
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: Nu7CMFgFE/xj/2mGsEFFzTLnFedVp7g+sREOscmhPXk=
Subject key identifier: 1B:F6:E6:B9:10:BB:C5:68:E5:22:5C:F7:92:EF:3E:82:8D:82:F2:36
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 019845F6E3A1DA29A134B9AEB7492266F879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1182
Signing time: Sat 26 Jul 2025 09:01:04 +0000
Manifest this update: Sat 26 Jul 2025 09:01:04 +0000
Manifest next update: Sun 27 Jul 2025 09:01:04 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: +hX/VN3zpz8/SE/6VAkpeOnmNcnnnqGzYfQH6aqGhKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:e3:a1:da:29:a1:34:b9:ae:b7:49:22:66:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Jul 26 09:01:04 2025 GMT
Not After : Jul 27 09:01:04 2025 GMT
Subject: CN=1bf6e6b910bbc568e5225cf792ef3e828d82f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:38:5f:eb:8f:e1:14:aa:8e:41:88:0f:46:
1c:3b:96:7b:4a:38:99:9a:0d:3e:b6:b0:b9:59:8c:
f0:e3:1d:d5:b0:a7:f2:68:17:9c:51:ef:ca:c5:89:
5b:21:13:c7:b8:e4:e3:e3:05:d7:d3:76:21:3c:c5:
26:88:70:4d:7e:54:6d:af:8e:f0:c5:ed:d3:05:6d:
4b:c3:37:04:9e:96:a4:24:07:ad:32:36:1e:85:64:
18:82:03:90:08:05:d3:84:2c:f2:8d:23:6e:16:3f:
9b:5b:c7:a7:27:e0:68:a5:2e:4b:24:f3:69:f1:19:
a7:e3:f6:7a:0f:34:a4:5a:e0:ce:34:26:2c:a6:d7:
fa:0f:bb:f5:e5:17:b8:80:22:53:6f:b4:73:4b:52:
ca:76:b7:57:0a:e6:f0:dc:d4:b8:bf:15:0e:c1:14:
d9:62:bc:90:6d:4b:10:a8:7c:3c:3b:38:28:71:7a:
f5:2f:f9:ee:ea:9b:3a:b5:32:aa:a4:9a:cb:66:b0:
f3:9f:f4:9f:8b:3d:ed:9a:65:c9:e3:e4:ac:9c:59:
7e:40:91:91:7e:f3:cc:86:0b:c2:97:de:6c:42:55:
fc:cb:34:20:ff:91:96:1f:10:89:8e:16:3b:2b:99:
4f:cc:26:b2:cf:f7:f7:87:38:c2:cb:ec:8a:80:b5:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:E6:B9:10:BB:C5:68:E5:22:5C:F7:92:EF:3E:82:8D:82:F2:36
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:93:4b:a6:c4:8f:2b:f8:ee:3a:57:23:40:94:29:0d:48:a0:
6f:5d:e3:11:19:1c:18:4c:5e:c8:5c:01:05:9c:b9:12:10:28:
f9:b5:55:be:c1:b0:bc:79:f4:9d:55:14:58:81:48:72:26:28:
c2:e5:8e:7a:77:c5:65:10:66:ab:5e:79:fd:8b:2e:12:df:ce:
ab:3f:3e:bd:2b:80:63:5a:1d:0b:7c:ad:2e:85:b5:95:5d:1d:
52:01:e3:c0:45:fa:36:61:c6:ef:44:40:ba:5b:07:46:95:10:
56:e6:a1:6c:16:8f:f4:69:7a:da:da:cb:fd:d8:76:d7:1e:66:
17:14:72:0f:af:09:13:5e:de:43:bc:56:2d:3c:c7:90:b6:f0:
a6:7c:bd:0b:fd:25:b3:1b:96:8a:08:b0:f8:35:f5:4e:49:ff:
0b:9c:cd:ef:0c:96:c0:dd:18:55:3a:1e:56:81:af:3d:7d:7d:
7a:d4:01:91:51:17:ac:eb:b3:01:a3:d5:53:9c:d2:6f:52:fe:
b4:ca:af:44:49:9a:dd:4a:0e:61:e6:03:da:ca:ef:bc:b6:44:
4d:a8:4a:98:e8:7f:4a:56:c2:b3:0e:72:5d:cf:ca:c4:b1:11:
42:ec:f1:ac:32:59:be:c1:50:91:e3:fc:f0:a9:bb:d8:26:92:
8c:bb:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:01:53 2025 by rpki-client