Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: dxCld/kXsMh3BWOF8jFxkqwp8keEii/anUXM+IOD0j0=
Subject key identifier: 50:06:FD:70:E0:17:AA:1E:2F:A7:36:14:3E:30:82:BD:66:DB:B4:50
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 01984A78372E6AF5B3AEF924FE5ABFAC7C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 0784
Signing time: Sun 27 Jul 2025 06:00:49 +0000
Manifest this update: Sun 27 Jul 2025 06:00:49 +0000
Manifest next update: Mon 28 Jul 2025 06:00:49 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: HZEFHRzSb22oY7YFRwovhw/2+Vqu25r+9sB1FT8GXRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:37:2e:6a:f5:b3:ae:f9:24:fe:5a:bf:ac:7c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Jul 27 06:00:49 2025 GMT
Not After : Jul 28 06:00:49 2025 GMT
Subject: CN=5006fd70e017aa1e2fa736143e3082bd66dbb450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:a5:66:da:e8:63:36:41:61:60:4e:8a:64:
97:99:b6:f1:3c:7d:1c:b0:13:28:9c:c9:80:81:99:
66:7a:08:8d:b4:1a:55:eb:f9:fc:5f:95:05:9e:30:
04:a5:2c:e3:f4:dd:f1:17:a7:b0:b6:0a:0c:5c:c7:
c2:94:f4:7e:aa:e2:f2:d6:17:90:22:aa:88:36:ae:
55:df:2b:96:1c:54:20:11:ed:17:b4:3e:fb:3a:31:
f6:31:d4:0b:da:67:14:a2:dc:97:ed:08:0a:95:04:
8e:1d:66:df:14:4a:64:5f:4d:9b:cd:40:a2:95:67:
bd:2e:e1:81:75:98:2d:ed:d5:9d:91:f3:ff:24:99:
72:1c:c4:fe:41:93:0e:6a:2b:9a:e5:0b:f0:49:09:
c9:8c:f2:f8:c0:bd:26:ec:46:62:67:e6:2a:6b:d8:
88:c1:62:cb:20:d1:a2:94:5f:17:dd:2e:71:93:2d:
24:7c:38:19:57:f2:14:c9:97:3c:8e:26:39:14:d0:
d5:47:31:53:05:0a:30:81:0d:bb:7a:15:a8:8f:2f:
f9:57:39:45:88:05:46:df:fa:2c:2d:4c:26:a1:3e:
87:07:9c:7e:6e:7b:c0:77:e3:40:f5:17:b9:70:d0:
27:09:a8:61:5e:35:53:c4:2d:9a:ef:a4:0e:3c:6a:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:FD:70:E0:17:AA:1E:2F:A7:36:14:3E:30:82:BD:66:DB:B4:50
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7f:46:cf:98:67:33:5e:0b:5d:a0:ed:ab:ac:53:34:cb:76:
a9:30:1a:88:2c:10:26:2d:84:5c:38:6a:fb:62:46:55:60:96:
06:aa:17:da:02:58:65:c2:60:20:27:3c:09:d7:a2:f4:aa:58:
c4:f8:ef:67:60:fe:5f:bd:19:f1:95:7e:06:54:38:e4:03:d2:
60:57:c4:6f:b7:30:cc:da:d0:17:17:70:d9:37:0e:15:63:74:
5b:9d:48:fa:85:80:7b:e7:10:01:9b:18:e2:f3:d2:71:92:74:
d7:2c:1e:99:12:0d:fd:0f:3c:78:80:13:89:ff:64:ca:b4:8b:
60:b1:f0:0e:eb:d6:38:04:d4:51:cc:a2:93:c7:e4:bc:1c:f4:
26:c9:03:8f:59:c1:3c:0e:b9:f0:f0:c4:65:40:dd:7b:87:e0:
bc:07:d9:e3:13:ec:a7:b6:40:a6:11:ab:c1:29:cb:ef:60:96:
eb:31:ea:e5:30:9b:93:80:4a:58:74:c2:69:66:0b:08:9d:3b:
33:48:ea:fc:3b:5a:db:11:55:78:10:a2:27:aa:f0:9e:67:57:
47:58:79:db:15:cc:b1:e1:02:3b:27:b4:ff:e5:d4:51:bc:8e:
35:ac:83:2e:20:9d:4a:36:19:40:44:e1:64:2b:97:73:c7:0a:
2d:91:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:16 2025 by rpki-client