Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier: Alq/0gepezO4CWGUJffe7o5Q3UG6zbfYaVpWDbaavcI=
Subject key identifier: 30:C0:A5:8E:23:57:F6:08:2F:4A:2E:CE:53:46:3C:7E:86:28:6F:9F
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 01984A41060D42C0B36DBFEA515F3F3FEF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:32 +0000
Manifest this update: Sun 27 Jul 2025 05:00:32 +0000
Manifest next update: Mon 28 Jul 2025 05:00:32 +0000
Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: cM4MEkWq4dh2/v3/re5fwfzFk6FYz8bIP+Vu4EXlWCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:06:0d:42:c0:b3:6d:bf:ea:51:5f:3f:3f:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: Jul 27 05:00:32 2025 GMT
Not After : Jul 28 05:00:32 2025 GMT
Subject: CN=30c0a58e2357f6082f4a2ece53463c7e86286f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:ad:f5:70:d3:94:3c:72:4a:b4:57:24:b2:
45:09:6d:e6:d1:06:4f:01:dc:d4:83:b5:97:e1:50:
1a:b0:87:4b:33:72:d5:51:3b:6e:82:9c:81:1d:6d:
23:9e:8c:4d:43:c0:e3:f7:3f:45:c8:0b:6c:79:f2:
c9:a2:e7:b3:fd:13:33:c1:29:22:a3:46:2d:97:a1:
36:16:0b:9f:c2:20:fe:c7:73:f0:e0:8d:b6:cd:e9:
14:6f:47:fa:02:49:96:32:b3:9b:1c:6f:44:76:86:
76:77:ac:a6:5f:df:1c:f5:ae:a1:e0:92:fe:45:53:
ed:a9:79:5a:d7:ec:35:b5:0b:95:73:2d:56:e5:65:
b1:f1:2b:49:7e:71:8c:4f:35:b1:05:4e:07:bf:19:
2e:57:69:d2:7a:1f:88:5f:03:1f:c7:45:d6:8f:2a:
58:a9:61:ae:de:e9:65:c4:ec:0f:c9:d3:be:cd:f9:
61:86:c5:84:0c:1c:44:22:77:a6:04:db:ca:59:b3:
ee:b3:a0:32:5d:8f:18:e7:f1:26:8b:66:e6:b6:f7:
49:c3:0a:f2:a7:51:51:28:8c:c3:1d:e8:45:b8:6b:
3d:01:12:ac:a9:9d:96:be:5e:82:5e:6a:5b:08:4c:
2e:dc:3a:6a:e6:ae:1b:af:ab:ce:52:42:71:17:37:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:A5:8E:23:57:F6:08:2F:4A:2E:CE:53:46:3C:7E:86:28:6F:9F
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:fa:f3:c1:68:3a:d8:11:60:8d:88:f8:d2:cf:2e:d3:1e:
cc:17:f1:a9:9f:c4:68:e1:0a:fe:3c:09:f2:f3:fc:c6:20:ec:
9c:22:9d:5d:df:87:bc:55:5a:ab:ee:04:26:e1:67:7c:5c:df:
09:2c:44:7b:0a:fa:d7:bf:19:4f:da:70:35:17:8d:be:e9:44:
ba:73:0b:93:5d:7b:8c:71:0b:5c:af:b0:7f:d3:53:84:1c:eb:
9b:33:c7:7c:14:ac:94:1f:97:e0:7b:42:0b:63:b7:ec:6d:a6:
eb:4d:bd:e7:23:e1:9a:60:fb:b9:0b:7f:9d:21:a6:06:2c:c9:
9f:f1:fb:38:5a:d9:d2:63:7c:15:9d:f1:dc:f0:a0:03:6f:7a:
2a:6f:12:02:5e:8a:e5:5b:b4:0c:8f:23:b0:fd:f1:40:69:73:
a5:a4:22:06:c4:a4:0f:cb:0e:ce:59:b0:88:c2:31:4a:f3:7b:
1c:0b:e7:f2:1e:d3:e0:ba:f5:bb:48:82:c4:d6:d6:48:e5:f0:
2e:fb:0c:a7:e7:22:c6:d7:fb:59:92:ca:b0:4a:35:a9:be:5b:
0a:c2:48:6c:0b:03:af:0f:bf:77:cc:65:d8:a9:08:2f:bd:6b:
77:3a:f6:b9:7c:02:34:90:77:e9:9b:94:4d:b1:22:c8:48:56:
fb:e0:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:54 2025 by rpki-client