Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: UDUqT9nrJwFKK19f44DvUv8S7A2u8dElOlYMC3YHOr8=
Subject key identifier: 94:07:58:93:C0:98:57:93:25:24:AF:C0:8B:54:AC:29:B2:DF:52:AC
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 01984A7790330394CF6B1AF88DFE9D9F77B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 1559
Signing time: Sun 27 Jul 2025 06:00:06 +0000
Manifest this update: Sun 27 Jul 2025 06:00:06 +0000
Manifest next update: Mon 28 Jul 2025 06:00:06 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: PqUJ/PU/CVZ8U20qvGgBEiXLatphxfB3IGH3PyhjZ/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:90:33:03:94:cf:6b:1a:f8:8d:fe:9d:9f:77:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Jul 27 06:00:06 2025 GMT
Not After : Jul 28 06:00:06 2025 GMT
Subject: CN=94075893c09857932524afc08b54ac29b2df52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:54:41:68:20:40:dc:09:d9:26:a1:40:be:
54:2b:10:61:1b:4f:2f:3a:88:83:36:0e:ac:31:65:
b5:ae:f5:5b:7f:a4:78:85:12:5d:d2:9c:c9:e4:c0:
62:35:fa:69:a8:26:0d:d4:0b:de:68:c4:c4:9b:45:
8f:7f:c4:c1:16:bb:d9:72:26:ac:c5:52:ab:00:2e:
e6:37:ca:51:4f:3c:2f:1c:ea:9a:b9:40:13:0e:19:
89:f0:fb:04:1e:25:5b:c7:5c:df:63:24:6c:8c:b0:
70:22:e7:b5:9f:28:9e:1a:17:02:f0:a5:49:90:95:
94:c4:b3:94:8d:6a:53:7f:08:73:0d:ba:f8:fd:a5:
43:b7:9d:50:0a:97:ba:5d:af:a3:32:ab:4b:00:f6:
4a:7c:00:f2:02:4c:47:7c:54:60:f5:6e:9c:42:af:
c7:44:94:1d:77:ed:0e:fd:e3:02:9d:c9:d1:e3:84:
1f:87:8e:33:9c:b5:6c:ca:51:1e:38:36:d1:2c:2c:
76:f4:b5:f3:42:73:6e:60:9d:eb:23:4e:56:fe:f7:
84:84:69:f9:7c:e1:88:6a:de:c9:bd:15:1b:0c:a6:
db:20:76:57:1b:81:39:b3:33:29:be:d2:c0:48:a6:
b8:a7:8d:4c:0a:82:8b:e9:b1:8b:58:28:01:4b:30:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:58:93:C0:98:57:93:25:24:AF:C0:8B:54:AC:29:B2:DF:52:AC
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:19:09:1f:05:5e:c8:0b:c1:3d:42:57:c4:7d:2d:c2:46:f2:
cf:82:84:3d:d5:13:4f:be:9b:e8:20:dc:dd:39:f1:d1:1a:cc:
12:49:6f:32:aa:69:19:83:65:24:1c:38:31:1e:a2:73:fe:9f:
d8:cf:59:e0:f3:06:5f:e3:4e:ac:64:b8:6e:75:8c:70:5c:95:
61:ea:f9:95:dd:2d:a4:26:00:ae:b6:2a:fb:5f:d2:e1:6a:5d:
b7:04:19:cd:5f:da:86:a9:23:b5:24:1f:68:69:22:df:63:36:
a0:0f:2c:26:d6:5d:fe:72:97:fa:64:af:1b:96:e2:f4:dc:cd:
e9:79:34:2e:92:a9:6d:24:0c:18:83:d1:bf:91:3c:aa:0f:92:
91:16:c9:96:fc:1e:ec:03:f4:37:65:16:29:c9:6c:49:44:30:
8e:41:d9:2b:45:33:46:dd:29:13:31:71:15:b1:21:7a:91:f2:
af:94:65:64:58:84:f5:6e:1c:11:3b:6c:80:da:bf:2f:0f:41:
1b:3b:7f:d1:dd:4d:b9:67:9f:9a:6e:b7:70:11:7a:70:a0:26:
4e:a5:68:10:85:2e:6c:96:50:66:03:e9:d7:db:82:e2:8b:5d:
20:1b:dd:fe:ac:e7:92:f3:72:77:a5:3b:49:2a:fe:c9:f5:08:
d5:f6:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:29:25 2025 by rpki-client