Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: pxNNqtAHyidOb2lgr+pvK5PLUYl7cOWnd8rIivm/OZg=
Subject key identifier: B1:D5:53:49:EA:67:40:B3:D9:C0:E7:C5:7E:B4:37:01:C7:93:24:5C
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 01984C2FFBC2F53BD7CC3410D9ABF0B92035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1494
Signing time: Sun 27 Jul 2025 14:01:09 +0000
Manifest this update: Sun 27 Jul 2025 14:01:09 +0000
Manifest next update: Mon 28 Jul 2025 14:01:09 +0000
Files and hashes: 1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
3: QAdvSCydHA9eyuAMO4zxWjMLaKA.roa (hash: SOXceRa6NpWT+hoKHihDdCbZSJgN5vfd5bbC+z6R+m0=)
4: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
5: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
6: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: OTrXIc5SvOMPBPocNITYRYhxq2C4eg/n8dSSyO4Gous=)
8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:fb:c2:f5:3b:d7:cc:34:10:d9:ab:f0:b9:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jul 27 14:01:09 2025 GMT
Not After : Jul 28 14:01:09 2025 GMT
Subject: CN=b1d55349ea6740b3d9c0e7c57eb43701c793245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:e6:3c:c0:02:a5:41:ef:1b:d5:ce:41:96:
79:48:80:a5:92:59:66:9e:59:e2:fc:30:c4:1e:e7:
a0:3a:65:b2:3e:e9:e2:8c:1f:85:d3:24:77:43:65:
75:a0:a9:54:a5:1a:37:63:fe:5e:5a:b3:69:9c:9a:
80:68:ae:90:ba:5f:33:15:c1:ab:74:0d:28:86:86:
a0:c7:54:32:a1:7b:ba:cd:17:b1:4c:8d:4f:e7:37:
64:d6:9d:d9:6a:69:73:c9:2b:86:44:b6:a4:a2:34:
de:6e:33:52:88:2f:4e:b7:a4:19:1e:ea:cb:10:60:
ed:b5:b9:ae:e1:28:e6:ec:18:f5:ff:23:73:51:af:
f3:ed:24:9e:da:53:cc:76:d3:12:a8:c9:bf:0a:ec:
31:93:a7:4d:c8:2b:3f:cd:67:45:99:90:b2:24:f2:
1d:93:08:0e:79:84:9a:ec:fc:2d:74:78:fc:53:e7:
68:64:bd:48:69:9a:04:af:25:26:20:e5:9b:1f:e9:
68:08:43:e5:0e:8a:4d:3a:62:ac:8a:20:9f:f2:81:
d5:f0:d1:2d:b1:e9:a1:77:5b:f2:f1:4e:35:f7:42:
ca:98:49:93:5e:3e:e7:6d:d2:4c:0d:15:5c:4e:b5:
e4:0a:b0:fc:59:43:00:c2:be:55:eb:a6:c7:89:08:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:53:49:EA:67:40:B3:D9:C0:E7:C5:7E:B4:37:01:C7:93:24:5C
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f0:ae:cd:14:a4:ed:e5:6c:59:30:04:d3:26:7a:a0:28:6e:
ca:6a:9f:af:28:24:43:fb:7e:10:0b:b6:3e:9a:b4:7a:eb:bd:
b9:6b:48:e9:b3:0e:40:6c:ba:31:6d:ce:54:d4:e6:c2:62:55:
92:18:c0:8e:5d:53:eb:b6:87:df:0c:05:8f:84:02:30:04:42:
e6:87:6f:7f:04:fa:4f:37:e3:ae:17:f0:0a:f2:73:5f:69:2b:
c5:0e:da:47:00:0b:dd:9c:b7:f8:94:dc:ec:11:24:12:28:89:
b8:32:7a:3a:82:08:e0:9b:4a:98:c6:44:c0:a5:71:9e:1e:7b:
69:51:ac:73:b8:9c:18:5f:ef:06:77:56:cf:be:78:54:97:c1:
d8:16:79:ef:55:02:22:54:44:a4:81:dc:f4:89:5f:80:cf:b8:
0a:88:e6:8d:40:1b:c7:bd:b2:98:37:3c:07:0d:9e:21:58:6c:
1d:55:7b:65:c6:e7:f6:82:97:ca:fe:23:19:23:7f:7d:d8:bf:
89:fe:b7:46:af:58:34:aa:aa:59:e8:6c:75:c4:00:c4:de:16:
48:37:99:5e:be:f0:81:4d:6b:85:19:e2:9d:c9:87:d5:1c:b8:
b4:f9:2b:d6:9d:b8:1e:b3:44:32:d3:82:61:a0:8d:1f:20:92:
f9:19:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:53:09 2025 by rpki-client