Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: QUDZCCQD4tv9i0vPBpHWa95CpwwaCCGOl6djwbJsdg0=
Subject key identifier: 03:47:8D:FC:B4:65:3E:8A:14:64:E4:F0:CE:21:0B:81:67:C8:65:A3
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 019848F77B6DD21BEA1AD24811A8CA1588B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 151F
Signing time: Sat 26 Jul 2025 23:00:35 +0000
Manifest this update: Sat 26 Jul 2025 23:00:35 +0000
Manifest next update: Sun 27 Jul 2025 23:00:35 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: 5zZ9TTwOV1tG/ix2CBL1jENOkHfHOXFx4V68cYqgJfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7b:6d:d2:1b:ea:1a:d2:48:11:a8:ca:15:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jul 26 23:00:35 2025 GMT
Not After : Jul 27 23:00:35 2025 GMT
Subject: CN=03478dfcb4653e8a1464e4f0ce210b8167c865a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:1f:b6:18:ce:67:72:7b:86:b7:46:ca:ca:
12:be:25:02:e2:d7:d7:82:04:94:cb:87:51:66:b0:
9b:01:da:05:b0:25:b6:db:36:af:24:b9:d3:cd:08:
cb:79:c6:0a:2e:68:82:7c:9b:21:46:de:68:19:b8:
12:31:49:a8:b8:64:50:44:4b:73:90:cf:fc:e2:c8:
15:7e:d9:f2:c9:63:78:49:1c:74:14:d2:30:d2:35:
e2:61:a6:16:56:16:d6:e5:0d:f0:00:74:d6:f7:0a:
01:c3:0a:cb:e5:9f:5f:af:88:11:5f:0b:a6:99:67:
b3:28:1c:1f:69:e7:1c:cd:ce:cd:eb:5c:b5:24:09:
73:dd:0e:43:b0:b2:20:e6:44:02:d9:fe:b9:ff:ef:
29:f5:b8:dd:1b:56:d0:de:c3:c4:3b:ee:6a:41:5e:
35:95:aa:45:67:e4:77:67:8d:4c:8d:da:fc:d2:4f:
d5:0c:f5:0c:f0:3e:85:42:a7:ee:80:74:5f:6e:db:
02:0f:36:2a:41:59:47:7f:96:c4:e1:5a:70:2c:46:
b1:e1:a0:7d:ba:59:03:11:79:65:1f:d1:7c:fa:a7:
59:3d:bc:11:c6:92:94:66:0f:cf:5f:76:05:18:e3:
3a:3f:91:3c:22:b9:d0:ce:6d:29:99:97:5f:5d:03:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:8D:FC:B4:65:3E:8A:14:64:E4:F0:CE:21:0B:81:67:C8:65:A3
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:92:33:5b:21:26:2e:24:21:a3:95:f7:72:43:56:5c:22:80:
7b:dd:96:c8:9a:a9:a7:57:80:4f:ee:f2:e2:df:9c:c9:8c:64:
cd:07:86:7c:8c:2d:f3:0e:d7:f7:a4:6b:d1:aa:3f:c6:4a:c1:
d6:32:64:02:0a:c6:d5:5a:fb:d7:50:73:33:a1:43:b3:24:36:
12:dc:26:02:36:74:67:da:b8:22:68:68:ad:dc:ec:63:3b:4f:
61:4e:06:9e:12:b9:a0:58:74:f3:86:2d:5e:5b:69:88:10:c8:
42:0f:ad:d7:81:98:6b:30:ed:ae:42:b1:54:32:a4:3b:bf:72:
70:f5:35:20:9f:5a:d0:f4:28:b8:86:e0:f2:e5:c9:ca:68:a2:
ae:9f:46:03:b2:30:fa:88:a4:c4:22:d0:7b:1c:b5:73:f8:7c:
42:27:fa:1c:48:62:9b:80:d2:e2:ab:57:8e:80:51:5a:cc:3a:
a5:10:6b:38:b0:a1:94:a1:7a:05:68:c8:08:36:6a:90:84:a1:
5d:9c:ab:62:a2:c1:17:5d:d5:ff:1f:c0:01:ac:1a:bc:5e:6e:
2a:58:ab:26:f0:5d:3f:81:f4:11:0a:87:4e:17:63:95:6b:8c:
75:17:2f:fb:36:37:78:73:bb:01:2f:59:bf:d2:ee:58:be:44:
9b:0b:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:03 2025 by rpki-client