Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: /GOYFqqULzbWPVQm6CNhWJ6amDwDG8Rnwif+pe88eek=
Subject key identifier: B6:FB:A1:78:64:D1:09:C9:2E:9A:0F:23:BB:56:41:38:E6:1D:B0:D9
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01984776E4C931B8056A3512AB0E868DF37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 1248
Signing time: Sat 26 Jul 2025 16:00:30 +0000
Manifest this update: Sat 26 Jul 2025 16:00:30 +0000
Manifest next update: Sun 27 Jul 2025 16:00:30 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: t+6z4NF/ENp9+qZHjZGybEi0/e7016BW/VGWWNbiF5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e4:c9:31:b8:05:6a:35:12:ab:0e:86:8d:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jul 26 16:00:30 2025 GMT
Not After : Jul 27 16:00:30 2025 GMT
Subject: CN=b6fba17864d109c92e9a0f23bb564138e61db0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:3d:fb:11:0f:3d:07:ab:08:80:4e:6c:ad:
50:23:43:86:7b:b9:e3:f6:39:b7:dd:85:2b:ec:0b:
6a:d1:04:b5:da:49:e3:21:40:b2:e9:6c:e9:5b:b4:
a6:80:47:9c:9e:2e:23:9c:c8:c5:b9:7f:31:bf:02:
9a:a8:6b:6d:4f:70:78:83:69:db:ba:d6:ee:23:8c:
47:62:b8:a4:db:98:0f:98:48:ef:80:93:99:63:bd:
34:7a:28:58:ca:e0:19:8b:30:4a:a7:5d:8a:d5:dc:
9b:09:4d:08:e0:62:18:48:af:ec:a7:00:9e:e8:0a:
50:72:2f:3e:99:90:6e:39:ea:13:db:d3:c2:54:2f:
90:1e:ca:81:91:68:88:82:d5:f1:96:64:75:02:8a:
d3:64:fb:fe:0d:42:49:81:2b:c2:12:f4:d9:4b:df:
6c:e1:9f:50:1b:12:9f:ef:4a:6e:b4:1b:10:ac:42:
0d:97:42:0d:9c:2c:f7:9a:80:f1:e7:fa:50:88:2b:
0b:0e:e4:58:3a:25:31:9c:ed:79:76:ef:b9:ac:ef:
5c:dd:f5:dc:dd:57:7b:11:37:ea:71:d3:85:cf:2f:
0b:59:b9:ea:46:7c:1e:89:f6:8f:10:1c:c2:d2:8d:
83:ab:71:dd:af:02:45:72:f9:19:7e:fa:d2:d6:8e:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:A1:78:64:D1:09:C9:2E:9A:0F:23:BB:56:41:38:E6:1D:B0:D9
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0a:8c:85:c8:d9:fd:02:72:c2:ad:dd:65:1c:5a:29:ce:a3:
78:5a:37:b0:f7:fa:ff:84:9a:20:e6:46:45:3a:57:a2:60:be:
16:c5:27:15:4c:44:08:68:2b:7d:72:3c:ef:ce:5b:c4:96:e3:
32:e4:26:7b:54:2f:4e:8f:7e:ce:62:16:71:69:c5:56:7a:c2:
38:39:10:83:bc:a8:05:a2:b3:ba:b8:d8:cd:69:0c:4d:16:d8:
5d:98:a5:71:3e:61:78:9d:5b:88:af:47:b8:cb:01:db:b3:10:
4a:51:46:65:e1:5e:0f:f6:e3:49:3a:f1:66:6b:95:3d:5a:d9:
c7:4f:80:69:57:2d:21:23:32:33:3c:e3:0b:92:ee:2b:ef:bb:
ca:c7:e4:bd:77:0b:fa:0c:2b:04:29:8a:86:5b:3e:2b:b7:93:
80:90:9c:c4:ff:d2:6f:a3:14:94:ac:62:89:71:e2:88:df:47:
69:ba:89:dc:c8:d1:d3:d7:17:b9:01:8f:03:19:41:08:85:05:
fd:89:b9:a9:80:d3:0d:58:df:17:95:ca:3b:c0:c4:0b:e5:55:
bb:33:c5:cc:54:38:4c:c9:9d:95:a5:69:37:0b:ed:1f:6e:f4:
7d:6d:2d:19:96:f2:46:6d:eb:b9:69:93:ba:10:91:6b:b9:e9:
1d:1e:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:26:44 2025 by rpki-client