Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: aIycd2hwLfDbHtKCMzfxbT+gASOHknE3XGLNWI4yWn4=
Subject key identifier: A7:F0:68:1F:C5:60:CF:DE:12:36:F5:74:73:B2:42:5A:99:FC:35:2A
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 019847E4A2F33F9D78D07A4413633877D358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 0E84
Signing time: Sat 26 Jul 2025 18:00:22 +0000
Manifest this update: Sat 26 Jul 2025 18:00:22 +0000
Manifest next update: Sun 27 Jul 2025 18:00:22 +0000
Files and hashes: 1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=)
2: 7dlaDlkKgi4dAirWDUWBZGBGqcU.roa (hash: p1fbv33BP/4U3m5pS2Ws4rI2vfUa3r6QuSWQWQR+Iw4=)
3: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: mK6JWQ6sNXzk9FuRLB2289UB9uQR2Mapp3qg8Hgi+HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:a2:f3:3f:9d:78:d0:7a:44:13:63:38:77:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Jul 26 18:00:22 2025 GMT
Not After : Jul 27 18:00:22 2025 GMT
Subject: CN=a7f0681fc560cfde1236f57473b2425a99fc352a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:d4:2f:ed:34:95:b1:63:5f:47:67:32:bc:
bd:df:36:e1:d2:70:e3:b3:02:cd:07:43:fe:1e:9d:
38:9d:5b:e8:5a:d1:1e:41:52:69:8e:e1:a9:7b:7a:
c6:ad:eb:01:19:d6:22:60:40:5d:14:57:d3:dd:2d:
f2:0c:32:f4:c6:1a:41:a8:5f:4d:e4:a5:30:9c:6e:
50:8f:ea:aa:46:e7:33:2a:e7:4a:cb:cd:c7:2c:12:
2e:31:3b:a6:f1:a4:21:9a:c4:02:34:c6:43:53:d5:
62:8f:f4:ef:7f:b5:d3:2f:b2:b4:7a:5d:c0:77:bc:
0f:ce:95:f1:c0:43:ac:f2:87:f2:43:7e:bd:a9:48:
30:cb:93:34:db:6e:73:ca:6e:82:0b:77:c8:42:5b:
be:a1:12:1f:38:6d:10:6e:13:3f:9a:57:ab:9d:82:
5a:8f:68:04:af:0e:3e:a9:27:a8:fd:71:98:5a:78:
76:2a:12:2d:c6:4e:d4:eb:41:5c:6d:6d:27:15:25:
8f:91:39:4a:8d:3a:79:14:88:26:35:71:69:c2:f6:
28:a9:74:9c:69:e3:23:99:57:c5:0d:a2:54:8c:bb:
51:3e:5a:b1:f4:cb:a3:f4:06:51:02:b6:cf:8f:a4:
82:2c:c1:07:26:ac:30:5b:a8:6c:c4:83:e8:60:b3:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:68:1F:C5:60:CF:DE:12:36:F5:74:73:B2:42:5A:99:FC:35:2A
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:b5:59:37:e8:ca:3c:27:7a:f0:ca:32:95:70:3e:9e:c3:
d1:83:56:8c:a9:cd:e2:b3:6f:cb:18:3e:e3:ed:c1:2a:fe:89:
cc:df:13:10:92:f8:1e:6d:02:25:fe:92:e2:81:50:c1:ec:6a:
23:d5:af:f1:fe:ee:4f:50:19:ee:e5:ae:8f:51:98:aa:d4:bb:
90:fa:35:ab:f7:75:c6:31:f9:86:84:26:e7:5f:43:58:dc:3a:
66:cd:24:f3:3b:55:a1:a6:9b:cc:5e:9d:a6:0b:43:a1:92:12:
12:65:ba:29:41:ad:e1:3b:9b:b8:79:14:b8:10:9b:d3:7b:b5:
e3:3f:5e:70:a0:f4:54:e9:cd:be:a8:6d:b5:74:b6:4d:83:96:
f4:5f:53:13:db:fd:a0:75:d8:c6:4e:3a:d6:a1:f0:7f:8d:1d:
1e:92:97:3f:24:d6:bc:f8:8a:0c:01:78:29:21:bc:e0:6c:20:
41:9a:34:18:f7:46:f8:33:b7:f4:38:44:98:10:be:9d:0c:cb:
57:62:1b:31:51:ca:84:c1:92:72:36:d6:e9:43:da:aa:70:38:
7e:e0:90:99:a5:2c:52:b6:6e:9c:30:52:7e:e9:78:5f:c5:35:
d2:07:17:d6:e0:10:4c:bc:46:49:07:a2:6a:b8:36:8a:15:ec:
a9:38:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:11 2025 by rpki-client