Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: 5+XyYLOzieFdz4nMOgA17Osz+Y2fTumYq+DfuJ4hwaM=
Subject key identifier: 53:C0:D0:56:19:41:9C:36:83:D3:0D:42:11:27:90:26:B7:B3:D6:31
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 019939B8D75CF76F5F65879F4CFC961D7622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 150F
Signing time: Thu 11 Sep 2025 17:00:38 +0000
Manifest this update: Thu 11 Sep 2025 17:00:38 +0000
Manifest next update: Fri 12 Sep 2025 17:00:38 +0000
Files and hashes: 1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
3: QAdvSCydHA9eyuAMO4zxWjMLaKA.roa (hash: SOXceRa6NpWT+hoKHihDdCbZSJgN5vfd5bbC+z6R+m0=)
4: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
5: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
6: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: krWg7bR2cTydsXI/aTH3t8EUa3W/XwDTm2UAKPkerP0=)
8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b8:d7:5c:f7:6f:5f:65:87:9f:4c:fc:96:1d:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Sep 11 17:00:38 2025 GMT
Not After : Sep 12 17:00:38 2025 GMT
Subject: CN=53c0d05619419c3683d30d4211279026b7b3d631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:fd:41:43:88:ae:91:ad:78:58:46:3b:b0:
84:88:04:13:94:b8:1b:77:ff:a6:c2:33:40:75:ab:
21:6c:30:54:5e:81:5f:e7:71:ba:71:fc:2f:e1:d8:
99:d7:74:b4:01:00:79:74:b5:b5:e6:22:ac:42:bb:
a4:e1:d7:cd:67:dc:1c:a5:08:2b:8c:80:75:18:5f:
f8:fd:9d:2a:26:0f:33:44:4c:95:79:36:31:eb:b6:
c1:af:2b:e0:a2:df:c6:17:ca:bd:b4:81:72:d1:25:
90:b7:59:ee:ba:25:e2:7b:b7:e1:24:00:70:3e:d6:
3f:c6:39:b3:35:44:0f:81:a3:89:58:34:b2:c8:fd:
99:8d:b0:7a:0f:fb:9d:a6:76:8a:15:69:12:0e:7f:
50:3c:e4:47:6b:91:ae:26:72:c0:64:ba:05:77:56:
41:c7:22:d5:8d:a1:ff:5a:bd:e8:e0:76:23:e9:05:
f7:f8:1f:b7:a1:2c:9c:77:76:ae:01:00:a7:02:dd:
1c:74:ef:39:6b:6c:7c:13:a2:11:67:47:cc:5a:4e:
83:ec:d8:f1:b7:1d:7e:be:59:0c:62:51:27:73:b9:
ec:fd:e8:35:9b:f3:40:ff:83:14:4f:7a:df:4f:2c:
35:71:81:1c:63:5a:41:54:ec:1e:85:b3:69:5d:65:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C0:D0:56:19:41:9C:36:83:D3:0D:42:11:27:90:26:B7:B3:D6:31
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:db:f9:45:42:b1:e9:ca:62:d8:66:90:a6:7d:9f:a3:c1:44:
55:5e:c7:5b:fb:aa:ce:1c:60:aa:68:7e:8a:ad:1f:f8:54:e8:
3e:9a:c3:de:0a:23:04:57:f2:fd:c6:f6:ba:75:25:05:2b:67:
09:4f:30:d0:df:35:a9:f5:56:46:07:c6:10:cc:9e:b5:29:7f:
93:7a:0d:38:1a:31:6d:32:f2:82:cf:e7:aa:c8:63:3d:1f:c1:
1c:6a:3a:38:84:24:43:27:b4:76:a0:c2:66:e1:7e:f3:04:2e:
e7:74:95:fc:3d:19:76:79:bb:d9:d9:53:62:e3:70:c4:35:0b:
34:d1:ae:b9:e6:43:6a:33:a1:d8:dd:9b:56:b1:c3:df:8e:d7:
9b:ba:b4:1d:5b:f0:67:78:10:93:98:54:bb:82:bf:ea:1c:18:
77:13:83:8d:2b:c4:04:64:2c:3f:23:83:6c:77:c5:b2:c0:19:
4a:70:ce:e7:49:61:79:ca:f6:05:ac:f4:54:18:38:a9:f8:19:
0e:70:74:75:ef:45:e1:53:cb:26:38:ac:02:73:56:73:ad:07:
6a:f9:11:a0:03:f8:2b:a8:5a:4a:b3:47:c4:ed:72:8c:08:5a:
34:2e:c2:1e:bc:a4:ff:0d:37:8e:c4:81:7b:d8:c7:b5:b2:61:
09:b3:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:07:30 2025 by rpki-client