Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: FwNUx2PvU/JCfa06Jgkj1ai1GRFIhlloxVafb7G79bU=
Subject key identifier: C9:CA:D7:A6:EF:25:6A:BE:41:6F:B6:FE:FD:51:94:52:1C:03:C1:2B
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019868F068E20DF2C1C6BB46397B472CFCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0B02
Signing time: Sat 02 Aug 2025 04:00:42 +0000
Manifest this update: Sat 02 Aug 2025 04:00:42 +0000
Manifest next update: Sun 03 Aug 2025 04:00:42 +0000
Files and hashes: 1: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 0Hr0OkenwT56jLE1yMhZ+yA0gtTHSPH2jRKTHvuxhX4=)
2: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)
3: qBN5XbPh8yl_8VyYB3Apy2Ljt1U.roa (hash: oI3mLf6Q+lElKzzbck7YB+dApjShyguGp+jMz5gs1SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:f0:68:e2:0d:f2:c1:c6:bb:46:39:7b:47:2c:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Aug 2 04:00:42 2025 GMT
Not After : Aug 3 04:00:42 2025 GMT
Subject: CN=c9cad7a6ef256abe416fb6fefd5194521c03c12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:83:59:87:b5:33:a5:d0:2e:53:87:e5:e7:
86:f8:02:d6:de:bd:68:0c:09:8e:ce:85:89:88:0c:
d5:55:db:f2:e5:03:73:15:3b:13:f0:90:9d:de:a7:
65:25:a1:e4:5b:bc:ca:52:5e:49:ac:40:f2:5b:48:
8e:74:b3:5d:b8:03:d8:6d:60:e2:0d:2b:58:8f:07:
85:89:f7:dc:df:58:e7:70:ec:29:aa:fd:85:48:d4:
55:39:a2:65:68:de:da:54:06:86:53:08:41:fa:bf:
7e:d1:39:71:7e:ff:cd:34:f4:74:f0:f9:d2:1b:1e:
7a:b9:b3:c5:65:72:fc:82:e3:ad:03:14:46:2e:83:
8f:bb:49:28:07:17:35:5b:55:04:44:d9:8b:55:fb:
34:a6:76:29:7b:d1:87:0a:0b:9c:86:2d:a1:35:40:
bd:f5:65:b4:3e:43:0b:c1:53:a2:6f:f1:ab:ce:29:
c7:c2:b1:47:af:6d:b6:df:c2:5d:58:d3:e3:2d:0f:
ce:f3:f0:75:33:c1:07:65:a4:c0:94:8e:95:a1:f1:
e5:75:a7:d6:b8:43:a4:bd:57:c6:d7:1a:07:50:36:
ae:d0:00:ab:14:bb:5f:70:24:07:64:16:20:5d:8c:
a6:0b:46:04:79:38:78:9b:35:a6:70:ac:9e:11:27:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:D7:A6:EF:25:6A:BE:41:6F:B6:FE:FD:51:94:52:1C:03:C1:2B
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:45:1f:95:81:f8:86:19:1f:61:be:38:a7:7d:48:a0:72:9a:
06:9f:2b:df:5b:c2:94:13:34:69:ea:fd:50:0b:fd:5e:1d:1b:
76:c1:1d:f0:54:2b:c5:7c:ad:23:c1:6c:43:f0:d9:4e:7b:5a:
db:ad:7d:24:9a:b3:0f:80:65:35:52:92:ab:a9:93:42:b9:bf:
f5:aa:c5:9a:0d:73:1d:ad:3c:69:bf:29:f0:b1:00:aa:5b:2c:
18:d0:45:75:60:46:74:2e:7a:4e:0a:f4:89:2b:a9:7d:30:76:
c1:3a:56:04:e7:d1:70:5e:eb:ca:4b:3d:7d:c3:ab:97:63:38:
87:93:43:f6:ae:04:4a:21:58:60:42:8e:d9:b4:b5:b1:a6:92:
37:9e:e3:88:2a:ff:45:d1:76:6a:0b:6b:46:ca:05:6b:3b:a4:
89:16:95:57:5e:49:a4:e0:84:59:d2:b5:5e:79:b8:16:9b:fd:
c5:0c:41:55:ac:c8:f2:87:df:49:5e:b7:a3:1d:41:2b:52:86:
54:f3:89:a3:8e:0b:a6:e8:ed:7d:49:48:ef:f6:f8:5f:2e:65:
75:1e:8f:3c:94:49:d5:f5:0a:50:90:a1:6b:29:ad:93:20:67:
2a:50:c5:41:b1:9f:f3:53:7f:95:98:a4:1c:dc:b4:94:2c:ee:
ae:1a:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 06:44:01 2025 by rpki-client