Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json)
Hash identifier: 7AihZRntnNuht+Es0IitX/rcexFF3RkIJZYHdH2HGQY=
Subject key identifier: ED:F8:17:FE:04:D3:34:8F:20:17:32:59:67:F9:57:4B:F3:99:7F:23
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 019922C3A39FDC86ABF3D0A1B78E0E9D28AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
Manifest number: 22
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: o4QGe1oVFAvlinc81nAuNrtMaoE.roa (hash: gIUvO01SqzkXQhjCsB61bL9/pNHUHKOGVQndKRDnyOA=)
2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: jBb3G6e9FNrh5/apbqcGqodKy3aZKWjeNcLpcE7Rfrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a3:9f:dc:86:ab:f3:d0:a1:b7:8e:0e:9d:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=edf817fe04d3348f2017325967f9574bf3997f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:ed:54:51:d5:da:19:ac:88:ea:a4:10:d7:
cc:05:71:d5:3b:c7:cd:ad:d0:95:53:e3:d9:9e:af:
65:0d:e4:36:dc:f5:ab:ba:d4:d6:7b:40:cf:04:84:
b8:14:3d:e3:f2:84:6d:b5:76:b9:3c:ca:63:5a:e3:
4d:4c:d7:7d:25:1b:0e:8c:5a:8f:40:32:e7:5d:95:
b8:c6:87:4d:b9:5d:1b:de:83:82:71:bc:9d:c5:d8:
c0:cf:7c:a7:25:48:df:f0:93:cd:75:df:c6:bb:1b:
31:32:7c:14:87:eb:99:f1:db:46:6b:e2:fb:07:80:
04:4d:b1:10:06:da:31:fc:4f:01:c3:33:9d:5f:f1:
de:70:24:cf:f8:3e:28:09:6f:dc:95:38:aa:a5:d1:
e9:d9:d6:06:8c:01:30:3c:16:ba:ac:0a:52:87:53:
da:4b:21:63:24:41:81:30:20:26:52:75:26:03:fb:
03:dd:49:c3:4a:51:1e:ef:27:5b:cb:10:e1:dd:d6:
a4:79:09:a1:98:90:17:58:fa:27:ae:e6:b3:c7:3b:
50:af:6a:06:e6:d9:25:79:1f:26:e2:a5:7f:e8:3c:
6a:a1:71:6a:28:f4:39:77:be:e2:6d:cc:c4:28:d5:
5a:1d:04:e8:61:a5:c9:ed:11:a1:70:e6:bf:92:fa:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F8:17:FE:04:D3:34:8F:20:17:32:59:67:F9:57:4B:F3:99:7F:23
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:72:80:87:f0:59:fc:89:1b:f0:64:ee:fc:1b:bc:d6:0b:
8f:c4:2c:11:db:22:54:31:17:70:b8:71:8d:15:c1:c6:fe:93:
21:07:fc:3e:89:b5:56:8b:b0:75:2a:63:c2:18:c2:42:59:eb:
46:13:49:a0:4d:ef:0c:82:e2:8b:0c:d3:75:c1:2a:17:29:d1:
b8:ee:e1:3a:9a:a8:51:75:51:81:ee:6e:1c:ad:c9:ff:5d:9a:
2e:09:98:b8:e5:e6:25:bd:dc:ce:66:a6:8a:b7:4b:4f:98:a3:
bd:cb:9a:d9:fd:d6:69:d6:d2:7d:d1:2a:79:9a:37:a1:0d:33:
e9:0d:76:1d:1d:bb:4a:8c:c0:0d:ac:16:11:d7:58:79:0d:d6:
2c:f6:04:f5:da:85:af:4f:3e:9d:c9:bb:f2:84:4b:42:37:6c:
dc:2b:b4:c8:60:87:ff:d2:49:e2:09:1a:0c:95:8d:60:5a:c0:
a0:d1:1a:99:ef:1e:d3:eb:f0:4e:73:7c:11:11:6c:df:9a:d7:
2b:ae:07:ed:56:18:cf:7a:7e:d8:da:62:bb:a8:ce:c5:d8:8f:
ab:84:c2:24:18:c9:98:b3:85:ae:54:a0:ae:05:79:64:e7:81:
8e:9f:e7:08:72:d3:0c:e6:73:30:8f:b6:90:73:c7:2b:00:f3:
63:47:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:03 2025 by rpki-client