Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: gAe0oeYymGTFGVM80c2hk7WJFgZ+01jqNKfmQapaq5g=
Subject key identifier: 8A:6E:10:A6:4A:85:CA:AD:55:63:92:A4:29:95:EE:7F:96:2A:01:D7
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019853E945DAC532D41D8495EDA35B22768B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 02:00:53 +0000
Manifest this update: Tue 29 Jul 2025 02:00:53 +0000
Manifest next update: Wed 30 Jul 2025 02:00:53 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: YN1XM9dGACQ4NPlr46LtbuBi2Tro9VCw33BzKXxd6ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:45:da:c5:32:d4:1d:84:95:ed:a3:5b:22:76:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jul 29 02:00:53 2025 GMT
Not After : Jul 30 02:00:53 2025 GMT
Subject: CN=8a6e10a64a85caad556392a42995ee7f962a01d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:3c:b2:23:2b:f1:49:59:d3:41:ed:0e:14:
59:23:bf:d0:74:89:6b:89:ad:76:7f:02:76:85:ed:
09:44:97:2b:b2:3a:29:7c:4a:96:56:0f:a0:fe:60:
d7:45:e3:9f:3a:9e:4d:2c:96:08:97:84:11:1d:ab:
23:4c:83:1c:01:34:1a:a7:cd:4d:b2:d0:ee:55:38:
05:5e:d3:ed:93:e3:09:6b:09:d2:ca:88:39:1b:04:
2c:5f:8e:84:74:38:cc:ec:bb:33:74:d9:30:3a:db:
57:3b:9f:b9:e3:d8:86:c6:0d:4c:a0:da:91:f5:10:
47:42:f4:19:4e:41:58:8c:93:6e:05:0d:6d:8e:86:
f6:3a:7d:d1:c1:b3:0f:f2:83:5c:86:47:7e:7d:31:
bc:fc:bb:a5:93:86:87:55:9b:36:44:9b:a6:d7:86:
5e:61:16:21:87:77:3d:1f:bf:4d:70:7d:01:6c:24:
50:c9:13:bf:13:ec:dd:b4:01:82:01:1c:47:7e:d1:
62:6e:43:c3:b9:67:07:51:3a:54:9d:be:ce:44:95:
44:df:e2:22:d4:2a:97:5b:a9:42:c9:bf:11:42:a3:
06:28:81:18:bc:2d:46:ee:28:c8:d7:96:2f:4a:d1:
54:2e:48:0a:01:d1:de:0b:62:53:c6:e6:0f:67:9f:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:10:A6:4A:85:CA:AD:55:63:92:A4:29:95:EE:7F:96:2A:01:D7
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6d:e7:8d:c5:ae:80:b1:d2:51:09:d7:bc:47:3d:14:0f:c5:
7c:61:ee:12:76:17:a2:ba:92:4f:1e:81:c2:a7:53:d3:b8:fc:
1b:c6:03:7f:c8:f8:08:22:97:1b:e7:24:17:1f:11:98:06:ba:
39:17:17:f0:71:7c:50:45:64:ad:5b:2b:15:44:92:fe:67:c8:
d9:98:7f:a3:c4:c2:32:9c:ee:00:99:81:08:24:b2:e9:26:99:
d2:0c:a4:ed:c5:45:a3:7e:d0:5f:65:55:9b:22:d7:8d:94:16:
fa:51:93:c8:b5:52:40:1a:a5:9a:fa:7e:07:bc:29:07:d3:11:
2a:03:03:d3:04:94:47:dd:5d:ea:75:d1:11:d1:3c:06:68:b8:
96:27:71:6f:56:ea:89:2d:11:2a:cc:69:89:14:e5:27:10:31:
fa:18:89:d1:36:ec:b5:5a:0c:12:8a:ea:c0:54:a5:81:de:dc:
bf:2c:c1:e7:a3:d6:d7:f5:7f:62:5a:95:d1:30:94:7b:83:cf:
ea:67:e7:82:00:7c:52:7a:ef:bc:ef:df:ed:3e:8c:08:1a:0e:
74:0c:dc:df:e7:95:e4:22:7f:be:b3:e6:63:2b:83:f9:5e:bf:
37:1b:d5:e7:68:13:47:47:c7:8a:ed:2d:c8:e9:1b:d7:65:c2:
56:d3:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:20:39 2025 by rpki-client