Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: ZQlKaMd7dYoPu3n+DC36/4X+ZAQQ7l15w06ZUCB3zTU=
Subject key identifier: 85:3E:48:29:82:B3:81:F2:E3:18:9D:5C:F8:A9:A7:34:93:BC:E7:21
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019845F66F9E9D1AC45D9609A8BAFA374515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 021A
Signing time: Sat 26 Jul 2025 09:00:35 +0000
Manifest this update: Sat 26 Jul 2025 09:00:35 +0000
Manifest next update: Sun 27 Jul 2025 09:00:35 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: l0+ObbR3mm0rJ8qBZFxYfecX3sI57Y/BAkGf8l9mhKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:6f:9e:9d:1a:c4:5d:96:09:a8:ba:fa:37:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Jul 26 09:00:35 2025 GMT
Not After : Jul 27 09:00:35 2025 GMT
Subject: CN=853e482982b381f2e3189d5cf8a9a73493bce721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:e8:00:6d:31:61:82:59:0d:47:e0:81:7e:
f8:50:b6:56:c5:e7:4a:6b:4f:60:3a:12:7d:c0:8f:
4c:03:a9:c3:aa:d9:6d:c1:35:26:97:af:1e:70:68:
c7:04:59:46:be:81:4e:cc:a3:ad:ef:13:1d:2b:e8:
5f:b9:75:c0:3f:30:ae:70:15:e4:bc:a3:17:ce:0e:
11:1f:37:17:8c:cd:b1:33:18:83:89:19:c5:e9:cb:
ea:5c:5d:f3:60:87:d3:85:9e:2e:57:dc:a1:04:a1:
43:9d:ec:25:f4:0b:b6:85:7f:27:d6:31:2c:75:3f:
06:b9:b9:fd:4d:97:e1:64:43:a8:10:35:f4:59:da:
18:ef:13:00:b3:11:27:5d:e2:8f:48:48:ba:64:42:
18:09:e9:3b:19:87:30:b0:93:36:b5:ba:18:da:ad:
c9:b6:a6:b4:ad:98:20:50:30:6f:7e:55:67:aa:b9:
4a:16:36:3a:4a:39:1a:ce:14:47:65:35:a4:1e:6e:
4c:c6:db:15:aa:41:57:a5:fc:5b:f0:cf:78:e4:9e:
4f:17:d1:05:a2:95:82:e7:5a:96:aa:53:51:27:b6:
e9:c0:d2:d7:c0:95:b5:80:30:11:50:46:21:21:ee:
41:c8:c8:72:18:1a:81:e9:ea:a0:1d:0e:55:99:0c:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:48:29:82:B3:81:F2:E3:18:9D:5C:F8:A9:A7:34:93:BC:E7:21
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:c1:6a:48:f0:e5:07:1e:70:4a:8e:21:9c:3d:6f:dd:7b:
07:c5:41:9e:07:c5:ac:38:37:14:ba:25:f1:cf:12:96:b8:d7:
bb:8d:fe:89:41:86:22:06:86:08:69:6a:f8:7b:ec:06:38:43:
8b:38:77:45:fe:37:c1:3b:0c:15:ca:93:16:2f:a2:53:c8:2c:
40:29:71:6a:5d:92:a9:43:f2:d3:00:52:c2:41:34:fe:0e:10:
e9:48:f9:9a:51:bc:26:e8:ef:f9:69:61:f5:a9:8c:e9:51:74:
08:12:f0:ec:8c:3f:f1:ba:c2:25:6a:e8:94:a2:30:70:e4:21:
28:03:73:55:c1:20:bd:ca:45:08:3e:7b:65:b0:fc:5d:58:d8:
ab:8a:72:2d:c0:5c:e8:2f:97:53:ba:3c:f8:d9:64:55:da:d7:
07:b2:7a:f2:29:2f:1e:a4:20:27:d9:14:74:a3:7c:99:d9:1b:
17:1d:86:f0:87:3e:5b:1e:05:3e:18:0d:17:a8:f4:66:32:5d:
bf:b1:e6:cb:d9:82:76:73:e4:75:33:87:7d:51:aa:e0:2f:78:
1d:d8:a9:a2:a7:bf:c3:56:8c:cd:02:61:b3:53:20:dd:f7:4a:
09:c6:50:21:6a:6d:8e:30:31:db:aa:cd:d1:e3:bb:59:bb:85:
34:19:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:24:53 2025 by rpki-client