Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: eleIXc+t8NgEvqiBpNtVW50zJm4FpKBOmBKxcrD9TS8=
Subject key identifier: 0C:9C:16:9C:39:0C:25:26:12:8C:E0:D2:4D:3A:A7:22:9A:E6:D2:CC
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019847ADF3685141DFE316E5E4428588475B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 02E6
Signing time: Sat 26 Jul 2025 17:00:38 +0000
Manifest this update: Sat 26 Jul 2025 17:00:38 +0000
Manifest next update: Sun 27 Jul 2025 17:00:38 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: 5ElUf+qn2NXopmM5MHahTEIThnmEsgK8LCGuPcHMBF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:f3:68:51:41:df:e3:16:e5:e4:42:85:88:47:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jul 26 17:00:38 2025 GMT
Not After : Jul 27 17:00:38 2025 GMT
Subject: CN=0c9c169c390c2526128ce0d24d3aa7229ae6d2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:14:4a:ee:28:d3:20:c1:01:3d:98:56:e3:
1b:31:f5:8a:f9:61:70:39:ef:24:c5:e4:18:95:78:
30:90:9f:79:41:79:ad:ef:51:58:2b:ae:73:01:98:
47:bd:85:8d:3b:d8:70:bd:c5:c4:c2:1b:b4:0f:b6:
e6:2a:9a:cc:70:32:6b:b0:95:89:eb:72:33:cc:a9:
de:c2:20:76:22:dc:ee:20:77:68:ce:23:cb:9b:1f:
6f:27:97:52:1a:dc:63:c3:8e:e7:fc:48:e9:04:ca:
e5:d7:13:17:c5:7d:5a:6a:c1:90:1b:3e:be:64:e2:
3f:f1:26:af:52:f3:24:7f:78:02:c0:97:3e:f2:28:
4f:69:2f:28:f6:6a:a9:d7:bc:10:13:01:a0:e6:a3:
fc:66:e2:a9:03:d7:43:81:71:d7:2f:6f:77:56:39:
19:20:69:6a:9a:a3:85:62:76:85:0a:1d:90:94:27:
66:f7:93:68:66:5b:d5:92:28:9a:04:c0:33:3e:c3:
8f:f4:de:7f:e8:d9:8e:dd:b8:bb:83:76:95:90:4b:
7c:d7:c1:4b:f1:a5:5e:fe:69:8f:8c:8c:77:67:1c:
7c:e9:c4:b4:ad:c8:7a:cc:f0:7e:6b:5f:e1:2b:e1:
45:d1:b7:b4:85:7a:52:0c:f5:48:3f:fe:90:2b:aa:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:16:9C:39:0C:25:26:12:8C:E0:D2:4D:3A:A7:22:9A:E6:D2:CC
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6a:e5:d5:54:75:42:62:06:e3:f6:28:22:28:e4:f1:7a:11:
3b:2c:92:1a:55:7d:83:7b:88:c1:3d:53:18:20:1a:d9:55:91:
8e:26:10:c1:72:f4:e4:22:20:c2:93:f7:7b:c6:f0:8f:db:0e:
ac:d7:24:af:23:da:f6:f4:ec:c2:52:ba:53:17:5b:15:5a:87:
57:af:74:9a:89:af:94:3c:78:53:7b:b5:2f:a4:c5:11:e8:03:
8d:99:38:01:f2:f2:8f:ba:77:29:54:1f:c6:58:72:f5:d4:e8:
42:e4:c7:07:34:56:06:46:a9:df:fc:e7:d0:d0:4f:b9:39:fa:
6f:65:08:1e:d2:4a:f6:f2:9e:39:55:dd:54:40:77:08:cc:4d:
13:d3:25:17:ae:24:3c:57:23:87:c8:f6:e3:7d:3c:db:d5:7e:
be:23:f0:bd:ad:51:28:ab:58:cd:68:73:92:e1:75:86:e0:7f:
30:1b:8c:37:b4:91:95:8d:f5:56:70:59:b5:a1:ff:e5:f0:8b:
27:a9:10:82:0f:6c:02:39:b8:76:ac:eb:25:8d:99:94:56:9a:
9e:fa:96:1e:94:62:e8:06:7e:19:a5:33:ab:93:bd:fa:45:5a:
dd:9e:2e:2b:2a:72:e3:f9:d1:ef:83:1f:bf:12:c3:17:82:5b:
02:01:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:00:58 2025 by rpki-client