Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: jlclhfq0iE98gZvzl0HB945JdUZbJl17ZbiZWRLaglI=
Subject key identifier: 43:35:1D:B2:2C:49:BA:7A:B7:EC:82:18:96:57:6F:82:DE:72:BB:8E
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01984AAF2624D900452F5C9E2FB028810331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: V1dxs9JhyjDMxU7zwFABoBAdx60.roa (hash: jK0rBU9juj3Cm9p+z0cyDJb76/ejVGKYQgHCoAgwZ5Q=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: 41tmjrh7GB32UrnWd6o8PK19e0AtSe8jNe6bGA2T1og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:26:24:d9:00:45:2f:5c:9e:2f:b0:28:81:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=43351db22c49ba7ab7ec821896576f82de72bb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:68:e8:0b:99:8a:16:95:33:a5:73:49:f2:69:
ea:b7:b0:57:d0:cf:38:59:df:c1:a5:11:0e:f4:c4:
b3:c7:81:77:7a:67:e3:84:e2:30:90:48:85:5a:91:
50:9d:19:2a:f1:85:c9:35:a8:68:20:87:09:2e:c0:
1d:05:37:f0:a9:7f:d4:04:18:47:c7:d9:43:4c:c8:
dc:98:5e:12:06:22:6c:91:33:44:94:f5:ac:a0:4f:
a0:01:4f:ef:4b:bf:2d:88:fa:f2:ab:93:dd:62:0a:
ea:62:3a:76:dc:a2:f6:f5:e6:eb:5a:29:d2:e1:8f:
50:cf:e2:68:a0:b2:f7:57:ff:9e:d1:27:93:eb:1f:
29:73:47:43:b8:e0:2d:9b:de:1b:1b:2a:44:20:77:
a4:75:4b:c4:6b:1a:be:70:c7:e5:0c:2c:59:b3:b0:
e4:4e:db:58:f0:d7:25:e8:41:14:82:89:6d:b3:61:
74:47:b3:5f:21:77:51:c5:cf:e2:d1:45:48:cd:18:
7c:44:0a:f3:cf:af:12:01:af:e0:dd:7b:00:69:b4:
e3:05:e7:5a:81:f6:98:06:67:5e:12:02:cf:96:e3:
62:24:ff:12:85:cb:f2:09:5b:b2:f0:b4:17:4a:97:
d8:37:36:0a:46:7d:21:fb:71:98:5c:b1:29:1c:72:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:1D:B2:2C:49:BA:7A:B7:EC:82:18:96:57:6F:82:DE:72:BB:8E
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a0:c4:7e:b9:40:f2:ba:2c:84:ba:e7:4a:a7:a5:31:41:f8:
0f:f6:0f:91:03:f5:83:4a:11:43:4b:42:a1:63:bd:14:ef:14:
3e:7b:9b:05:8a:f9:c4:04:43:3f:2f:65:e6:c4:85:82:7f:44:
69:0c:52:e8:fe:57:33:a6:d7:29:33:e4:1a:19:6f:e2:aa:9b:
1b:5b:9d:1b:7b:2e:e0:ac:d8:c6:1b:ef:c7:d6:9d:5f:c1:32:
e4:8e:b6:6a:ea:31:93:17:66:a1:39:8a:89:90:41:4c:45:e8:
df:1a:de:82:46:59:6d:c1:f4:11:55:d6:47:ee:77:96:fb:ed:
a1:52:19:e0:df:93:67:94:19:c5:86:2e:c5:86:3d:b4:93:40:
9b:0e:da:34:c8:d2:cc:21:f4:8c:d1:03:c9:72:c8:f9:b7:66:
65:2f:dc:44:26:e4:1f:0a:49:14:d4:52:cc:f9:c6:ca:ce:6c:
e1:3e:98:49:41:e8:59:01:5d:73:f0:6e:25:39:63:61:0c:79:
88:4e:6d:fc:5a:a6:24:8a:de:ab:d3:78:88:ee:b8:ff:63:5f:
a9:74:48:5d:65:ec:f9:73:fb:ec:e4:a0:e2:5b:f8:ab:d8:55:
12:86:2d:a8:29:ed:e3:3f:0b:f1:4a:3b:85:d3:1e:96:6b:40:
b7:b5:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:07 2025 by rpki-client