
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: GT2IfDz1CeJOK/KI2KLU2SwAjo/tK2TC95zkA8ZyCvA=
Subject key identifier: 6B:14:19:5A:E2:64:FC:C9:A4:DA:6B:06:66:58:F0:22:EC:B9:08:32
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01984A77DD71DA6A57CFC2D3A2859EB1D8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 06:00:26 +0000
Manifest this update: Sun 27 Jul 2025 06:00:26 +0000
Manifest next update: Mon 28 Jul 2025 06:00:26 +0000
Files and hashes: 1: h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa (hash: gMyDoTfbghGyh3Yg7Wcs9Qgp2ODCZ1LcJvPzyuFIMbU=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: vSgvgfGjrGmZ79gtS0pnsa8P9LePLMlIPJpwaGGV+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:dd:71:da:6a:57:cf:c2:d3:a2:85:9e:b1:d8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jul 27 06:00:26 2025 GMT
Not After : Jul 28 06:00:26 2025 GMT
Subject: CN=6b14195ae264fcc9a4da6b066658f022ecb90832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:f1:21:41:44:fa:b6:d5:8d:ab:1b:66:a5:
4f:7d:82:94:4c:e9:70:a5:50:55:f0:2a:20:c2:92:
c9:04:d5:74:9e:32:23:8d:2d:c4:7b:6e:f9:a3:fa:
ee:78:f4:5e:f7:dc:5b:12:fd:1f:0f:c0:a4:e6:ac:
74:16:84:f1:26:2e:fa:37:61:8a:5b:5e:6f:05:a2:
8b:2d:dd:a5:14:97:f3:a3:48:67:b4:a6:7a:9a:32:
56:5d:0e:ee:29:89:73:20:3e:a6:17:d1:9a:1d:c8:
d9:7f:40:b2:7c:c6:0d:1b:bd:bc:69:c0:55:9a:d6:
a0:50:da:13:5f:95:fa:7e:90:a8:6c:fb:fa:7b:d5:
ce:08:60:07:ed:6d:12:77:89:43:8b:1c:cc:d0:ca:
a7:a0:0c:99:46:1a:af:c8:31:2d:0d:4b:8a:c7:93:
fc:07:7b:f6:4c:fc:3b:b1:fa:16:09:8b:5f:f9:f3:
c9:5c:cb:43:1d:f2:1b:60:d1:62:a7:3e:a9:e6:b3:
38:62:9a:18:7b:7a:89:27:cf:a8:64:e2:bf:4a:dd:
17:89:df:bc:a2:f3:50:93:fa:95:25:d8:59:71:d6:
34:5b:4f:ab:69:c8:9c:80:85:82:de:a8:4a:6f:d1:
33:0c:95:7c:c3:7d:1e:a2:46:1d:58:9b:94:75:49:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:19:5A:E2:64:FC:C9:A4:DA:6B:06:66:58:F0:22:EC:B9:08:32
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6e:cc:41:12:ac:cb:e0:2e:86:d8:9e:37:d5:fe:24:51:ec:
b2:30:81:32:ad:a7:58:f6:fc:b1:e7:82:91:4a:36:a2:c6:c9:
d5:63:fb:c9:0e:2a:44:74:a5:fc:de:06:43:41:23:9c:87:f5:
f1:02:f2:47:be:a3:26:fb:b3:ac:27:bc:d9:35:1c:c2:e3:22:
ee:e8:f2:20:c9:fd:c5:dd:ed:bf:48:a1:50:8f:63:42:f0:88:
89:73:92:94:96:04:c1:43:48:54:17:ae:ff:d8:a7:ca:bd:66:
3e:a2:ce:c5:86:30:7f:5d:64:9d:af:26:39:82:70:e7:38:12:
72:67:25:ed:97:12:7b:a8:b4:8e:9c:d8:a0:1f:4e:88:09:46:
f7:28:e0:4b:63:f8:d7:e4:25:37:4f:48:5d:56:70:00:c7:9f:
66:67:68:d5:03:e0:73:58:9a:25:e3:e8:6c:be:68:65:1c:5c:
12:4c:34:96:ec:1e:05:56:10:8b:21:db:3e:13:14:26:63:ce:
c1:99:6b:90:4d:00:25:a9:ff:e1:06:0e:6f:4c:67:4b:92:cf:
c7:0d:98:ed:34:6a:e6:fe:0e:c3:5e:6e:3b:8a:70:c9:01:60:
05:a8:52:84:66:7a:55:fd:17:1b:92:33:2a:85:63:2f:0c:0c:
e6:b1:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:22:24 2025 by rpki-client