Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: 0RitTXVtYkaPNjt6Q+6ge+fZa5/hiUUNBlEmCj15dqo=
Subject key identifier: 4B:48:F6:9D:A5:58:73:9C:2A:79:CA:89:44:5D:22:27:DC:83:AE:FE
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019845F6AF911E7DB87A86975DD2C1EF5DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 09:00:51 +0000
Manifest this update: Sat 26 Jul 2025 09:00:51 +0000
Manifest next update: Sun 27 Jul 2025 09:00:51 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: /R85/i5Dj39zI5aomqEwVtQgrBrqy59gxoN0UsRlCwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:af:91:1e:7d:b8:7a:86:97:5d:d2:c1:ef:5d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jul 26 09:00:51 2025 GMT
Not After : Jul 27 09:00:51 2025 GMT
Subject: CN=4b48f69da558739c2a79ca89445d2227dc83aefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:f8:1f:02:6a:6b:94:c7:37:ba:15:a8:73:
58:17:49:a0:fc:57:3f:b5:2c:82:ab:0f:b9:f8:3c:
a5:15:e0:34:3b:fe:68:93:d9:11:be:33:08:da:af:
ed:87:52:62:42:4a:dc:11:1a:5b:6c:4a:09:d6:1b:
a3:ee:26:00:79:3b:42:4a:a2:be:2c:65:40:4d:81:
2f:c9:cd:fd:15:e6:8e:73:54:ab:00:f2:6c:7a:9c:
33:d8:b6:46:86:4c:7c:bc:24:c4:0f:a5:23:da:5d:
db:a0:30:46:e0:73:5f:4b:22:6e:12:37:09:fc:7c:
a6:06:3f:fa:46:e4:4d:85:04:c4:c7:85:8f:6c:78:
63:90:81:64:17:26:25:a4:a3:85:08:95:a1:13:bd:
90:55:8d:c2:de:cb:d9:cc:eb:80:a7:e4:c4:7f:d9:
ab:3b:87:d0:12:0f:4f:f0:cc:55:18:ed:e8:33:37:
9e:e5:cb:c3:e4:fa:f3:77:d8:a2:7a:a9:51:df:78:
66:35:08:59:0a:e7:94:df:26:e2:ae:d3:1f:14:9e:
22:b2:e9:d6:9e:47:19:52:c0:b5:70:ad:33:09:7c:
67:45:dc:f7:1b:33:e5:6c:bb:c3:7b:53:7b:80:92:
83:45:ec:20:ab:d3:84:9b:c4:6a:06:d2:c5:ad:38:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:F6:9D:A5:58:73:9C:2A:79:CA:89:44:5D:22:27:DC:83:AE:FE
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5d:cf:6b:65:c0:64:fa:1b:88:6b:85:e7:41:de:77:35:13:
6e:e8:7c:74:ea:a4:a2:d4:d5:3c:c8:a8:59:10:ec:59:cc:e6:
98:ac:df:f2:65:22:7a:15:08:7d:a5:de:3e:44:0e:5a:f9:5b:
90:d4:7e:93:70:25:09:a5:34:84:43:56:9d:ab:c0:18:a9:eb:
c6:bd:56:0a:c7:ca:b2:de:2b:bc:c7:97:24:72:d3:b1:9c:73:
d9:6c:45:da:fa:11:5b:5d:ed:c6:77:f8:c5:94:91:4e:ad:6d:
94:d1:08:15:7c:d4:d8:ba:31:50:e6:6f:52:57:95:b5:08:3a:
65:3c:eb:f0:8b:26:69:ee:51:82:c1:8d:ce:8c:a0:f7:52:59:
7e:04:bf:1c:82:8a:a7:d2:a1:6b:9f:e2:80:bb:d5:db:f9:41:
39:65:07:c6:52:b0:2f:2c:ed:33:d4:05:87:88:af:81:51:3e:
7e:3a:49:dd:b6:06:45:ad:0f:1a:47:42:76:1b:8e:61:c2:1d:
21:7e:af:dc:ad:55:85:f9:b9:a1:ae:d1:fc:92:c5:3d:65:9c:
19:79:d0:d2:31:d8:12:1f:f3:f5:16:1f:ce:67:44:6f:c9:9b:
2b:79:88:f4:ee:99:1c:e7:b7:e9:4c:60:8e:df:91:86:64:5e:
80:49:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:27 2025 by rpki-client