Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: fLyniTGBsG6kHCkpryaXBd/ZY/OAazP+DqXLhh1dGoU=
Subject key identifier: 60:2C:93:B8:C2:C3:10:23:DD:77:14:4A:AA:8A:CD:D1:87:AD:2C:39
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0198398425392E79B4A40325521B06E0A7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0FF2
Signing time: Wed 23 Jul 2025 23:00:18 +0000
Manifest this update: Wed 23 Jul 2025 23:00:18 +0000
Manifest next update: Thu 24 Jul 2025 23:00:18 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: 4NF7PpNVk66MlvyY0zGoDcHH2Kk.roa (hash: 8Vg9dh+uXOybsMuFGjmwNAy8CHuz+OH+R5XVReLuBQc=)
3: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
4: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
5: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
6: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: RwGppMoul6lqD6DqgPPqtcjtSfCs3+3mSsMn/RvPS7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:84:25:39:2e:79:b4:a4:03:25:52:1b:06:e0:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jul 23 23:00:18 2025 GMT
Not After : Jul 24 23:00:18 2025 GMT
Subject: CN=602c93b8c2c31023dd77144aaa8acdd187ad2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:b6:c1:cd:0f:76:96:ae:55:cc:c3:68:d1:
fb:47:10:c4:30:41:a6:7e:28:86:08:d3:b8:4d:d6:
c9:47:ff:eb:19:97:73:37:49:d7:d1:5a:cc:d3:ae:
65:b4:0e:d9:eb:ee:da:a7:7b:4b:37:0d:16:12:7b:
48:59:84:fe:1a:ee:ac:11:7b:00:35:f5:9e:95:0b:
63:00:50:be:a8:57:c4:1d:ec:87:2a:fa:75:ec:57:
80:80:3c:6f:91:64:7c:d7:83:c7:c5:a0:cc:66:32:
79:a4:5b:a9:24:e4:a2:9b:b7:1f:2a:fc:5d:47:9c:
ac:86:a9:3e:bd:2d:ba:61:dc:d1:d3:85:17:45:3b:
bf:0f:fe:80:ae:db:01:4b:2a:27:84:d4:bc:bb:9e:
d2:d5:fb:fc:88:1d:9d:3d:24:4e:81:a7:27:c6:9a:
db:4c:92:6a:0d:3a:74:28:95:49:35:17:86:c3:ec:
8b:48:74:3a:ff:b9:9d:b2:b2:be:bf:92:56:3c:b6:
62:5c:ef:09:e3:bb:23:1b:2c:76:5f:92:4c:08:9f:
e7:a3:05:5b:01:8d:57:cf:29:af:98:7c:64:ca:8c:
95:fe:8a:46:6b:96:d6:30:13:35:a5:be:93:03:9c:
29:4f:53:4f:14:58:2e:0d:61:25:e3:92:58:45:7a:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:93:B8:C2:C3:10:23:DD:77:14:4A:AA:8A:CD:D1:87:AD:2C:39
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:76:eb:77:d8:4d:1e:94:6a:ed:92:26:61:0d:05:c7:2f:48:
09:5d:d8:df:8c:89:63:31:e1:ae:c2:61:fb:5a:53:c2:d0:54:
3c:c1:f0:05:54:dc:1d:e8:ca:41:66:22:51:4c:10:c2:ff:2d:
89:4a:b8:ef:a8:f3:55:ca:74:7c:f8:19:6d:46:67:51:26:d2:
74:01:68:ff:9a:82:a9:58:b2:f2:79:53:8e:2c:3e:4b:7d:96:
0f:b6:d6:9d:00:f3:a5:c7:88:99:4b:c9:41:f2:d2:e0:52:ea:
c6:55:68:52:9b:47:d6:be:fd:12:a7:aa:f4:a4:6f:e2:bc:6e:
15:5c:0f:83:82:8d:ff:28:cd:7a:ff:41:bc:62:e3:33:b4:c0:
5d:31:b9:88:15:8f:8c:8c:55:d7:8d:be:f0:38:6d:e9:cb:21:
a5:b3:b0:9f:0c:ef:18:7a:91:d3:07:e7:c9:a5:d3:27:a8:93:
91:81:9a:c8:b7:d3:9e:71:19:77:7f:ac:81:da:3b:2e:3f:e6:
20:46:2a:5c:b4:2a:79:98:7e:11:1a:d9:a1:42:79:d0:dc:4b:
c6:9c:b0:98:b1:c9:83:bf:b1:23:ec:e4:02:e8:32:ad:f7:ff:
7f:9f:8b:b1:bc:4e:ab:b8:ab:12:14:41:76:ed:a6:c2:1d:30:
bb:24:db:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:01:32 2025 by rpki-client