Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: CDQHHp5qNUbAPGjO+cfaF/gsQsdTHrhGxvvDDnx8xpA=
Subject key identifier: 12:D1:F5:6E:B2:F4:41:14:AB:B7:87:D5:D8:AE:E8:E1:B7:8B:10:2C
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 019922C3777AE50D646F57BA40B956C3D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: oF+j36k66Pwm3W9Bh3Y3WJVxUvHpfdYUi17pea4gFTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:77:7a:e5:0d:64:6f:57:ba:40:b9:56:c3:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=12d1f56eb2f44114abb787d5d8aee8e1b78b102c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:31:d2:45:78:cb:dd:4e:f0:03:c3:94:0c:
51:b8:d9:89:b9:bd:1d:0d:ef:d7:1a:6d:e7:43:7e:
13:fb:ed:b7:3d:b9:6f:54:c2:16:e9:8e:33:fc:d8:
a3:63:f6:b4:86:20:c6:ba:58:ae:54:85:72:ce:16:
ee:c4:73:00:b9:56:d0:65:19:cf:8f:18:0e:f6:67:
8d:57:55:b6:85:71:63:11:a7:7b:23:b3:a8:c0:18:
9c:d4:ab:e9:87:10:26:c0:e1:22:7c:35:f8:79:8f:
c9:b5:60:7e:27:5e:ac:9b:a5:bf:6f:bb:96:25:99:
56:bb:0c:b8:06:be:9b:fc:82:62:24:2b:f0:dd:0d:
51:ee:4f:8f:ad:b1:04:3d:f9:db:4f:ca:c0:20:c0:
d7:9b:0e:df:4d:d6:e7:2d:75:8f:40:1d:50:12:ce:
77:6a:b8:9e:1c:1e:d6:73:a2:62:04:ed:88:ff:ff:
4e:4a:4c:6b:34:61:4e:5d:e6:7b:ef:20:34:b9:3c:
5d:b5:dd:fc:0d:6d:7f:51:36:23:15:42:b1:80:47:
8f:7d:3f:7c:de:84:e9:5c:ce:5b:2f:a5:9f:0f:bf:
6a:4d:50:e2:c4:37:0f:a3:5f:6f:3a:a1:d3:2c:77:
29:51:87:5e:4b:ae:8f:15:12:3a:5f:98:2d:c9:39:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:F5:6E:B2:F4:41:14:AB:B7:87:D5:D8:AE:E8:E1:B7:8B:10:2C
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:d0:91:68:84:23:b9:69:2a:0c:c0:24:d9:81:34:1c:af:
6c:6b:02:1c:d4:94:bb:8b:fa:bb:9e:8c:96:22:71:45:56:8b:
29:68:de:63:24:dc:6e:04:64:88:66:74:a0:b6:14:20:99:5c:
dd:99:73:a7:59:67:d0:f2:b1:fe:23:86:c4:d0:fb:c3:a4:4e:
f2:39:dc:82:3c:e7:8a:ae:6e:6d:c4:5a:28:85:cc:57:b5:a3:
9c:b8:f7:80:8b:54:c6:dc:49:c8:54:1a:9d:f2:75:d9:18:fd:
b7:2f:0c:0c:0c:49:28:7a:41:e4:06:5a:57:8b:a6:af:dd:6a:
68:ff:31:33:d2:cc:5d:30:a5:b2:80:91:dd:e3:b8:52:5f:18:
5f:af:ed:34:f6:5d:a4:8f:04:b9:ba:59:b7:8c:19:6f:56:94:
fd:e1:97:d6:6c:36:c4:da:41:1d:18:0a:77:ff:5c:2f:16:96:
17:61:ef:66:97:8a:cf:25:01:c2:d8:05:72:59:bd:6b:f1:4a:
f9:6e:04:cb:f8:14:0e:f8:27:0c:fc:d3:06:10:5c:ae:22:a5:
83:11:c8:90:79:8d:0c:69:69:7b:82:32:a1:81:c9:bf:0f:64:
f4:e8:ff:99:25:ba:18:47:cf:71:93:e4:38:8c:0f:7a:b8:15:
8c:fa:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:43 2025 by rpki-client