Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: XwUC3gyDHjVY5QMUWpaVljKkBlxNAa7CfKDiek2x6JI=
Subject key identifier: FF:92:02:4D:86:E9:13:EE:67:07:B2:FA:0D:7C:D7:06:E1:44:77:A3
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 01984C9D4014EDDD97541DE58D9989108265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 05EF
Signing time: Sun 27 Jul 2025 16:00:30 +0000
Manifest this update: Sun 27 Jul 2025 16:00:30 +0000
Manifest next update: Mon 28 Jul 2025 16:00:30 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: tTPYNnknEFSeinTg+F3zDrbQ4HZoX21FXl9/L9KPFpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:40:14:ed:dd:97:54:1d:e5:8d:99:89:10:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Jul 27 16:00:30 2025 GMT
Not After : Jul 28 16:00:30 2025 GMT
Subject: CN=ff92024d86e913ee6707b2fa0d7cd706e14477a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:d6:27:60:ed:37:17:d5:71:dd:c9:30:bc:
eb:e3:66:1f:26:6a:b3:5a:86:bb:99:0d:ea:1a:92:
b0:c1:02:3d:0b:6f:d3:2b:dc:6f:88:ca:94:fc:03:
08:78:76:9b:bc:9f:0a:c7:52:e2:e3:4d:05:d8:0b:
88:37:c9:91:47:c7:1f:ac:40:4d:1c:05:6b:69:c9:
bf:3b:73:c9:20:f3:f5:b9:8c:7c:f4:1d:af:8f:53:
a3:42:2e:cb:b5:d8:a1:b3:9e:9c:dc:10:4a:02:0e:
b3:12:e9:ac:c0:45:76:0c:bf:26:15:59:f6:47:c7:
ca:48:fd:c4:ef:7e:4d:f6:cd:ff:84:1c:10:7a:0d:
5c:e7:dc:23:0f:80:01:3d:1f:b7:e6:23:69:0c:ee:
c4:4a:ec:35:fe:51:0d:57:33:e3:ab:54:48:a5:79:
86:4d:4d:f1:82:de:16:98:24:ad:ea:a2:21:fb:0d:
fe:fd:2c:9c:a0:a5:d2:7e:58:29:35:e8:40:50:fd:
cd:58:18:dc:e3:7c:93:f6:45:5d:36:92:f9:8e:e2:
66:d4:0d:9d:dc:9f:1d:9a:7e:02:07:92:e5:b9:49:
ac:17:aa:3b:50:24:39:f0:f0:48:38:28:02:db:76:
ad:05:fa:22:2e:d4:76:5c:d5:78:e4:ca:9a:89:2c:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:02:4D:86:E9:13:EE:67:07:B2:FA:0D:7C:D7:06:E1:44:77:A3
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2f:dc:92:ed:ef:e4:7c:d2:70:55:05:23:0e:ff:60:37:12:
f3:ce:c5:05:26:ce:de:16:de:fe:e5:61:87:bd:48:5a:fa:45:
44:ce:d1:c1:3c:c1:dd:1b:9f:24:4c:9b:65:46:50:9f:f5:dc:
55:cd:75:1a:93:51:73:09:3e:2d:fb:3c:e1:bb:af:9a:61:99:
1a:b5:3c:c3:d4:89:0a:6b:10:d1:70:80:33:d1:9e:34:30:c9:
ac:8c:e6:b4:cd:a7:08:9b:08:ec:3c:51:81:28:67:25:0b:00:
27:69:45:1a:6c:65:d8:e5:8a:55:b9:5a:33:c3:55:bb:68:d2:
da:09:f1:77:ec:37:1f:52:71:6d:08:e7:03:b6:11:42:f0:78:
1d:1f:ce:38:59:20:72:a1:7d:19:b8:b4:e3:12:c3:96:0e:13:
ca:59:21:56:8f:cf:2d:68:19:74:9a:e9:ce:ec:3b:d5:82:c7:
8f:f7:0e:91:5c:a3:0f:47:f9:41:18:a4:71:bc:32:58:f7:d6:
dd:0a:b8:6e:3b:c8:23:4d:69:41:12:af:fb:32:08:9a:89:b2:
bb:1d:2b:84:ec:5c:e5:fa:05:47:f0:90:53:98:83:98:41:8f:
d6:13:a5:b6:5e:2a:fa:cf:9e:b3:21:d8:be:fa:d0:89:47:34:
a8:b4:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:26:41 2025 by rpki-client