:47:51:f8:c0:55:60:36:0c:f8:f4:c7:a9:f2:d6:4f:
90:82:1b:ca:99:00:a1:23:3e:17:c7:07:86:4a:88:33:c8:c8:
49:b9:6c:d2:c6:59:dd:95:3e:8a:d8:a2:8a:fc:39:e5:d3:8e:
3f:3b:79:ee:1c:02:35:f7:55:eb:60:36:72:bb:ed:6a:e8:83:
15:9c:9d:5c:10:6e:7d:5a:bc:e9:b0:c8:49:cd:cd:e1:2b:c1:
c4:1d:75:7d:3b:0c:97:25:8d:dd:a7:91:6b:4f:dd:a8:cf:b4:
fa:f4:5a:0f:9e:da:ec:23:79:ae:f8:78:9a:5d:e8:ae:24:5d:
00:47:7d:1b:5c:13:73:de:26:5d:b2:70:0e:f9:cf:c5:d7:a1:
6e:67:ba:a3:df:57:70:5a:75:75:67:ec:3c:6f:3e:df:91:46:
95:7c:45:59:3e:34:73:91:9b:16:72:8c:60:08:7c:1e:c8:30:
90:aa:b0:de:81:1a:ce:5d:0d:25:97:35:4c:bc:e5:c3:60:1b:
c6:4b:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:25 2025 by rpki-client