Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: fVmuNOonveMiaNrcOZ7hBaIAd1Y3YQD6a7k3XM3GXSM=
Subject key identifier: 7B:BD:09:E1:3A:12:55:45:1C:02:72:8F:C5:EF:3A:DC:9C:58:F2:8F
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 0198440845FE1000320D2959746CB50B65DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0E85
Signing time: Sat 26 Jul 2025 00:00:49 +0000
Manifest this update: Sat 26 Jul 2025 00:00:49 +0000
Manifest next update: Sun 27 Jul 2025 00:00:49 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: RotjTGn/MvobOC1R/07xXVpL0OnBwkP7cYQvBStCnXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:45:fe:10:00:32:0d:29:59:74:6c:b5:0b:65:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jul 26 00:00:49 2025 GMT
Not After : Jul 27 00:00:49 2025 GMT
Subject: CN=7bbd09e13a1255451c02728fc5ef3adc9c58f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:df:a9:9c:23:b7:b2:d1:32:8e:45:b9:0a:
70:1a:f5:c5:63:fa:d3:bb:7a:9c:bd:c6:d9:05:4a:
5f:64:25:d9:7c:c8:43:15:94:12:3b:bc:a4:8e:00:
70:6b:db:85:c7:48:7b:b2:72:3c:a9:cd:0e:d9:cd:
88:86:57:13:db:bc:52:0e:36:7a:22:56:1c:a6:df:
00:34:85:71:2e:c2:09:3c:04:6a:f8:53:e0:11:69:
d4:ba:fb:85:26:ed:af:81:39:e7:f1:fc:6e:0d:ce:
68:78:ff:b4:d3:a3:04:d4:8c:8b:6e:14:fd:05:11:
ca:6f:fb:76:8f:a5:ad:f0:68:6d:2d:eb:58:ed:2a:
ed:d2:f3:f7:80:c7:ce:97:1d:90:e9:69:6e:de:2c:
95:24:60:76:0c:98:54:1d:ab:d6:ef:e2:97:4c:bd:
75:9b:81:10:c7:83:24:6f:8d:7b:3c:3c:cb:b8:29:
ca:c0:f8:b6:cc:99:75:2d:bf:5a:83:93:c4:37:f2:
7a:4d:bd:0b:20:3f:89:6d:a0:d9:49:98:e3:5a:d4:
9d:2e:36:1b:ce:00:95:77:51:cf:54:2b:01:9e:d2:
fa:b3:ee:0e:26:3a:e3:d3:27:67:86:04:b3:23:b4:
ab:a9:1c:c2:08:de:e2:a9:8b:40:82:fa:86:33:b3:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:09:E1:3A:12:55:45:1C:02:72:8F:C5:EF:3A:DC:9C:58:F2:8F
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:f3:34:59:5d:80:d2:07:05:12:85:17:1d:ea:61:dc:6c:
24:a5:4e:13:e0:a0:60:f9:4b:e0:5c:71:75:57:0c:12:f4:ec:
53:03:7e:6c:e3:6b:b8:fd:bd:c0:a6:2f:b9:53:cc:ec:df:62:
de:3b:40:7a:cd:ec:7c:92:18:79:66:ff:01:30:3e:14:31:2b:
67:34:e5:bd:ff:21:4a:f0:08:b1:57:e6:79:3c:ed:9b:bb:44:
ff:a7:08:49:92:4d:1a:be:08:df:73:62:89:0f:d3:8c:54:97:
a3:ee:d8:21:d1:2c:05:e5:3c:38:4c:37:23:f4:91:be:49:ea:
8b:a4:82:15:4c:5d:ee:73:60:30:a6:8f:35:42:05:25:44:5c:
d7:67:97:6e:e7:cf:d0:0a:27:36:9f:cf:9c:87:9a:ee:aa:5c:
e2:de:6b:0f:96:74:16:85:7e:4a:fe:79:81:ba:0c:03:a8:f2:
72:19:b5:16:bd:1c:91:a0:78:fd:6e:07:62:f4:c6:d7:26:60:
8a:5b:97:b8:bc:30:f9:25:e1:25:48:4b:6f:18:ef:c0:93:2d:
59:3d:e8:ff:1e:69:8a:a6:31:a5:12:b0:c4:6b:e1:b6:0e:71:
66:fc:8a:ba:9d:26:a3:68:f9:d7:fa:6b:b1:2a:34:f7:91:13:
bd:72:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:43:26 2025 by rpki-client