Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: biIVr9BbewjDhmLTYArtFSMKENzyBEY+sYcvXTXlexA=
Subject key identifier: DC:6E:B4:17:2E:C9:2B:78:F1:44:01:2E:27:62:13:A4:CC:F9:2C:2A
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 019923A0D023D38CD335B6753057AEB39A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:02:45 +0000
Manifest this update: Sun 07 Sep 2025 10:02:45 +0000
Manifest next update: Mon 08 Sep 2025 10:02:45 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: hAVWhkIIgJIGLB7310KECiin7EqQG5ud2AwTLu1BmtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d0:23:d3:8c:d3:35:b6:75:30:57:ae:b3:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Sep 7 10:02:45 2025 GMT
Not After : Sep 8 10:02:45 2025 GMT
Subject: CN=dc6eb4172ec92b78f144012e276213a4ccf92c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:df:83:4d:97:ec:29:c7:d1:95:90:81:83:
63:6d:9c:d7:57:49:26:8f:d2:7e:76:cc:83:13:10:
01:fa:9c:55:16:80:88:3b:37:1c:d7:77:6d:de:d2:
20:38:ee:64:bd:97:38:9e:88:62:a5:4f:c4:c7:ce:
2c:6a:9a:95:9f:4a:df:dc:76:d2:c8:13:18:14:f8:
61:70:d8:6a:68:72:b2:43:04:b1:e6:a9:f9:86:25:
50:84:10:61:2b:aa:30:cf:2c:a7:7b:2f:1d:a3:b0:
d3:38:ab:14:3e:56:f0:de:24:09:db:59:b8:14:8c:
1d:74:f8:bb:c2:58:85:fa:b1:c7:c6:c1:72:bb:35:
0d:79:5c:1d:57:ed:07:ad:eb:05:bd:86:fb:fb:94:
54:6d:b8:8a:8d:83:80:76:05:a9:2e:f2:2e:be:26:
2b:49:99:04:a2:fe:18:3c:de:da:09:44:b7:c0:98:
43:be:76:4a:de:42:e4:20:a7:e4:56:48:d4:3a:7d:
08:42:31:7f:ad:65:62:51:05:55:24:e9:0b:53:5f:
48:e5:79:5e:3c:f7:ba:13:1a:db:b7:04:55:2f:bb:
76:bb:9d:d7:d6:3e:4e:a8:f6:f5:11:ab:3f:f7:e4:
75:03:a5:d5:d1:99:ed:e6:dc:34:a5:08:b6:ca:fd:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:B4:17:2E:C9:2B:78:F1:44:01:2E:27:62:13:A4:CC:F9:2C:2A
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8e:1c:59:87:b6:09:34:81:59:1f:83:7c:dd:3b:9a:32:c5:
74:86:8f:c2:8e:f3:c2:77:c8:d0:f0:1d:c3:c3:48:08:d3:ad:
f8:d1:7c:b5:ea:3c:e4:c7:56:5a:40:e8:c3:a0:ce:0a:ef:a7:
a6:36:76:49:44:fa:85:c4:47:4a:ff:d1:75:01:30:6e:8e:c9:
a0:96:7b:ca:fa:43:64:16:4a:15:f7:29:e7:36:01:0f:30:72:
05:cb:38:43:4f:22:25:02:61:b9:2e:8a:d1:4f:7e:5f:96:d2:
73:9a:fc:ee:7c:fd:4f:80:74:78:66:ea:09:1b:a7:db:d9:ca:
1f:e9:de:30:58:b1:1c:d4:17:f2:b0:14:09:51:f7:ca:c6:1a:
03:45:f3:ec:78:be:33:a6:b8:95:6d:2b:79:45:26:2f:dd:36:
95:91:36:5b:c9:f1:dd:98:09:7a:ac:1c:21:07:6a:bd:ad:8d:
44:5d:34:03:79:08:12:c2:37:28:58:70:92:a9:99:54:6a:96:
fa:4c:d3:cf:9b:7c:f8:fe:ed:06:da:24:c2:ee:91:d6:68:df:
8a:b3:c0:c6:b3:56:d5:f9:98:2c:c7:90:c9:0c:76:81:d1:2e:
4d:bd:29:e5:87:1a:22:89:f9:bc:5a:17:1f:16:f0:e4:33:a8:
25:a2:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:58 2025 by rpki-client