Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: Bbl41T89+kx7wc9MdLe8tcqgvsSXNQGdtD3a4iwzT+M=
Subject key identifier: 25:13:22:0A:90:20:D4:23:80:1C:15:72:AB:EC:F1:82:84:9F:5C:E8
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01985AC7FF828E2E6E7E17AE0C7EAB87BAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 156C
Signing time: Wed 30 Jul 2025 10:01:53 +0000
Manifest this update: Wed 30 Jul 2025 10:01:53 +0000
Manifest next update: Thu 31 Jul 2025 10:01:53 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: TgAff3PkUHtY9LCRztWhF+7irwPNzmLbBq+G5lw3wig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c7:ff:82:8e:2e:6e:7e:17:ae:0c:7e:ab:87:ba:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jul 30 10:01:53 2025 GMT
Not After : Jul 31 10:01:53 2025 GMT
Subject: CN=2513220a9020d423801c1572abecf182849f5ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:cf:cd:42:39:d8:40:d4:4a:43:bc:3e:76:
71:1d:40:32:b2:e2:cc:77:1f:8e:4b:70:53:53:d2:
89:74:34:05:76:fb:a9:3b:0b:37:56:c8:e9:85:cc:
58:6e:cb:bf:c2:95:81:21:19:96:42:e6:62:64:ba:
54:a1:05:00:b7:db:88:90:60:74:df:0f:b2:5a:45:
d2:51:79:b3:2a:40:d1:81:18:df:e6:e0:32:79:c8:
08:d4:30:d4:10:0d:90:ff:91:20:7f:3e:8c:85:11:
3b:cb:89:a6:06:f5:d4:38:38:ba:9a:06:fa:20:13:
e7:29:21:40:0c:bf:4e:ce:93:fa:c6:4a:e6:a6:fd:
ba:9e:de:5e:1e:63:a8:93:65:89:2d:b7:eb:4e:97:
f2:b6:d2:dd:9a:97:91:c2:00:74:73:41:9b:36:7d:
57:5e:1e:aa:64:fd:04:84:21:0a:d5:dd:38:67:4e:
89:2b:a8:a8:da:16:64:7e:36:d1:b2:9e:2f:50:fe:
e7:92:9c:a1:2e:60:05:ba:b2:42:de:dd:5b:59:dc:
35:17:44:41:2f:0c:e4:95:50:31:2c:fb:25:93:8a:
df:37:a5:6a:5a:2e:9e:5c:2d:06:1d:4c:1c:e4:5f:
53:cb:62:76:8e:5d:44:f8:31:d0:38:68:fe:0a:50:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:22:0A:90:20:D4:23:80:1C:15:72:AB:EC:F1:82:84:9F:5C:E8
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d8:70:73:fa:c4:fe:a8:7a:9b:24:f6:79:b4:81:8a:51:82:
70:21:98:be:3b:22:4f:fb:f4:51:fb:3a:0b:85:8b:7a:c6:f2:
95:6c:dd:17:61:96:c8:6b:01:88:4b:b2:b7:e6:67:de:8d:75:
dc:51:b5:3d:7a:0e:7a:df:5f:02:d7:80:1a:bc:7a:84:32:8a:
97:2a:d3:ed:a6:e5:c8:48:0b:4f:85:34:6f:b7:1c:ff:f4:12:
ff:38:14:11:a8:cf:44:7f:fb:5e:18:78:9c:96:27:b3:76:e0:
d7:80:ac:d8:1c:1d:90:53:01:d9:49:ed:b1:eb:4e:29:4c:47:
e5:5d:cc:8b:ef:f6:d4:db:b2:48:bb:29:5e:1a:e0:36:66:ec:
66:b7:59:28:cf:c0:f0:4e:07:59:e8:83:05:b0:cd:a9:a1:83:
16:37:cc:e7:86:c3:c4:9d:e7:c1:36:c8:e2:cf:f5:56:e0:f4:
8c:62:5c:43:f2:db:6b:ca:fb:be:97:61:8c:47:fd:93:b5:6c:
a0:86:2c:b5:75:ed:f9:ac:d8:49:88:12:f6:6b:f6:48:a9:2b:
7d:05:3d:30:3b:32:c2:5c:ca:49:c9:4e:e6:49:d7:0b:dc:b9:
18:0e:7f:10:46:13:f5:41:b2:8f:3b:ca:2b:b1:ff:74:cc:a9:
c2:f6:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 17:41:13 2025 by rpki-client