Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: LsOj4fo7lcHgRLXeVIO/YqHq+S4Hs7CH7wGJws0vN8g=
Subject key identifier: 1D:84:C3:57:65:8F:DE:A8:88:E9:18:D4:7B:39:63:96:F1:FC:B1:24
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01993313E3A41BF2ED1665880F8EC146D4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1238
Signing time: Wed 10 Sep 2025 10:02:45 +0000
Manifest this update: Wed 10 Sep 2025 10:02:45 +0000
Manifest next update: Thu 11 Sep 2025 10:02:45 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: DbYbhl6HUu+AeLMTsT/t/Uzg+bXsiEDcXGlWYKglCrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:e3:a4:1b:f2:ed:16:65:88:0f:8e:c1:46:d4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Sep 10 10:02:45 2025 GMT
Not After : Sep 11 10:02:45 2025 GMT
Subject: CN=1d84c357658fdea888e918d47b396396f1fcb124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:0a:d7:84:98:9a:91:be:1d:06:e1:4b:bc:
61:bc:0a:a9:b1:2a:b8:50:0f:60:ab:a5:14:f5:1b:
e5:07:cd:f1:e3:eb:35:40:92:99:7a:ae:49:b8:12:
11:e4:e8:97:b7:0b:c4:b9:17:d5:a5:2f:08:94:64:
82:b3:d6:a1:7f:3b:05:b7:08:57:2d:af:b6:fd:b3:
e1:de:1b:a2:bb:89:28:88:08:0d:82:b0:d7:75:d7:
07:4b:ce:47:3c:ee:33:b0:dd:a2:66:a6:5b:3d:66:
86:21:f1:80:d4:e3:7e:5f:d3:30:76:dc:8a:56:ed:
fe:7f:f9:e4:78:db:71:17:ed:ce:c6:a7:80:79:1d:
be:da:0b:b1:35:74:ca:c2:1b:70:51:a2:30:0f:f8:
0e:9c:ac:99:39:2e:bc:06:58:65:23:30:ef:01:cf:
4e:d2:2a:fd:e5:a1:29:fb:6f:e0:ac:f5:e0:47:fe:
ea:58:7a:a3:f9:65:8f:3f:0f:ac:96:0a:14:7c:ce:
21:e0:89:07:9d:ef:8b:b1:c7:8c:70:85:6d:e0:aa:
f1:64:3c:50:eb:d2:67:95:53:71:c3:a5:cc:ae:f7:
f7:cc:57:77:68:5c:45:82:85:9e:a2:25:1c:8b:23:
43:c7:e4:e8:4c:2f:03:84:4a:96:2b:51:d7:91:19:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:C3:57:65:8F:DE:A8:88:E9:18:D4:7B:39:63:96:F1:FC:B1:24
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:10:d1:1a:72:3f:ff:a5:8f:4b:8d:2d:e8:d5:10:82:b7:
0b:48:67:a4:0c:8a:4d:7c:76:ee:5e:25:73:bb:bc:71:99:e5:
a4:71:8d:c7:c1:e2:58:05:f7:ba:3b:f5:63:2f:69:cd:6c:47:
64:89:20:4a:72:ad:a1:00:19:e4:b4:be:44:7b:c9:d9:53:99:
40:43:b4:fc:03:47:27:27:f9:eb:1b:ed:10:80:ba:9f:04:ee:
f3:ee:98:35:aa:7a:0a:15:01:75:c7:c4:5a:07:55:7f:16:ea:
d2:8a:bc:a3:a2:4f:98:b4:ff:8f:50:e7:00:ff:2a:d9:17:69:
ad:cc:c3:4c:b9:cf:53:07:a4:ec:19:b5:9f:9c:cf:ce:c3:cb:
9e:a4:09:0b:7c:95:8d:f2:f2:b4:ec:27:ca:db:39:40:96:9a:
a1:d7:11:fb:e6:55:38:84:40:d7:91:43:86:cf:d9:bf:1b:bd:
d3:02:65:c9:30:34:e8:ec:d6:9c:2e:39:4e:58:d1:38:d9:f4:
0d:52:9e:94:cb:9d:b2:74:0a:b6:46:6b:0f:ca:95:fd:f4:11:
1f:80:96:bf:72:f0:ea:73:40:19:65:6d:11:04:c0:61:db:0c:
89:63:cf:b2:a4:71:ef:6a:29:68:4c:94:7b:cf:95:59:d1:40:
53:1a:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:22:33 2025 by rpki-client