Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: uAWS7fV/6HeUti10conBxIkwUMB3AuhfPduTzJTd/fI=
Subject key identifier: ED:EC:75:B1:3C:3C:87:48:51:39:1C:60:0D:A9:72:A9:8B:A0:4D:FF
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 01984A77900B8C2BDB450B61D7DC1C64F502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 15D2
Signing time: Sun 27 Jul 2025 06:00:06 +0000
Manifest this update: Sun 27 Jul 2025 06:00:06 +0000
Manifest next update: Mon 28 Jul 2025 06:00:06 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: VuQevmPtKjMMW6mRrqpdj+GW52hjTAGsSOAr0ArFdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:90:0b:8c:2b:db:45:0b:61:d7:dc:1c:64:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Jul 27 06:00:06 2025 GMT
Not After : Jul 28 06:00:06 2025 GMT
Subject: CN=edec75b13c3c874851391c600da972a98ba04dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:f3:39:90:b3:2d:28:c9:46:88:ec:56:c9:
13:a9:67:bd:0a:f6:1d:f1:3d:71:02:7b:c5:e0:96:
da:df:82:ee:3e:4b:3f:3e:ce:c2:b3:9a:9f:be:d8:
2e:3d:f8:7c:5c:f6:fd:c0:25:e7:cb:d9:9d:24:08:
9e:58:ae:d6:89:3f:62:ee:0c:45:cd:e4:b3:1c:c7:
e0:ba:66:ef:93:91:60:25:d9:8d:4a:6d:4b:aa:f8:
e0:12:45:87:98:99:51:cc:38:fa:df:9c:a2:c7:e9:
de:9c:04:c3:db:c4:61:72:8b:cf:78:5c:2e:c8:fc:
eb:e8:45:49:57:69:3b:ae:af:58:98:0e:7e:1a:c4:
8e:3d:00:92:d1:c1:92:66:dc:77:f3:c1:95:25:79:
4f:37:ee:4b:d6:51:42:06:ba:d9:19:b3:c7:0d:fb:
44:b9:cd:e5:02:86:c8:83:f4:c4:ae:c8:d3:34:4c:
9b:41:f2:4d:b1:e6:c6:a6:21:f1:e2:6f:b9:21:c2:
bb:40:2b:3f:ba:d4:59:fc:ea:3e:e5:28:31:80:aa:
ff:58:85:24:6a:84:b3:87:6d:36:fa:b2:70:83:6e:
1e:07:0c:f9:c1:a4:ae:7a:3a:bd:7a:cb:6c:0b:39:
44:c1:78:40:69:c1:26:70:a7:58:2f:ca:5e:dd:5a:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EC:75:B1:3C:3C:87:48:51:39:1C:60:0D:A9:72:A9:8B:A0:4D:FF
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:2b:1e:47:56:56:59:b6:27:96:8f:63:30:7f:c0:91:44:
67:cb:50:d1:6f:78:a1:6f:02:a8:0f:77:01:21:72:70:37:70:
5a:f4:51:4a:76:f5:70:77:c7:25:91:76:af:81:96:9e:0e:3c:
ff:dd:f7:2c:0b:b2:86:67:1e:35:0d:6e:2f:7d:c9:6a:a1:21:
89:ba:3b:13:ae:1d:93:fe:b2:42:2a:fc:f3:1d:51:f0:15:c4:
b7:d0:3b:0a:37:35:c5:bd:0b:9b:49:44:d9:b3:74:a1:89:a9:
0f:55:ee:e3:37:e9:df:76:f6:c4:02:f9:05:10:bf:9b:85:5d:
a0:66:90:51:43:d0:bb:dc:26:4e:66:93:3c:79:05:c4:ca:e6:
53:a4:a8:d4:b8:6a:c4:7e:04:f1:d9:97:da:40:ba:61:1f:ac:
d2:53:17:bf:0a:71:2b:dc:37:53:98:cf:b5:67:d1:01:79:86:
53:7f:3d:f4:57:55:50:e4:65:a2:8e:65:4c:6f:df:9c:07:7a:
cd:ad:30:37:b3:3a:41:36:9a:28:ad:92:27:eb:81:02:86:05:
39:41:d1:15:6b:7b:ef:c5:5d:5a:cf:87:28:8f:30:60:e1:0a:
74:21:14:fd:4a:a7:09:ef:45:58:6c:b5:95:40:a9:2d:61:51:
5d:da:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:30 2025 by rpki-client