Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: +OFJ11X7KiBH0UOzNFbui2LkFAMsGCWnWqoVjS0Dls8=
Subject key identifier: 48:6E:09:C1:ED:44:C8:F0:69:2F:F2:E0:82:5B:70:5C:B7:01:5D:7B
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 0198477682763576FBF8253A32E772338394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 13E8
Signing time: Sat 26 Jul 2025 16:00:05 +0000
Manifest this update: Sat 26 Jul 2025 16:00:05 +0000
Manifest next update: Sun 27 Jul 2025 16:00:05 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: ZGl5w1StaA285c/JNIx2KVlOxTK99gN4gkEZZokC+to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:82:76:35:76:fb:f8:25:3a:32:e7:72:33:83:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jul 26 16:00:05 2025 GMT
Not After : Jul 27 16:00:05 2025 GMT
Subject: CN=486e09c1ed44c8f0692ff2e0825b705cb7015d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:73:8f:06:84:7e:70:9a:14:8e:8c:fe:2b:
82:f3:50:c9:92:be:58:40:3b:ec:ce:c0:aa:48:48:
d9:ef:0c:19:46:99:a0:57:a8:15:3b:35:7e:66:84:
44:96:32:1f:5b:75:fd:e5:ec:9d:4c:98:a0:0e:27:
6e:77:51:cc:67:01:97:b1:2a:17:5d:7f:ba:2f:64:
2d:a5:c1:ac:77:9e:f5:2f:33:3c:c3:e4:21:27:e6:
1a:63:d7:6d:f2:5b:a0:d7:35:9e:34:f9:a1:61:3c:
f9:46:a3:d3:64:bd:c9:0c:55:2d:c9:68:81:9e:9e:
73:c4:21:20:5c:8a:60:bb:aa:96:48:04:69:2d:09:
5c:74:9a:51:d2:e3:db:d5:af:4c:86:59:b5:57:6c:
d0:55:6b:78:c4:41:5f:97:81:bc:c3:75:a3:ce:b4:
7e:49:1b:58:17:77:05:3a:5d:86:68:50:8d:37:bb:
3e:f9:11:62:a5:4c:25:d1:a9:8c:86:e5:ca:63:85:
86:4c:68:9a:bc:8b:03:a6:cf:9d:f5:3c:c9:51:31:
0f:43:04:85:1b:2c:30:d0:dc:ac:c9:29:8b:c7:1e:
ca:fe:91:2a:84:56:d0:bd:c5:02:ee:03:1a:b7:89:
18:98:2b:a4:5e:82:fc:bc:0b:de:cc:2b:70:fe:db:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6E:09:C1:ED:44:C8:F0:69:2F:F2:E0:82:5B:70:5C:B7:01:5D:7B
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:78:58:2c:a1:4f:23:38:58:12:25:0f:30:7c:17:cd:e5:fc:
af:47:a8:bf:ad:66:0c:2d:a0:09:55:a8:57:d5:b3:92:09:bd:
34:cd:e2:5d:92:60:0c:04:99:01:59:ae:77:5b:dc:a9:56:3c:
0b:60:21:d5:e5:f2:31:1e:1f:e8:ad:2f:f7:a4:40:33:b2:fe:
43:e0:d1:14:32:d3:fa:bb:e9:45:16:cf:e6:c4:1c:b9:1a:b7:
b4:9a:f8:e8:b6:07:59:0e:67:09:07:34:3f:4c:33:15:b0:6c:
a7:09:11:a8:33:96:c2:0a:4e:2e:4a:00:85:c5:70:b1:70:17:
6c:09:c5:04:6e:0b:d7:4a:69:71:56:e8:c7:4a:2f:67:42:34:
30:6c:23:30:95:02:1b:0e:7d:3c:b8:ef:aa:05:85:1a:c8:2a:
1e:3e:70:37:ca:71:fc:a9:b2:d3:f5:98:e0:c6:ef:f7:71:3e:
f4:db:8d:ca:be:09:bb:d7:f9:70:64:00:72:ef:4e:ef:29:c8:
04:0f:e1:87:c6:3a:d4:57:b3:25:68:d8:df:a4:2c:cb:8b:d3:
42:6b:6c:ce:49:18:25:b1:22:30:ba:57:bf:0b:4f:f9:e5:ff:
fd:53:02:42:81:33:5e:69:56:62:f7:11:92:08:4c:6c:22:fd:
fd:44:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:50:24 2025 by rpki-client