Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: CT2o+MowVYSNy45USPSeTX1ap+Bfq24j3+Ar4WJLVg4=
Subject key identifier: A2:9F:72:94:E5:9B:EF:22:9A:5A:C6:88:CE:E1:AF:39:4B:16:17:FC
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 0199315A9975E75DB2F00136D65E05C9E048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 02:00:45 +0000
Manifest this update: Wed 10 Sep 2025 02:00:45 +0000
Manifest next update: Thu 11 Sep 2025 02:00:45 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: rptxtfZJTB+s9hZxAP5BeO/p0tzdEFfMcf/45XKk8es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:99:75:e7:5d:b2:f0:01:36:d6:5e:05:c9:e0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Sep 10 02:00:45 2025 GMT
Not After : Sep 11 02:00:45 2025 GMT
Subject: CN=a29f7294e59bef229a5ac688cee1af394b1617fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:51:6d:61:a6:6c:36:c9:dd:45:88:06:07:
98:22:52:0b:1a:dd:8a:83:5b:5d:3c:7a:e2:99:c7:
92:3a:c6:1c:e3:b6:c1:22:de:00:a8:85:65:af:30:
9a:af:1b:1d:e0:20:c4:52:91:85:8c:7d:d8:14:9f:
4a:b4:39:92:8e:b8:7d:bf:b4:d9:c0:bc:cc:30:64:
5f:bb:25:77:37:83:13:b3:34:81:aa:58:26:88:0e:
e1:57:40:b9:ac:43:8d:ba:d4:e8:59:25:d5:2c:f2:
43:15:f1:94:77:17:64:ab:ae:e1:65:f9:d8:ef:06:
68:b5:4b:e7:a6:f8:b2:63:6a:ad:e0:c8:09:2b:d4:
18:b1:7d:05:ab:79:e2:13:7a:f8:85:c9:26:fe:90:
d1:2c:3e:4a:7e:3a:b4:f8:84:6a:db:11:eb:b3:7b:
c9:e5:17:3a:da:e4:c9:f3:5c:bd:f9:ed:fd:25:b0:
da:4b:3b:e5:0c:ab:84:47:5f:c6:ba:b6:80:fe:a2:
1e:fb:e6:b7:d6:a2:26:46:74:65:37:19:aa:32:95:
b4:b2:e3:09:45:cd:ef:f0:30:95:2e:d5:c3:7f:80:
69:c8:59:aa:dc:47:ad:b3:82:b4:4b:f7:03:7c:3c:
f3:08:2e:7f:e7:a8:f8:82:69:42:53:48:9b:51:33:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:72:94:E5:9B:EF:22:9A:5A:C6:88:CE:E1:AF:39:4B:16:17:FC
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:d2:64:4c:88:ae:bc:01:6b:3d:fc:62:fe:b5:78:bd:fb:
38:85:fb:8e:38:79:65:89:90:d8:37:37:68:17:cc:34:ae:04:
88:5c:70:23:d0:9f:9e:64:d6:ba:e7:cf:5c:b4:3b:72:1d:92:
4f:d4:5b:78:26:e1:d4:ef:45:03:73:b6:10:7d:79:49:72:3c:
91:2b:0d:f8:37:45:a6:47:1d:5a:6d:8b:ff:e5:51:0e:4e:23:
43:29:61:28:84:a0:8d:6a:aa:c3:c4:f4:39:46:a1:82:42:0c:
11:d5:30:ba:18:3d:14:66:3c:13:8a:b8:38:92:f8:38:da:bd:
f4:f4:fa:e2:4e:d8:4d:6f:c0:48:c4:9d:1a:11:3e:65:99:a1:
e0:1b:81:b7:9c:d8:af:1d:a4:22:fc:35:38:83:88:f4:54:d1:
00:03:f6:61:e9:38:3b:f3:00:ae:85:23:3c:4c:01:04:d3:3b:
dd:2f:e1:23:a8:eb:3c:d8:d7:4a:56:bc:c3:36:ae:f4:3c:b1:
5d:7b:0a:99:aa:39:6d:96:fe:6b:c9:5c:0c:2b:b4:59:f1:b2:
46:98:c1:c0:e9:5a:e0:76:03:0a:cf:da:fd:76:bb:b9:c1:00:
a8:e8:1d:d8:86:3e:c0:c5:23:0f:fc:1a:0c:6b:1e:bd:0c:c0:
7b:27:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:14:04 2025 by rpki-client