Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier: yuW7ns2sQOPVz5d1ZmmNbfFX3Mz1shIwgEv06/MxuRI=
Subject key identifier: 62:05:97:D9:96:E6:6F:E4:B6:E3:03:FA:73:D8:02:EC:37:C3:89:67
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 019857FCD510CA80700ADA5FA09D920EBCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number: 160C
Signing time: Tue 29 Jul 2025 21:00:43 +0000
Manifest this update: Tue 29 Jul 2025 21:00:43 +0000
Manifest next update: Wed 30 Jul 2025 21:00:43 +0000
Files and hashes: 1: nEhO-4IOflDc16smasjo46yXDrU.roa (hash: TGudjeK9/qruL2a7Ja97DNoAnaGXmeBxOzedTAd1+AI=)
2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: Jc9afhmumUbSblhuSodZ1m+4AeDgHmUYpsMA0Wtjnx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fc:d5:10:ca:80:70:0a:da:5f:a0:9d:92:0e:bc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Jul 29 21:00:43 2025 GMT
Not After : Jul 30 21:00:43 2025 GMT
Subject: CN=620597d996e66fe4b6e303fa73d802ec37c38967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:e1:10:73:a5:41:4b:43:73:99:51:9a:41:
de:5a:18:03:04:16:2d:82:de:c0:6d:3b:22:0e:62:
01:7f:06:18:2b:89:61:e6:54:bc:3f:bb:a2:de:05:
53:3c:70:4a:70:23:b5:dc:10:5a:21:b6:d3:bb:89:
99:52:19:1b:23:88:89:c2:1c:4d:34:4d:25:b5:ef:
55:b5:c3:1e:1b:79:74:28:a6:6e:46:9c:ef:ce:be:
9e:96:f9:b7:a2:37:51:be:b0:e6:d1:8a:d1:a7:ea:
86:95:d4:b0:dd:a7:63:ff:43:5f:70:96:f1:c1:46:
21:db:bb:e6:a2:89:bc:e1:42:e1:0f:d5:7f:1d:18:
19:a9:4e:dd:88:f9:86:43:b5:f5:a2:8f:8c:05:8f:
7a:a5:13:b7:d7:87:d0:69:20:5e:7d:af:46:2f:f5:
97:dc:8c:b3:77:dc:f6:f3:36:a8:02:40:74:d8:8a:
37:45:73:df:60:f5:02:9a:60:0b:39:d1:54:de:d1:
24:e9:3f:f0:0b:66:44:45:1d:a6:48:9f:1d:4b:1f:
e9:dd:58:66:b3:30:94:20:a2:ed:03:53:8d:42:4d:
78:b3:a1:a2:6a:b9:ee:7d:e8:3b:ab:9d:84:3d:6b:
4e:ef:cf:1e:53:8f:f7:d0:d6:0b:8a:6e:b1:fb:10:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:97:D9:96:E6:6F:E4:B6:E3:03:FA:73:D8:02:EC:37:C3:89:67
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e0:75:ad:07:bb:8e:8c:dc:2e:d5:76:f0:28:54:99:9a:12:
9f:c1:ca:c4:68:8d:19:5c:fd:91:81:8d:25:10:c5:cc:41:86:
02:9a:ff:17:28:24:c4:df:18:6d:bd:cd:7d:c2:46:04:1b:ca:
ee:76:97:6f:b4:e3:18:d9:14:e9:87:5d:7a:12:c6:e0:12:37:
fc:d2:87:ba:ad:99:76:ff:81:b9:00:61:40:12:28:e5:52:fc:
ea:50:f5:12:0e:d2:e6:13:c1:24:e0:73:3e:b1:6b:5f:be:aa:
5b:57:c8:44:61:84:37:2b:ff:96:c6:0b:ef:b0:17:ba:8b:17:
b9:53:e8:d2:0b:3e:ab:a3:68:40:6d:f0:24:88:c7:36:5a:49:
65:55:3e:65:b2:0e:33:98:3b:82:e8:11:58:81:83:e7:1c:6b:
d0:c4:d6:bc:18:d8:a1:0c:40:0c:2b:99:fb:05:e4:df:5b:23:
8b:a1:72:d2:84:4f:15:73:e6:e6:3f:fc:a4:aa:4c:3b:24:a9:
1c:c7:4b:29:ec:e4:87:a3:51:0a:71:b4:9d:8a:f5:04:62:99:
50:0b:f0:60:92:c7:ee:57:27:64:bb:0a:04:24:f4:b3:5a:6d:
66:77:d4:ef:49:e2:1f:ae:cc:c9:78:4c:03:ce:b6:e6:ad:6e:
f1:e5:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:22:32 2025 by rpki-client