Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: UimBQLSYTnZMO2Ha8+VXM18BC4vQ0da+CCJKQZfJnJQ=
Subject key identifier: 06:E9:9A:AE:F3:7C:00:45:A7:37:C6:0A:C1:6D:27:81:96:DD:AB:30
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 01984A09CD2C448B32A4E122A6DA6126898E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: FeSRv6RbRTwp7lrSHRZBh/im6zed4a8+KAzn+REzAKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cd:2c:44:8b:32:a4:e1:22:a6:da:61:26:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=06e99aaef37c0045a737c60ac16d278196ddab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:8d:84:f9:1b:b9:ac:a7:85:6a:68:87:b6:
5d:0e:2e:01:5b:14:5b:56:e9:ad:26:a7:dd:76:7b:
bb:dc:a6:57:89:a1:a2:8a:83:b5:c9:26:e0:e9:ac:
90:98:a3:62:f7:2f:ca:53:71:ea:88:d3:72:86:40:
6b:27:ea:5d:f3:e6:0b:00:94:93:06:11:09:53:5e:
be:64:99:7b:98:1b:8a:25:fe:9e:07:f4:3c:c2:b2:
a5:c0:d6:da:50:ca:a9:73:ee:a6:27:57:c0:45:00:
8e:e9:1e:7f:02:fc:ac:21:f1:25:61:de:0a:77:56:
1c:74:e1:10:7b:3f:c1:d2:0c:0a:01:5c:60:60:bf:
15:4d:66:6e:1d:65:ee:d3:74:15:34:73:4f:48:26:
46:68:6f:18:24:16:22:0b:4a:87:1f:b0:cd:93:f3:
28:00:42:15:55:91:b8:71:8b:8d:e6:b8:18:28:b2:
05:56:23:77:47:08:d1:b9:ab:58:4f:e8:c4:91:3e:
9e:9e:2b:4a:45:e8:d4:77:ba:11:ea:2f:16:2e:40:
f6:1a:9c:ae:7c:d0:5d:98:19:75:88:66:92:68:e2:
f5:ce:c5:25:1f:39:d4:18:7f:e4:89:31:01:67:05:
74:9e:1e:7f:44:6a:96:62:d8:7e:d8:d7:5f:46:53:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E9:9A:AE:F3:7C:00:45:A7:37:C6:0A:C1:6D:27:81:96:DD:AB:30
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e9:ec:95:58:ff:af:4c:cc:cc:f2:bf:e5:d6:b0:43:74:9f:
66:3c:21:66:0e:36:39:33:1b:fb:4e:90:a1:b2:af:9f:e1:73:
d6:6f:01:ff:83:aa:b4:95:eb:36:9f:9f:ac:a3:6e:f3:aa:3e:
4a:73:54:77:cb:a6:f6:0f:bc:28:93:19:fd:1a:e2:4e:8f:a4:
8c:60:bd:f9:81:d2:0a:39:81:60:34:90:fe:1d:fd:60:a6:ea:
39:2f:8e:d8:14:a9:b4:e4:81:1e:37:4b:90:85:bf:e6:f3:95:
31:66:37:57:fd:96:cb:e7:15:86:f0:ff:10:46:30:64:46:25:
07:40:45:b3:2b:5b:b3:86:13:94:24:c4:3e:c8:c7:9f:30:cd:
4d:88:bf:26:7c:e2:b1:49:60:ef:13:f3:21:3c:bb:74:45:6e:
4c:f9:00:f4:fc:ad:c9:18:ed:43:e8:08:bb:c7:0e:f8:82:b8:
36:4b:4a:f3:d1:39:50:bc:0b:b2:6c:f8:cd:86:8e:99:32:e5:
04:7c:67:1e:10:02:d9:33:aa:b8:4f:11:4a:c9:1e:4f:d9:21:
b6:78:0c:ef:91:1b:b3:72:ad:42:d9:24:9d:a2:d6:c2:aa:15:
6e:48:f9:2f:1e:2f:9f:f7:8e:99:db:4d:c1:18:55:73:48:c5:
c8:16:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:52 2025 by rpki-client