Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: SNK983u/OQ3WkHVHzxegJ8OVnThdNrX8uM5vwbJSK8A=
Subject key identifier: F6:C2:F6:9F:02:6C:F9:47:6C:56:51:63:4E:84:56:AB:8E:68:CA:8B
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01992CD8F6A7D08B31A5CAAB5AB936C5B9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 122B
Signing time: Tue 09 Sep 2025 05:00:40 +0000
Manifest this update: Tue 09 Sep 2025 05:00:40 +0000
Manifest next update: Wed 10 Sep 2025 05:00:40 +0000
Files and hashes: 1: 0ycMJPi_Xp0v_c9cpvBYlEdPtFU.roa (hash: Os3eVNAHF9/fRsHKPcTnAbVY5k0UMaLvCpLK8GHyLns=)
2: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=)
3: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
4: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
5: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
7: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=)
8: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (hash: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=)
9: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: nfxLuuxpycMtj+gB32EHM6TabLwHiHhGIrBJH1o54gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:f6:a7:d0:8b:31:a5:ca:ab:5a:b9:36:c5:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Sep 9 05:00:40 2025 GMT
Not After : Sep 10 05:00:40 2025 GMT
Subject: CN=f6c2f69f026cf9476c5651634e8456ab8e68ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:23:f2:67:61:0f:6c:84:a3:36:ce:c2:23:
f3:6d:82:b1:d5:35:0c:07:5c:22:c8:88:9c:dc:a6:
43:3b:2b:27:d6:3d:82:81:8e:3a:7a:06:d2:38:76:
d2:c3:49:15:57:71:ff:d8:69:1f:8e:1b:82:66:97:
2c:0c:c8:b6:72:2a:37:2c:ad:f3:9d:15:e6:72:8a:
8f:5e:36:61:dc:b9:55:6c:76:94:b3:57:46:37:b7:
a7:2a:47:c3:86:34:c3:08:a7:92:fb:0c:4b:32:08:
cb:0c:96:c1:6b:e5:5e:00:e5:24:94:fc:b1:17:c8:
25:13:e9:ef:5a:9d:59:a7:59:e7:19:64:2b:94:17:
f0:45:a2:38:bb:c3:ee:8c:86:b0:76:62:2a:de:96:
da:45:99:9f:06:23:fc:c4:c2:06:53:24:bd:e9:be:
e6:ea:53:d0:f1:dc:74:48:5f:af:76:4d:f2:6d:3b:
c7:ac:9e:f3:f0:4c:f6:57:92:6a:cf:67:67:75:c4:
f6:08:89:a5:2d:d9:89:45:62:84:ee:9c:c6:61:7d:
78:b5:c7:4c:c8:6f:61:20:14:89:02:90:6a:47:56:
f8:d0:01:44:41:03:1c:13:28:d5:2a:af:19:17:3b:
9d:85:8b:f1:f0:fa:39:a6:bc:11:79:de:62:d7:32:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:F6:9F:02:6C:F9:47:6C:56:51:63:4E:84:56:AB:8E:68:CA:8B
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:21:bf:4a:35:b5:e0:1d:85:eb:a8:41:70:a2:96:9a:58:86:
2a:ab:f8:25:19:7a:b8:79:da:4f:b0:91:cb:f4:dc:16:e6:7d:
78:6a:7d:26:16:45:6d:ac:93:34:12:71:ab:29:ce:56:02:94:
8d:67:ea:cc:64:ad:52:83:4c:74:48:a2:7a:9b:29:c5:b2:99:
28:a4:3d:d1:59:f4:49:ed:4f:46:d6:d9:f6:4b:65:2d:d5:7d:
03:f5:a6:ee:33:f6:cd:5f:7d:f2:a6:7c:5b:6d:21:1b:ba:13:
31:e7:17:90:cc:f4:0e:16:0c:54:03:68:51:98:0d:f3:3b:17:
aa:f7:77:e4:58:72:71:a1:70:fb:b4:42:71:35:84:98:73:f9:
83:d2:2f:f6:ec:f4:09:ed:35:4f:43:79:46:18:67:c9:93:56:
c6:e1:e4:87:4b:62:b1:20:1d:11:f1:3f:81:71:e9:87:c6:54:
f2:bb:f1:95:95:7b:63:98:98:e8:f1:a2:d1:8a:1f:12:94:34:
86:35:c7:28:01:70:01:35:4e:55:d8:0f:50:b0:d3:17:57:2c:
0c:0e:4c:bd:86:3b:ef:99:45:45:d0:ce:7b:e7:ff:23:6c:1d:
5b:91:38:42:55:5b:60:8e:ff:80:99:32:eb:ed:97:24:1d:67:
de:1a:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:50:26 2025 by rpki-client