Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: v8Le22UHnij8oqQt4QCK7UQMejZODXiWSBKkZfaUF+o=
Subject key identifier: F5:28:81:9C:90:23:82:55:19:13:39:E6:7B:FD:E8:9F:8E:76:39:7F
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0198496575A8045214F09C31858CA7F2EF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 11BF
Signing time: Sun 27 Jul 2025 01:00:42 +0000
Manifest this update: Sun 27 Jul 2025 01:00:42 +0000
Manifest next update: Mon 28 Jul 2025 01:00:42 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: HZTRL2kAGwS08SYUwJRtXGEdskxoqjUKE7o+g6Xe9yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:75:a8:04:52:14:f0:9c:31:85:8c:a7:f2:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jul 27 01:00:42 2025 GMT
Not After : Jul 28 01:00:42 2025 GMT
Subject: CN=f528819c90238255191339e67bfde89f8e76397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:72:d2:4b:ef:3c:93:1c:fe:52:92:2f:03:
8b:22:55:09:06:44:02:73:cd:b8:1d:50:74:47:31:
07:91:d6:2c:38:7f:a9:97:e4:a6:5f:32:ed:27:ae:
93:03:74:58:b7:7e:01:25:74:8c:32:9e:c8:27:71:
3f:6d:53:d7:a4:61:18:c7:e2:c7:bd:e5:90:74:db:
e4:53:8c:fb:7a:f7:71:8a:ce:7a:c0:f4:3b:53:db:
a5:56:16:3b:25:7a:81:46:35:1e:83:fc:1f:fc:77:
7b:a5:08:97:e9:81:e2:b7:1c:92:66:d2:bb:dd:d2:
67:14:fa:b4:b4:4f:b5:1e:19:75:09:8b:73:c4:8b:
93:b6:66:8d:30:44:99:3b:24:9d:72:08:bf:ff:bf:
88:9b:cf:cc:3f:a2:0d:29:d9:bc:a0:79:a2:3c:88:
55:88:06:bf:70:f4:a0:f2:19:e5:15:c1:f0:39:a8:
11:47:bc:f1:f2:64:7b:93:9d:16:bd:c9:b7:9d:24:
c0:4c:e0:3e:81:c7:08:db:36:bb:36:54:36:9b:70:
34:7e:e0:4d:a0:02:b3:02:43:cb:71:0e:ff:e7:76:
1f:6b:04:b1:09:14:56:a7:ed:d7:09:fd:58:cd:96:
b3:0e:e0:b7:ff:9e:52:41:0f:67:82:79:17:21:a6:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:81:9C:90:23:82:55:19:13:39:E6:7B:FD:E8:9F:8E:76:39:7F
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:c8:b8:8e:63:dc:1b:23:57:eb:3a:68:46:10:77:65:03:
f9:9e:56:d6:d0:5d:a1:7f:c2:10:81:6f:da:0c:fc:9e:86:88:
bc:5e:ed:35:01:64:da:0b:48:43:e8:48:15:8a:38:48:f9:28:
d0:1b:d4:29:e7:1d:84:a1:34:aa:42:d1:61:93:43:01:2e:75:
59:31:63:85:f6:21:e3:77:81:f4:1b:b7:e6:07:e0:ce:6b:7a:
97:78:78:1f:fb:82:9c:6b:aa:62:68:26:b3:6a:3c:28:06:f9:
f0:15:e7:4e:64:a0:ab:22:e6:fa:01:ba:75:fc:ee:18:2c:10:
20:d1:96:59:55:99:35:00:56:cd:7c:b9:76:6f:31:d6:21:86:
e9:7d:b2:18:31:83:8e:35:3b:36:60:cc:e2:ed:96:1e:bd:f6:
9e:9d:25:02:a0:c6:a6:67:a4:a4:0c:36:48:1c:e2:9c:38:e8:
31:95:bd:b3:4c:98:f7:9d:7c:9e:f2:82:7d:2b:93:b4:6d:2e:
9b:84:6a:19:41:3c:6d:f4:21:05:f0:d6:9a:14:a6:9d:e3:1c:
d2:81:30:bb:94:b2:fe:bd:63:79:51:3a:3f:96:bd:84:3c:45:
5b:63:30:ab:4a:f8:2f:97:cf:d7:e9:e2:b4:4b:42:92:79:71:
01:54:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:26 2025 by rpki-client