Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: anhOhE1hbiujqUn74yw0NA7eujHKJLiOvSemw/uUOrA=
Subject key identifier: 2F:E2:36:AB:50:AA:70:C1:58:55:9B:CC:9A:86:D6:1C:59:40:42:74
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 019849D2E2CCC89494B74FFD9E6AD4F20C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 0F37
Signing time: Sun 27 Jul 2025 03:00:14 +0000
Manifest this update: Sun 27 Jul 2025 03:00:14 +0000
Manifest next update: Mon 28 Jul 2025 03:00:14 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: jjEpt+vujqPtXtj4vjFJylCoHDwHRkyHWH/dT1+Sxpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e2:cc:c8:94:94:b7:4f:fd:9e:6a:d4:f2:0c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Jul 27 03:00:14 2025 GMT
Not After : Jul 28 03:00:14 2025 GMT
Subject: CN=2fe236ab50aa70c158559bcc9a86d61c59404274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:25:ed:e1:11:00:00:09:17:8f:f0:4b:5e:
1d:b3:55:1b:ae:d8:3c:7d:4e:6d:64:ff:11:05:5e:
bf:8b:ab:bd:3a:15:7b:b7:b8:5a:8b:6d:e2:4d:61:
a0:1f:87:a0:e2:9b:7d:53:f9:ae:3b:b0:be:f0:3f:
3f:f1:e8:35:cf:78:2e:d1:d8:71:81:ff:2a:4b:1d:
9c:2e:bc:8c:69:1b:fa:4f:ef:af:fd:1a:3f:55:42:
ed:bd:11:2e:fe:71:ee:30:6a:9b:b8:9d:c7:3b:a3:
7c:39:ba:1c:1c:16:e5:13:be:e9:b4:34:88:c7:d1:
19:ff:cb:e9:da:26:4f:56:13:9d:aa:e0:de:ab:77:
a0:ff:b5:89:3a:a5:b0:4c:88:6b:79:b9:b0:7f:17:
89:dc:10:53:f6:ed:2c:a9:58:b9:69:d5:de:27:08:
bb:9c:5a:3b:b5:dd:f3:df:d5:26:4d:a1:58:ad:13:
8b:cd:06:f5:0d:b4:20:ae:1a:5a:7c:19:4b:7d:53:
db:a3:4c:20:c5:a9:10:c9:56:ac:41:ba:40:18:e0:
7a:f4:a6:47:b1:f4:76:d7:2a:23:07:24:04:a7:5e:
93:dd:0b:77:8f:a9:1e:02:03:c9:ac:62:c7:df:dd:
cb:b7:ff:80:86:c4:6f:1f:d5:2d:65:4a:dd:de:9a:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:36:AB:50:AA:70:C1:58:55:9B:CC:9A:86:D6:1C:59:40:42:74
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:bb:03:72:bb:6e:fd:1b:ac:88:da:fc:3b:30:b0:60:42:
ef:98:cf:99:27:3a:dc:ce:df:73:5e:ac:d6:16:6f:23:0b:f7:
32:b1:59:69:6b:74:44:5d:80:90:4b:bf:8d:92:6c:eb:1c:87:
b4:55:cf:df:d2:ce:61:53:90:99:9a:82:de:2e:67:62:9f:79:
e1:4f:7a:ad:c2:93:31:02:ed:35:99:d5:5f:fd:ba:83:e0:c6:
37:fc:23:45:bd:95:0e:85:88:4e:69:89:1f:ef:a0:af:c1:fa:
50:0b:e3:30:4f:e0:44:93:fd:31:7a:f3:3e:ad:f3:bf:9c:32:
95:7c:7a:9d:ca:b1:f5:f5:29:7f:ee:26:24:be:76:aa:e5:6a:
7c:e6:6d:7d:70:43:ec:5e:50:a2:6d:ea:55:b8:46:40:eb:bc:
15:af:3b:3e:63:af:e7:a1:1e:37:f7:a0:cc:6a:d8:fc:58:67:
8d:09:e1:a3:66:e5:92:d9:9d:4c:fc:2b:fb:da:6f:e8:c1:1d:
5a:8f:01:ad:30:cf:ad:4d:02:c1:50:b6:f8:14:b7:d7:fe:0f:
71:2d:26:0f:5d:9e:e7:f5:95:29:91:be:b1:23:a6:25:05:91:
ad:bc:f1:96:14:eb:46:67:40:65:af:22:4e:54:d0:1d:9c:9f:
f2:20:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:44:43 2025 by rpki-client