Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: v3ZMY5apXBWd0ic2OBLMd14ONik81i+inmwuhR5dKyA=
Subject key identifier: AD:DD:F2:26:62:F8:D9:2F:40:A8:FE:DB:50:D8:A5:94:44:D6:65:A7
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 0198537B6D97D96F300965B2E6680227FBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 06FE
Signing time: Tue 29 Jul 2025 00:00:54 +0000
Manifest this update: Tue 29 Jul 2025 00:00:54 +0000
Manifest next update: Wed 30 Jul 2025 00:00:54 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: Io0WHQuf/w30GTiPOKlofi0P4k6BwQftuQomcosIJeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:6d:97:d9:6f:30:09:65:b2:e6:68:02:27:fb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Jul 29 00:00:54 2025 GMT
Not After : Jul 30 00:00:54 2025 GMT
Subject: CN=adddf22662f8d92f40a8fedb50d8a59444d665a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:44:d1:d3:ba:76:9f:40:2d:e0:64:aa:ef:
7c:16:ce:c1:74:95:fc:93:b5:27:02:9d:5f:49:dc:
3d:eb:d3:9e:15:01:ac:a5:eb:da:e8:8b:8c:18:a2:
a5:3a:cc:b1:aa:c8:4c:7b:6e:17:07:64:f8:f5:b3:
d2:45:43:b7:c5:8a:69:76:aa:84:ea:fc:7d:1a:d9:
2c:fc:b6:34:c8:2b:59:55:ca:34:24:58:0d:60:e2:
cc:11:f0:70:86:67:a7:99:55:e0:db:7f:51:2c:c2:
17:0b:17:12:2b:3e:eb:84:57:7f:69:e2:99:96:c1:
ab:5f:81:ef:aa:a9:cf:22:7d:8e:ae:bf:0b:ce:3c:
6d:78:9c:34:1b:ef:d4:91:cc:6c:de:de:32:fa:a0:
a8:29:92:46:0a:ae:22:2e:be:27:a9:7a:15:5f:cc:
a7:0a:41:0b:7b:2a:68:88:3e:27:df:fa:06:8f:28:
c1:67:c4:7d:b7:f6:42:aa:bf:ec:0c:89:b0:c4:e9:
19:c1:33:e2:61:b9:ad:a8:de:9a:8b:59:7c:eb:a6:
12:ea:32:07:37:1f:92:4d:76:4b:7c:6f:94:54:42:
b8:ff:7b:c7:00:ce:85:ab:24:16:e1:b6:ee:eb:28:
dc:ad:75:19:78:9d:b9:3a:40:e3:ff:ca:aa:bc:d6:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:F2:26:62:F8:D9:2F:40:A8:FE:DB:50:D8:A5:94:44:D6:65:A7
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:89:c8:fa:e4:07:ef:61:72:b3:90:7e:81:a4:c5:95:f6:31:
19:fe:91:30:3f:b6:91:5a:02:c6:b8:dd:a3:4d:38:07:cb:ef:
f7:6c:c1:d6:49:97:91:23:82:4b:ce:50:43:27:c0:d2:93:11:
f5:4a:88:9a:a1:87:7a:a9:f2:b6:5e:55:a9:97:78:bc:39:a9:
19:ef:17:96:ed:d8:10:81:d2:2d:72:10:1e:d5:6e:d5:24:f9:
46:07:71:e6:40:df:8e:d3:54:96:86:b6:f0:19:d7:cc:62:92:
32:e9:da:f6:2c:8b:a3:92:13:5d:3b:9c:0a:3d:59:0a:65:eb:
da:32:12:87:4b:c0:8b:dc:be:30:12:08:15:08:1d:6c:72:9c:
51:ba:36:d2:90:fb:1e:20:aa:64:66:5b:4a:0b:27:ba:69:5c:
72:bc:4a:62:59:ea:6f:0d:74:35:da:a2:ec:a8:44:49:9c:01:
8d:74:06:ab:c2:64:93:b5:22:91:95:e9:e4:2c:de:33:24:6e:
60:7c:4b:de:39:5e:3b:31:5b:f1:e4:2a:d7:83:e0:55:ef:2b:
ae:dc:6c:49:0e:82:ec:5e:18:a8:d3:4b:b9:15:87:fb:b3:e6:
d6:db:83:e2:16:58:66:cb:0f:68:f7:32:65:59:14:4b:33:76:
c8:00:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:37 2025 by rpki-client