Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: VhI/ljOHBAQMgS2Tn+2g6+m4tvEJm6sLho3gW8/zpTs=
Subject key identifier: 1A:58:48:1A:8C:E0:94:3A:88:CC:40:68:60:23:AD:60:56:F0:84:97
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 0198481BE24EC3D7691D830C0679ACA4BA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 19:00:43 +0000
Manifest this update: Sat 26 Jul 2025 19:00:43 +0000
Manifest next update: Sun 27 Jul 2025 19:00:43 +0000
Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: a7cGc9W1CdOHrBXGfVsHpet3GWc9MmPDa6nwRTrY+fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:e2:4e:c3:d7:69:1d:83:0c:06:79:ac:a4:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jul 26 19:00:43 2025 GMT
Not After : Jul 27 19:00:43 2025 GMT
Subject: CN=1a58481a8ce0943a88cc40686023ad6056f08497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:19:74:52:5f:0d:69:21:8b:2b:9c:5b:7a:
07:8b:39:2d:41:f7:90:ad:21:7b:3f:31:5f:7e:1d:
fe:54:02:a9:bd:09:81:0b:26:c8:ee:14:76:ce:6d:
99:2a:97:e0:a3:95:cf:95:8a:fa:ea:88:e1:98:a3:
14:3c:93:61:27:ef:44:5a:de:32:94:b2:55:18:26:
b0:73:8c:dd:26:fa:00:05:90:f0:92:d5:26:81:21:
d7:3f:d1:f2:2f:d2:71:3c:4e:00:16:81:c2:6c:92:
40:74:57:95:54:7a:d7:5f:57:63:67:6c:de:a3:a2:
61:f9:e7:d5:48:33:65:dc:91:7a:21:43:c7:55:95:
03:ab:23:13:68:b7:4e:8c:8f:d2:c4:16:fa:13:95:
cd:9e:c1:6e:47:a8:a9:7f:a8:5d:41:16:a5:44:61:
f1:4e:1b:2d:20:46:af:9d:0d:19:9e:86:62:cf:21:
cf:87:0a:e9:41:80:8b:f8:a2:3d:99:f8:25:e0:c0:
0a:0d:9d:e0:ef:13:27:cb:af:36:43:8f:c8:f6:d9:
27:92:b4:07:4f:f2:13:dd:d8:05:07:32:ea:b9:16:
24:ed:f1:90:f6:12:36:20:a8:5f:7a:96:01:a6:99:
33:8a:b3:bd:9f:b2:6e:a2:d4:b3:f2:31:ab:4d:c2:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:48:1A:8C:E0:94:3A:88:CC:40:68:60:23:AD:60:56:F0:84:97
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0c:de:df:fb:f0:10:6c:3c:24:bc:82:67:71:69:aa:70:a1:
f9:0c:27:c2:a1:b3:3e:fd:6c:ea:d1:83:ba:51:05:21:55:44:
d2:b4:4f:ec:0e:eb:fc:5a:e7:fd:fa:45:71:36:a5:77:55:c3:
e4:1d:ab:4a:5c:03:6a:d8:07:1d:0d:13:d8:0c:c7:85:6d:0d:
9e:30:ad:c7:fc:24:92:3f:8d:da:cd:a5:4f:9e:2c:9e:da:e2:
6f:85:52:41:da:f4:ad:7d:fd:87:82:49:68:09:0b:03:76:a9:
c4:3f:8d:13:dc:f4:8e:06:43:44:14:ef:3b:78:31:4e:66:70:
79:1f:51:aa:ff:9d:31:9f:64:30:de:2a:f0:6e:43:d6:f0:09:
f5:c0:22:be:ac:d4:48:d2:f7:49:84:69:1f:c9:38:d2:db:da:
7f:1e:ff:88:9d:48:53:ef:2c:69:17:52:86:c8:bc:95:eb:80:
3b:50:0f:c6:ed:38:7b:31:b0:1d:34:b0:76:bb:00:5a:0a:31:
33:38:e9:49:81:e2:b6:57:a4:1f:84:2d:4e:62:7b:87:b4:0f:
d9:2f:06:67:1d:15:27:07:46:44:37:4a:62:7b:7f:f9:40:72:
8e:c3:49:d0:0f:5b:4b:27:b8:c6:79:70:56:e8:be:70:25:0d:
ff:ce:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:41 2025 by rpki-client