Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: yxJsFFKmVPHJRIsvMDSIs0HY6IlQTK56PPl9Ot+MYf8=
Subject key identifier: 86:FF:FB:64:92:F9:8A:20:09:6D:2C:0C:10:0D:AD:04:31:70:8D:B9
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019842BE1CE36C6085EBAC50B678E7544F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0A18
Signing time: Fri 25 Jul 2025 18:00:12 +0000
Manifest this update: Fri 25 Jul 2025 18:00:12 +0000
Manifest next update: Sat 26 Jul 2025 18:00:12 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: 4WOWqH8DsxDI2qnvhCRJSiqrkyUedwtfNjTam2LmZxE=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:1c:e3:6c:60:85:eb:ac:50:b6:78:e7:54:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jul 25 18:00:12 2025 GMT
Not After : Jul 26 18:00:12 2025 GMT
Subject: CN=86fffb6492f98a20096d2c0c100dad0431708db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:dd:c9:29:ac:c0:70:49:dc:82:e3:95:95:
6a:f1:a4:14:49:3a:74:2a:11:22:cc:81:22:b9:df:
a0:c2:12:82:3d:4a:43:19:c7:8e:c3:c0:15:5a:1a:
0c:8c:89:e9:53:1c:02:9d:fe:8a:fa:e2:05:4d:bf:
02:6b:fd:61:68:52:e2:ef:5e:40:80:ec:00:70:f2:
3e:37:7e:09:f4:0f:4e:d4:f5:3f:52:26:93:4a:0c:
d6:62:05:81:bf:6a:23:3a:6a:5a:64:25:ea:f4:16:
be:40:01:00:ab:89:ae:cd:bc:19:a3:2b:b4:e1:db:
1b:a2:40:cb:f5:57:e4:1c:38:05:91:07:12:05:27:
b9:8d:b8:f9:53:f4:66:47:9a:35:eb:f7:4a:fa:50:
73:7d:5a:55:37:e3:fb:d8:f5:e4:f7:98:70:e4:2a:
e8:2c:a1:4e:f9:47:12:c5:0c:52:c0:ff:5a:08:e4:
8d:fa:ec:c6:8b:0f:e6:6e:f2:5d:96:3c:67:be:eb:
b9:4c:c8:ea:c7:06:16:4b:81:53:e7:ea:4e:b5:dc:
14:74:3e:83:f1:3d:72:c8:57:d8:b8:ef:65:e0:54:
4a:5e:ca:2e:7f:f3:ab:5b:4f:11:60:f6:ef:db:87:
1b:8c:8c:6a:f9:58:85:d5:fa:a1:34:0b:e7:f8:0e:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:FB:64:92:F9:8A:20:09:6D:2C:0C:10:0D:AD:04:31:70:8D:B9
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:ac:84:ee:7a:78:12:c3:55:d8:5d:3d:d2:84:15:f3:dd:
ed:cd:c8:05:52:c4:98:6a:cc:94:25:e0:fc:05:0a:5b:cc:b4:
66:2f:f3:e1:db:3e:a5:cf:52:35:ba:4a:60:f2:b4:f4:a5:95:
e2:28:c1:9d:71:66:ef:3e:fc:c5:a2:6a:8f:4a:c2:f2:82:54:
bf:80:84:a8:b4:68:09:38:b0:06:e0:36:b1:56:83:e6:29:0f:
53:f0:d6:58:f2:c0:6e:94:cd:26:ca:43:05:bc:06:f7:02:04:
44:2a:c5:ef:0a:e0:bf:43:35:73:40:50:c7:f0:62:61:19:29:
93:67:19:2c:11:b7:3d:14:48:58:89:c9:03:83:76:fa:52:f5:
c8:61:59:cc:16:e2:74:23:36:78:61:12:a9:56:ac:22:43:ae:
b6:28:ea:ad:57:26:ab:09:61:b6:07:61:e0:ab:3a:ce:57:2f:
00:37:51:0c:0e:c5:30:88:17:dd:3f:35:34:d1:41:d0:8f:00:
b0:4d:5f:3d:63:c0:97:1b:83:2d:ed:00:7b:2d:65:64:1e:aa:
5b:8c:a6:41:6d:df:36:92:2a:e0:9e:78:ff:c0:ec:ae:d3:a6:
1d:49:a9:ff:09:38:ea:50:cb:e0:19:0c:9b:c6:a2:ea:31:b9:
ea:31:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:51 2025 by rpki-client