Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: T/eh0jF2fQgFpJDtjcbepLnXYrpv6sbhmDVDh2z8dK0=
Subject key identifier: B8:86:C9:DF:D8:AB:98:FD:39:10:89:9A:38:13:38:DA:BD:05:1C:80
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019826D97ECB3703C94A1699633BBEB93DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 10
Signing time: Sun 20 Jul 2025 08:00:44 +0000
Manifest this update: Sun 20 Jul 2025 08:00:44 +0000
Manifest next update: Mon 21 Jul 2025 08:00:44 +0000
Files and hashes: 1: 5IPzjXtbudzhqWSCz_2qKpvgqfM.roa (hash: 3/k5aiqNpyNZ/fHElOfLbVv7ZKiwKvI6JAy6AM1SccM=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: Cno+KD2KHLdk5DkysaU48PmIFP6ASxa0B1F7nK2epqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:7e:cb:37:03:c9:4a:16:99:63:3b:be:b9:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Jul 20 08:00:44 2025 GMT
Not After : Jul 21 08:00:44 2025 GMT
Subject: CN=b886c9dfd8ab98fd3910899a381338dabd051c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:ec:4d:12:5b:3c:d1:de:5d:66:b4:e6:a5:
8c:1d:dc:f3:f7:dc:ed:6f:df:7b:ba:6c:b1:97:51:
5c:b1:21:eb:6f:a3:9a:7c:4f:c1:c9:a3:6e:c4:4a:
32:33:2b:e8:d7:d5:51:44:b1:6b:3d:9c:ad:72:3e:
1d:d9:af:11:11:e4:22:45:fa:1f:81:89:95:3e:88:
9b:be:f9:02:e5:1e:ae:a1:d0:5b:6d:be:06:60:fc:
01:ee:c8:8c:19:c6:99:75:a4:e7:a1:ae:d0:28:10:
f1:65:5b:05:1e:3e:cd:f8:42:6e:44:ef:b6:8f:e2:
0d:bf:7a:6e:44:05:30:24:3d:fd:94:b6:07:50:c4:
01:ce:46:8a:94:69:1f:a4:e2:40:31:eb:d3:68:5a:
c8:0b:fe:59:7f:7b:e7:12:90:5e:d6:6e:66:bf:c5:
5c:8e:88:9e:0e:99:13:e6:38:c1:1c:4d:bb:51:ca:
50:9f:03:0e:a1:1e:a9:c2:5a:7d:c4:59:de:50:15:
35:7b:71:df:07:d7:be:7c:dc:59:a5:7a:01:ea:3c:
4e:80:b3:6b:5b:23:c5:38:20:1b:6a:60:98:20:9a:
9c:e9:3f:af:19:35:c8:7f:79:ec:81:86:08:8e:ef:
9d:d2:24:e7:05:e7:0c:46:e0:48:5d:ac:88:35:82:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:C9:DF:D8:AB:98:FD:39:10:89:9A:38:13:38:DA:BD:05:1C:80
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:b2:44:7b:1c:f0:93:c0:39:87:e3:42:be:3a:8d:14:1a:
25:ba:9c:c5:5c:32:fb:4f:68:46:31:90:78:ac:76:ae:7c:63:
ec:9d:3c:ae:43:e1:ac:ca:2f:46:2c:83:f2:92:2f:22:b4:21:
2a:9a:3d:73:88:02:cc:17:a5:e9:1c:c2:d9:cc:cf:c4:8d:d6:
f5:fb:ac:e1:b7:40:24:7c:70:a0:27:2a:d5:ec:1e:9d:31:c1:
38:62:5b:d0:76:dd:4c:2b:86:36:69:9f:18:0a:97:33:63:4b:
2c:78:d9:c4:47:82:5c:4e:67:d0:9f:cc:a5:03:b1:e7:74:e1:
52:4a:3f:20:87:0e:b7:c8:58:1b:53:21:85:94:81:18:08:c1:
a7:2c:20:26:4d:27:31:f3:73:11:f0:22:d6:99:1b:20:98:46:
61:d3:be:7e:e4:3a:a4:10:91:72:6a:fe:95:b5:08:fa:7f:e4:
97:e6:34:20:d4:a3:cb:06:6f:55:d1:b0:35:9e:cd:a4:b8:6b:
08:7a:47:5a:52:b1:4f:d0:18:57:84:59:a3:3e:0e:8d:13:a2:
e5:b2:da:25:96:c9:27:22:ee:71:94:a4:14:9a:fd:92:1e:f9:
1a:3e:5f:4a:66:24:d1:b1:8b:5c:c0:ac:30:3c:b2:3a:56:e2:
7a:bb:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:50:57 2025 by rpki-client