Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: AI2/OvZ/ncK5oQf6u4XvFoQn1Jd8/CVGktRgcIt9vvY=
Subject key identifier: 94:61:0C:2E:CF:D1:E7:02:FB:2C:F1:28:0E:75:D3:94:CB:D8:67:DD
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 019922FA5F3F52F6211D3E894A2B3C51DEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: BJ8DTeJiFrKUeQyXaYzdLY642uBvmzdp5zjSgoW0OJs=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5f:3f:52:f6:21:1d:3e:89:4a:2b:3c:51:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=94610c2ecfd1e702fb2cf1280e75d394cbd867dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:1d:55:3a:6e:e4:66:b2:3c:da:ac:6b:79:
06:08:9b:2b:91:ea:85:53:4a:67:22:58:67:65:12:
ef:69:6f:0e:2d:2f:8c:e0:bb:97:1b:f2:7e:aa:27:
69:06:73:c2:6a:96:85:f3:b6:c4:bb:48:67:db:2b:
41:cd:8d:bd:cb:48:df:5d:d6:96:5c:e7:30:8a:5d:
0b:f7:92:78:9e:96:c9:e4:53:cf:01:72:ed:44:30:
3f:9c:22:06:90:0c:fb:49:2a:32:c8:b8:71:d4:33:
54:18:2d:b0:32:f2:d9:09:20:2d:ce:07:72:23:93:
a1:b3:96:11:05:01:d1:b0:56:25:a0:14:f5:08:55:
e7:91:39:be:4f:34:0b:3c:33:d7:9b:da:62:31:c8:
24:1a:6e:68:2e:a8:bf:66:ab:21:ff:29:72:6f:54:
54:61:02:9e:36:02:08:93:be:0a:ad:e9:18:84:63:
08:e1:7c:ea:4e:5e:81:64:4c:ac:be:e4:85:85:57:
b6:f7:36:53:4c:91:53:db:60:e4:af:b9:8e:3d:88:
ad:6c:ad:91:f0:91:d8:67:0c:1c:bd:6a:7e:c0:ac:
72:38:b6:86:e6:02:83:e9:52:71:82:35:c6:f6:13:
fe:be:64:62:15:ea:fe:e3:28:cc:bc:4a:17:12:21:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:0C:2E:CF:D1:E7:02:FB:2C:F1:28:0E:75:D3:94:CB:D8:67:DD
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f6:0e:8c:b2:11:02:16:3f:33:29:f2:7a:5c:c1:a1:57:f9:
10:e8:fb:ce:cb:b6:08:e0:1c:1c:81:52:73:3a:9f:85:e7:f6:
ef:4d:2c:0a:e2:13:7a:03:70:b1:02:9a:a0:aa:9b:f9:bb:65:
39:83:ca:ab:b9:73:7c:5c:45:67:0c:8c:8e:09:87:ff:8c:4d:
87:d7:75:99:86:07:fb:2b:83:75:3d:5a:cf:9c:41:14:58:ce:
59:8d:34:dd:fa:b1:c3:c2:c8:38:cc:eb:23:ed:99:cb:a2:d8:
a2:0e:bd:ae:56:9e:57:d7:a7:a5:70:af:2c:77:92:79:ca:c4:
37:a5:bd:a9:9b:f1:db:86:a7:95:4d:48:d9:81:32:81:3b:79:
df:00:37:12:ce:06:5a:ea:cf:4f:fe:33:29:d5:49:56:07:0a:
4d:3d:09:13:10:18:44:c1:85:5a:ef:5d:6d:12:17:73:1a:de:
11:66:70:40:4b:6d:8d:5d:77:be:dd:72:c4:6a:20:df:c8:b0:
ea:4d:c6:59:f0:99:d1:56:cb:47:fb:1f:a8:50:eb:92:fb:c1:
9f:2b:ba:79:40:f8:02:9d:78:3b:72:a6:d8:94:c9:75:51:94:
22:1f:9a:28:67:c7:0e:8f:48:e1:ac:35:cb:cc:34:c6:59:47:
ee:bb:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:06 2025 by rpki-client