Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: aFV0irWUjUPy3epUlr5/Ulj2Fnc7fVgFJKpKmEudwqU=
Subject key identifier: 4B:0D:1A:E4:4F:78:D0:98:B6:35:2A:22:39:61:64:18:2D:82:1D:D3
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 019848525BDF4C1761011FF3C5DFFA8084E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0CED
Signing time: Sat 26 Jul 2025 20:00:13 +0000
Manifest this update: Sat 26 Jul 2025 20:00:13 +0000
Manifest next update: Sun 27 Jul 2025 20:00:13 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: wXNewGXHlMYS3N7v7F8hrSWytZwe9zvnVAvrXV5bf/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:5b:df:4c:17:61:01:1f:f3:c5:df:fa:80:84:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jul 26 20:00:13 2025 GMT
Not After : Jul 27 20:00:13 2025 GMT
Subject: CN=4b0d1ae44f78d098b6352a22396164182d821dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:b8:5f:cb:48:6a:9e:96:cc:34:87:89:62:
10:8d:74:a5:be:2d:a5:cc:f2:16:12:10:14:74:5d:
d5:78:06:f1:72:21:01:3a:e6:5c:8f:31:bf:c2:c2:
7b:3a:36:36:f2:0e:7c:09:ae:ef:45:61:a4:a8:8f:
db:dc:b4:ba:d8:92:ee:5a:0f:0e:e4:c2:c3:6c:28:
44:2c:26:e9:68:42:69:83:40:3e:9a:18:33:56:9e:
d8:2d:54:92:3a:19:88:4b:5a:5e:ce:a1:ce:26:ce:
84:bc:09:77:16:e3:22:41:5e:72:1e:5e:8d:2c:81:
12:fd:26:79:5e:c8:4c:57:3f:fe:aa:57:ca:92:e8:
a9:05:6b:ba:f7:bd:89:f3:0e:e9:7c:4a:f8:a9:00:
ab:3f:92:47:17:b1:eb:18:93:e4:5f:17:4c:4c:14:
72:0a:e9:63:2a:36:01:b9:aa:1a:c4:19:db:26:7f:
0e:f5:61:bc:ed:0c:a5:40:99:44:15:34:ad:20:92:
43:f2:ea:44:a1:8c:95:f8:98:91:08:7f:05:54:97:
f1:6b:72:c2:16:ea:51:3c:a3:36:f4:ef:15:90:60:
b5:5d:bd:ef:b2:73:11:cc:d4:26:cd:e8:29:f5:e5:
6c:ff:79:46:3d:e2:5b:e5:96:79:a9:bb:c1:86:91:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:1A:E4:4F:78:D0:98:B6:35:2A:22:39:61:64:18:2D:82:1D:D3
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9b:cc:9a:63:24:8b:95:59:d4:6e:a0:65:d3:f5:33:3b:1f:
36:89:6d:d8:90:8c:91:98:e5:db:1d:dd:0b:10:7f:19:73:36:
4e:33:b7:8f:c7:34:ff:eb:98:3f:7d:47:ca:cb:e6:55:b5:ff:
75:32:61:1f:4e:ac:6d:31:60:3f:e0:be:05:da:ee:54:fc:60:
84:17:fc:8b:b5:1a:69:c8:49:41:48:5c:32:44:90:ff:15:ae:
7a:90:99:9a:c8:96:3b:b9:d0:42:c9:5b:6b:4e:26:e1:72:6d:
72:5c:b5:41:ae:19:38:47:e9:af:04:c8:de:a0:b7:c3:5b:5d:
47:f2:bd:76:e0:7a:26:da:35:ab:e3:a4:7b:48:d7:30:23:fb:
85:80:c5:5b:09:7c:8a:cb:3a:19:c9:e7:a1:ae:5e:06:a7:8c:
0a:78:41:55:b8:8e:e0:c5:9c:4c:e2:c1:54:70:70:00:46:bf:
37:ac:70:55:8f:51:21:11:76:51:f7:f4:27:25:16:bb:c4:fe:
05:ee:fb:57:79:01:64:a1:a1:3f:2b:3c:9d:9f:9f:e2:5d:56:
38:34:08:84:85:84:6a:09:73:b9:cf:24:47:92:45:c3:ab:00:
f3:79:c9:df:3f:85:7b:7b:40:c6:16:3e:c3:9c:03:b8:0c:de:
c5:0b:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:45:28 2025 by rpki-client