Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: bRPHyWQ/LZP8jjifDEj1fErJy6vfnYySZqmQT8BCr+Y=
Subject key identifier: F0:A6:53:54:68:4E:5C:A3:C3:25:9B:A5:79:F9:F0:26:E9:AE:95:A3
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019849D2E97A6133CBAB0F673FCD8489239E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: lERU2eCjiAInbLd7q3fwRA/e9kk/FHU5lIEfvQEffRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e9:7a:61:33:cb:ab:0f:67:3f:cd:84:89:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=f0a65354684e5ca3c3259ba579f9f026e9ae95a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:f4:99:5d:6e:5b:37:7a:5e:42:3e:17:9d:
f1:ea:36:1c:ae:19:6a:fa:7a:88:70:cd:29:1f:da:
fc:1c:05:ec:0f:74:dc:a9:01:6a:86:94:0c:c2:e5:
9e:e0:75:bc:d9:4a:23:91:dd:67:3f:34:ac:7b:f4:
2c:4e:f3:c8:93:72:ee:04:ce:36:0c:6f:a0:fd:3b:
2c:f2:56:e8:44:c4:fe:12:e0:62:67:46:2e:46:e9:
1d:78:d6:ce:4a:db:e5:71:28:d8:02:9c:0c:ba:cc:
6f:cd:ce:a4:ae:5a:41:59:b1:51:9a:24:09:c7:20:
c9:34:ea:ac:e2:73:8a:2d:ff:cd:54:fe:cf:17:eb:
7e:6c:b6:41:3b:76:86:42:bb:ad:ea:fe:78:e1:9d:
81:2c:e5:38:ef:eb:f9:29:33:53:49:67:57:b9:06:
90:96:f6:55:09:8f:08:99:04:b3:08:7d:ba:17:b1:
88:db:46:f1:a8:0a:9f:35:6a:82:ab:b7:dd:34:ba:
e4:6a:bb:15:14:f2:dc:03:48:da:e8:76:b6:f8:ae:
71:bb:1a:2c:23:98:49:12:61:a7:ab:7f:1e:9d:e0:
45:0d:be:6d:21:03:d9:98:b7:7a:42:9a:6f:ee:38:
13:28:b9:c3:41:9e:0d:57:43:15:8c:55:18:5f:c5:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:53:54:68:4E:5C:A3:C3:25:9B:A5:79:F9:F0:26:E9:AE:95:A3
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:2b:bb:1d:56:86:6f:54:9b:48:fa:e0:83:35:e5:c7:97:
9c:b2:0a:a4:c7:85:e7:c1:af:88:3f:ac:ab:bd:97:42:83:b3:
e4:45:f8:e2:87:7b:a0:fe:f0:b7:f9:82:47:70:72:56:ce:02:
d1:5e:d7:fd:4c:22:8f:1a:3e:f8:e9:57:7e:e0:54:d6:d1:90:
0e:fb:50:c4:f3:4a:6a:9c:ab:f0:67:3e:d6:8d:c6:1d:6a:10:
9e:fc:6c:5d:44:41:e4:71:0d:06:9f:17:6c:09:01:d4:09:8c:
f9:4e:06:0b:38:bd:70:28:83:ba:a4:d5:a2:c5:c6:79:ac:3d:
e9:b6:ff:70:b2:cb:48:1b:e6:35:d1:d8:d2:c5:cf:db:eb:33:
24:07:7d:f9:89:10:d8:ba:43:d0:c7:4d:e2:1b:75:95:41:2d:
11:fa:84:1a:35:27:26:1f:7b:a3:bd:b9:4b:b2:1b:a4:60:89:
5b:df:17:1b:e2:28:68:66:96:24:4f:69:83:24:81:33:2b:f0:
68:00:a4:98:f5:c0:e7:c4:0c:42:13:6c:e4:a6:81:1d:57:41:
cc:5a:2c:b3:09:6c:f1:33:68:a0:92:0d:0e:ad:5f:1b:f8:db:
39:e3:fb:55:d9:82:f9:09:1e:51:3b:b2:6e:60:f2:bd:dd:c0:
4a:da:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:15 2025 by rpki-client