Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: E8q9+kQRyI7IyqwM4yzek6H9G0CRH+3coiGkk1TGZCI=
Subject key identifier: F4:A3:94:29:74:16:EF:EE:1E:E7:59:4F:93:04:D1:E4:01:ED:66:B8
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019921B243EDD040F9ECB6F7732858A0608D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:02:34 +0000
Manifest this update: Sun 07 Sep 2025 01:02:34 +0000
Manifest next update: Mon 08 Sep 2025 01:02:34 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: ck8sJ9edcYlMM1UAMWPsjJ5fXzdTpwYydukm3C+Eu7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:43:ed:d0:40:f9:ec:b6:f7:73:28:58:a0:60:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Sep 7 01:02:34 2025 GMT
Not After : Sep 8 01:02:34 2025 GMT
Subject: CN=f4a394297416efee1ee7594f9304d1e401ed66b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:ea:08:91:a2:89:07:a9:31:72:4d:d1:b2:
e2:4c:d1:d8:3a:dd:ee:fc:f4:3d:ea:7e:cf:64:59:
80:b8:6b:6f:1d:11:1d:97:4b:f4:78:a9:f9:91:f4:
4d:6f:91:ab:69:84:35:48:7c:93:81:13:93:d1:0d:
37:2a:65:04:9e:8e:c1:14:85:7d:b7:84:26:15:c3:
26:1b:ba:92:99:3b:87:84:a5:4a:5f:c0:0b:d2:52:
4d:6c:1b:a8:d4:92:6d:c5:60:d5:da:23:ab:42:b0:
1f:fd:13:c5:c3:a0:ba:aa:ed:cd:07:23:b2:17:16:
64:fa:4d:4c:ca:02:e8:95:ee:97:22:fc:ed:2e:7c:
87:92:0b:1e:cf:5b:c6:10:47:f7:0f:57:ad:50:1a:
5b:0b:6f:4d:12:5c:66:ce:7b:fd:1a:4d:71:2c:05:
1f:0b:ad:17:b3:8d:e8:90:c9:38:ff:59:ca:aa:40:
05:21:dc:4b:03:f1:4a:9a:56:a5:bd:21:6c:d0:b6:
b2:b3:33:b9:ea:01:d2:00:e4:cd:25:98:a5:88:4f:
be:ca:25:f1:41:22:a1:6a:c3:a8:e0:c7:5a:11:08:
24:62:36:28:17:a9:bc:8e:d1:c0:9e:12:4d:18:68:
e3:41:e6:fa:62:01:80:5f:46:43:78:1f:83:ed:af:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:94:29:74:16:EF:EE:1E:E7:59:4F:93:04:D1:E4:01:ED:66:B8
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fa:af:79:74:d0:1b:15:53:24:78:87:22:5f:e9:a6:ed:44:
dd:96:1a:b6:61:a9:25:ce:e1:6a:19:c2:10:81:42:e3:b1:7f:
14:f4:b7:91:69:58:6f:79:c0:e4:dd:11:9c:47:19:47:0d:e2:
cf:93:5a:a6:7c:75:9e:ba:2e:38:8e:43:7e:d6:fa:ee:35:47:
f6:08:eb:24:ad:6e:38:71:8c:06:df:dd:4d:5f:c1:01:c9:d7:
c3:6a:9d:cb:e1:11:34:d6:25:c0:00:f4:40:82:f3:18:a0:be:
31:c6:2e:14:3a:02:85:b0:3f:f2:0a:f8:62:59:fb:31:3e:31:
cc:11:4f:8e:62:b1:71:29:89:02:16:6d:e6:ba:f6:78:3f:9a:
d6:33:40:ae:a9:81:2b:23:d8:9d:b3:c2:18:fb:30:b2:8b:ed:
33:d8:3e:fb:91:9a:26:1e:76:e7:61:d1:06:da:52:7b:13:74:
62:c3:58:0f:6c:4c:f0:0c:77:ef:28:e7:85:57:8d:9c:22:34:
67:ba:35:22:06:37:cb:69:98:2c:e9:ec:ae:fb:7f:c5:2e:bd:
f9:c3:d4:5a:18:b7:0e:d7:e7:e9:71:64:d0:d2:0f:63:83:eb:
a7:da:5c:ce:81:b2:29:8a:f9:35:7c:bd:fa:81:2f:fc:72:27:
95:16:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:19 2025 by rpki-client