Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: 13uzNlv3IKTwdHMVamtiegGynH9JnTa1pVy9h+d8HjI=
Subject key identifier: 69:37:E9:73:2A:40:8D:C7:63:5F:75:D3:4B:E6:93:CE:B0:5F:85:E6
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0198334B9FE946421CA3428212F4338898CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0FEC
Signing time: Tue 22 Jul 2025 18:00:50 +0000
Manifest this update: Tue 22 Jul 2025 18:00:50 +0000
Manifest next update: Wed 23 Jul 2025 18:00:50 +0000
Files and hashes: 1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
2: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
3: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
4: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
5: e1dYIBjODaUlKHlIgmbJdwXEEBE.roa (hash: uXPmG9FCqpPIYRUJa1njjPocqVyFijF7wSZDUoDhnRU=)
6: gDrJ_yW-_CzbWfpTMme-odFmJlw.roa (hash: gy5Z4mzDyCMzzZeJUBNPlOeBnObygQh/RNlUGtI+BkA=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: DCV1uoJxtLvsE5MuHP5uPLa8VPVXbtHhkldmEXgApOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:4b:9f:e9:46:42:1c:a3:42:82:12:f4:33:88:98:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jul 22 18:00:50 2025 GMT
Not After : Jul 23 18:00:50 2025 GMT
Subject: CN=6937e9732a408dc7635f75d34be693ceb05f85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:2d:2f:2c:7e:4e:9e:b1:e7:fa:c4:c3:97:
10:50:0f:db:46:65:00:33:63:1f:bf:5a:cb:b6:1c:
a2:57:39:96:77:2b:ef:31:21:78:5d:55:1f:4a:77:
40:69:21:8d:52:52:59:4c:f1:c6:f0:bc:03:36:1c:
f2:a0:23:fd:d3:d9:a2:36:c4:45:e1:c4:2d:1b:0c:
86:31:6c:cc:55:b3:26:fe:fb:bf:2e:de:d0:e4:c6:
2a:32:c4:5f:97:5c:66:6f:8f:82:ec:03:64:fb:db:
26:b3:f7:89:da:52:b7:03:fa:f8:98:5b:6e:60:6d:
58:6f:22:05:22:f1:6c:6d:16:c5:89:ab:e8:37:f2:
a4:fa:22:d4:a3:42:68:f1:26:b2:eb:cc:fc:d6:cd:
6b:cc:a9:6b:e0:6f:17:a7:6b:4e:93:4c:b3:1e:92:
7a:b4:e3:ff:1e:ed:f4:33:f1:40:7e:b9:b8:52:8d:
65:68:d4:1a:71:e7:03:a3:8a:79:12:d9:36:52:1f:
29:87:d5:1b:18:0d:7b:36:d6:c9:8e:71:b5:aa:21:
5e:9a:92:dc:46:1d:cd:12:43:42:d0:98:ee:6e:f4:
5b:4a:66:3a:95:6c:11:26:b0:97:d7:5b:b3:a2:42:
d5:0c:db:2b:ee:e8:1f:db:88:8b:30:0f:cf:b5:b2:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:E9:73:2A:40:8D:C7:63:5F:75:D3:4B:E6:93:CE:B0:5F:85:E6
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d2:48:49:06:f0:97:2c:55:94:4b:e8:6b:01:fb:85:e4:d4:
76:c3:4d:c6:4e:01:d2:fe:9b:9b:59:a6:2d:46:dc:30:7f:f4:
42:b6:cb:47:b0:bd:34:24:e6:97:33:11:2c:59:a6:ec:57:a4:
be:13:e7:f6:36:22:88:3c:c3:48:3c:35:d0:71:56:fb:6d:23:
88:04:0f:95:07:e4:c0:16:e7:3d:fe:3f:95:b1:a1:fe:f4:b0:
d0:01:7f:0a:a3:7c:6a:3c:31:3f:c1:b0:39:4b:ae:57:53:a4:
96:11:b2:64:73:88:cf:85:de:92:74:15:92:64:08:be:55:4c:
b1:47:9b:48:11:9c:bf:57:77:87:22:19:dd:4c:6c:8f:9e:74:
ad:c1:73:a1:d8:b8:ad:e6:cb:2b:d6:b0:3b:a6:4e:0c:5a:e0:
c7:86:c8:a0:ac:28:c8:03:20:8c:e2:17:99:4e:9b:51:c2:43:
be:8a:12:9b:72:07:40:54:c0:fe:93:30:00:9f:34:ae:61:e8:
43:25:8a:69:25:9d:f0:36:12:5b:9a:70:28:68:70:b7:26:fc:
e6:e6:88:b3:64:7d:4c:3f:f0:37:dd:14:65:4b:5e:62:8b:12:
f1:38:e7:5f:d5:21:cf:06:9a:82:aa:23:df:fa:a1:72:3f:e8:
0e:87:c4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:15 2025 by rpki-client