Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: mSrsz6e/cLgwrlurw8bi5Ml/a2UB9rX4SY4cFajpfaE=
Subject key identifier: 7D:C8:32:A7:CF:A6:00:28:91:2C:3B:8B:DB:34:70:E3:37:49:7B:A5
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 0198529F3C8B38BD10561191566CC089CAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 20:00:24 +0000
Manifest this update: Mon 28 Jul 2025 20:00:24 +0000
Manifest next update: Tue 29 Jul 2025 20:00:24 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: Bf5iEAJ8hDiUo92pik+8b+ieHCccsSFHjL4Z9FiTzsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:3c:8b:38:bd:10:56:11:91:56:6c:c0:89:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Jul 28 20:00:24 2025 GMT
Not After : Jul 29 20:00:24 2025 GMT
Subject: CN=7dc832a7cfa60028912c3b8bdb3470e337497ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:99:9f:e5:d3:58:d6:5a:14:32:19:36:df:
e4:ef:8c:41:7a:f5:4e:b1:4e:b5:d4:5a:b9:31:b2:
3f:1b:ab:ec:48:1a:67:9e:8f:6e:f3:9e:50:f4:cf:
70:b2:48:47:43:ef:80:53:7d:d0:14:e0:73:ed:6c:
7d:67:bb:5c:79:10:5b:5a:5b:5d:b8:c5:f2:cb:fd:
eb:10:60:cd:5c:e4:10:7f:ac:c0:45:e4:37:40:82:
61:db:5e:8a:11:c9:56:e6:24:bd:cb:d6:c7:ad:7c:
1f:6f:5b:b2:01:c5:34:51:01:ed:11:a5:31:86:5c:
fb:36:bd:37:e9:97:65:b9:07:c3:a8:6b:79:ce:cf:
81:92:ea:6b:9a:2e:b1:ba:14:05:86:32:0c:90:95:
24:ea:0b:00:41:c1:1f:ac:bf:ad:2c:06:43:03:00:
70:69:2e:f9:41:e2:e9:16:5d:55:a8:09:55:22:3c:
4d:4f:f0:f8:fd:d2:39:82:f3:f4:82:09:d8:07:ec:
68:ee:9f:51:d6:79:93:43:52:b2:2a:0d:3d:3d:10:
2e:4a:87:02:70:fa:30:ed:5f:bb:df:d8:e0:8b:03:
29:f5:43:b8:f4:4c:36:8e:4e:90:3a:03:20:1f:69:
6f:b2:81:3b:a4:c3:db:ce:5c:c9:31:2c:2d:ef:e4:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:32:A7:CF:A6:00:28:91:2C:3B:8B:DB:34:70:E3:37:49:7B:A5
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8e:fe:52:7e:bf:f6:3e:a1:1e:c5:6f:6d:51:e8:8b:0f:e1:
09:06:44:14:94:84:d8:3e:7c:70:f7:f2:d9:d6:40:ce:11:f9:
7c:95:a6:53:19:73:b6:0d:36:04:2a:c5:8b:ea:e0:df:cb:f2:
1f:4f:5f:2b:80:cb:4f:62:f3:3d:99:c5:22:9c:f6:d6:a6:4b:
b6:fd:6b:ec:6d:53:ea:df:dd:55:07:6b:43:97:ab:f5:33:6c:
06:6a:85:59:33:2f:6b:33:19:49:b8:41:31:e3:ea:5f:d9:c1:
be:0f:43:d8:30:43:99:bf:52:36:70:3b:e2:4b:2a:0b:8b:a5:
7b:a5:84:23:3b:9f:a9:f6:0f:3b:bb:5a:0f:e5:cf:56:70:db:
13:3f:3c:73:9e:e8:ea:ba:bf:8e:24:6f:b4:6d:11:2c:98:0b:
f8:57:f1:8b:b9:6d:e1:78:f8:f9:b7:5e:bb:98:4c:be:2d:0c:
46:bc:d1:af:97:c1:c0:6f:79:b5:48:81:2d:59:42:56:5f:bc:
08:fc:cb:59:39:7d:42:9a:ed:c5:af:c9:83:d1:04:11:aa:28:
83:76:63:83:f1:27:7b:9c:b8:84:86:fd:6f:ca:08:3f:b8:23:
d4:ea:83:1c:55:2c:9b:fa:dc:80:88:b8:ed:9f:cf:15:59:91:
30:f2:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:51:06 2025 by rpki-client