Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: p98pEIXIRgnATgKRGQvn5u3N7fLOcSjcZTpZupSarmE=
Subject key identifier: BC:FB:74:24:43:92:DB:9B:06:FC:D3:B8:34:55:4B:85:97:37:FB:BC
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019858D9D45A9EC41EA0D5AF01BE5D1E15F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 04FD
Signing time: Wed 30 Jul 2025 01:02:07 +0000
Manifest this update: Wed 30 Jul 2025 01:02:07 +0000
Manifest next update: Thu 31 Jul 2025 01:02:07 +0000
Files and hashes: 1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: iobaRRnmpNrUahyCYEvz7b6wEdNwBSdoqHz8LO8P2E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:d4:5a:9e:c4:1e:a0:d5:af:01:be:5d:1e:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jul 30 01:02:07 2025 GMT
Not After : Jul 31 01:02:07 2025 GMT
Subject: CN=bcfb74244392db9b06fcd3b834554b859737fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:fc:be:34:ea:ca:e8:63:04:11:05:02:80:
95:5a:a6:8f:8c:c1:fe:2d:ca:4a:20:32:5f:89:2f:
32:8f:8a:6b:27:35:c5:f1:b4:25:0f:15:71:30:41:
5e:eb:df:13:43:31:42:87:14:76:52:3c:e9:29:8d:
d1:0f:92:2e:15:0e:46:ca:71:f0:b6:c1:1a:0f:12:
11:70:6f:67:b6:9b:50:9e:ca:d7:b0:71:4f:ad:f7:
6e:71:40:9f:40:f0:be:c6:3d:67:2c:31:4c:b2:5c:
75:3a:40:42:7c:12:57:3b:cb:6b:46:78:f5:fd:f6:
00:3f:60:17:37:4f:04:b1:b6:92:f8:6f:5a:d5:27:
da:09:34:a1:24:39:e7:22:f6:ca:cd:6d:71:1e:a3:
fa:2b:5a:c7:a2:02:06:d5:a8:68:6d:10:a8:c7:ce:
21:06:52:40:ce:87:ad:16:ba:47:a3:a2:d9:39:ff:
0e:a7:4b:c5:00:20:db:6b:24:f4:b1:86:3a:4c:d1:
b7:e4:ac:af:6b:a8:75:4d:f4:50:0d:5f:a7:ed:d9:
e9:fc:c7:af:5d:55:4c:8a:f0:ed:ca:83:95:57:10:
74:58:7a:c8:ab:50:6e:ac:61:f7:5e:0e:bb:92:52:
55:1c:90:50:a8:01:13:c6:b5:85:d3:bf:6f:4b:c5:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:74:24:43:92:DB:9B:06:FC:D3:B8:34:55:4B:85:97:37:FB:BC
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9c:3a:f9:d9:19:bc:8d:08:c7:59:b0:bf:48:ec:61:2d:84:
64:ab:74:fd:06:ea:dd:ce:70:f4:2a:96:ba:45:ab:4d:05:82:
73:87:ec:1b:0b:4d:7f:36:4a:a4:47:21:e9:e4:0f:6a:38:53:
f1:51:ae:bf:89:bd:09:32:76:56:91:39:72:94:56:9a:43:cb:
f5:45:53:b0:ef:66:d0:06:99:11:9a:89:ef:4d:b9:b9:e2:47:
ca:ed:34:f1:57:13:26:48:78:95:f2:8e:e9:41:e6:db:bf:c2:
5c:f8:34:e5:fe:bd:a4:a5:6b:ad:49:ff:d8:6e:be:9d:5d:61:
aa:a3:bb:3d:37:41:54:65:60:34:f0:4e:32:0a:64:72:fe:8f:
ef:5e:dd:24:f5:a6:41:f1:22:83:a8:07:8e:4d:49:ff:c1:51:
5a:06:ec:8f:81:ad:17:69:10:f8:db:a1:f5:8a:4a:05:d6:4c:
ed:63:b9:9e:32:bb:1f:4a:34:f2:2c:51:c1:ef:c7:e8:a3:1d:
56:f7:aa:95:69:ce:87:11:c1:c9:e0:35:73:ca:e3:be:cc:9e:
ce:2a:40:8b:f8:f1:5e:f0:cf:65:b7:7b:22:d9:b3:6e:cc:4d:
63:b2:a3:87:84:d5:fa:2c:e9:86:42:08:c4:2d:0f:17:3f:12:
19:9f:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:24:41 2025 by rpki-client