Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: /JzQVc5Eom6EXkm+SU7GaZx8RCaa65NG9yMikoEpzs4=
Subject key identifier: E9:FD:1C:65:7B:B8:25:E7:38:0B:DC:AA:A0:D3:FE:BF:C0:52:B3:31
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0199307F291741470377B33F2A734AC64A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 1073
Signing time: Tue 09 Sep 2025 22:01:03 +0000
Manifest this update: Tue 09 Sep 2025 22:01:03 +0000
Manifest next update: Wed 10 Sep 2025 22:01:03 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
7: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: PyonI/VRyV8RGI8/Xsq9zX6EkzYiJdaMFscQnc2Gxkg=)
8: xAgFfQaKEowdS70V9zbgoKMLSaw.roa (hash: hfLCxfCTfbaf8X5vKcrUM1lSCKQfVXa2EeKuQXwH66I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:29:17:41:47:03:77:b3:3f:2a:73:4a:c6:4a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Sep 9 22:01:03 2025 GMT
Not After : Sep 10 22:01:03 2025 GMT
Subject: CN=e9fd1c657bb825e7380bdcaaa0d3febfc052b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:43:0f:97:4e:14:80:bb:db:3f:62:79:ac:
21:5f:4b:ac:7b:e5:70:d8:66:eb:75:db:5d:ad:af:
ba:25:56:e3:c6:b0:c5:56:1e:8f:31:00:01:af:74:
43:b4:2f:33:b3:34:13:fc:43:99:52:0c:18:ce:32:
26:44:53:e2:01:bf:01:59:d1:ad:33:78:40:88:b9:
1c:aa:7c:3c:59:3a:f1:31:10:c2:ce:9a:6b:2c:4f:
56:d3:f4:46:8e:4f:b7:a4:34:64:5b:f8:2c:ca:09:
7d:9f:a7:69:1f:83:3c:2c:11:31:33:6b:d9:13:eb:
da:cf:d9:14:45:46:ac:60:f1:13:d0:96:55:bd:4a:
1e:43:1f:f5:49:6c:3a:5e:64:fa:7d:dd:80:29:f2:
01:fa:ab:3f:89:bd:25:a8:e7:c1:94:3c:fb:17:8a:
7b:7e:52:63:aa:04:f7:f7:97:2b:6c:08:78:1f:12:
42:82:46:80:74:2f:5b:af:d0:03:4c:ad:6f:c0:8d:
24:ad:b5:e6:2f:e8:af:00:34:16:b2:fe:83:6c:81:
02:b1:9b:ea:46:a2:15:a5:30:6c:96:34:dd:ee:85:
08:e1:29:ef:02:e5:61:94:3b:7f:99:5d:3d:79:ed:
9c:07:0c:e9:23:97:97:8f:28:48:53:2d:0a:0c:59:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:1C:65:7B:B8:25:E7:38:0B:DC:AA:A0:D3:FE:BF:C0:52:B3:31
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:9e:27:5c:2c:f6:a0:96:c2:40:9c:8c:b0:53:bf:6b:91:
01:00:ef:1e:54:3b:45:53:5d:f0:a4:96:01:49:44:52:2a:f6:
ba:65:de:6e:2f:0d:5b:50:29:b5:59:c2:38:7a:ef:72:07:e5:
7b:f2:c8:0b:22:e9:ce:6e:30:9b:1a:2a:1c:04:e3:95:13:9b:
f8:a3:c7:85:0b:3f:15:47:e3:70:66:1a:5e:f3:08:ed:70:65:
c0:54:ee:38:ba:74:68:2e:b6:08:fd:2b:d7:9a:28:4e:b1:fb:
f3:60:c5:09:9a:f1:56:35:23:7a:c1:13:b4:d2:24:92:82:db:
82:07:f8:8c:b2:dd:56:dd:cd:1f:6c:2b:28:a2:d9:fc:b4:0c:
e1:fd:61:9d:41:35:07:7c:e0:ce:33:ca:eb:54:be:50:38:83:
d6:18:1d:62:c3:90:d7:90:be:55:15:9b:bb:a6:50:d0:27:5d:
0f:11:55:6d:34:ea:f7:38:a2:35:50:29:e9:37:3e:c7:73:91:
73:eb:28:f1:d9:df:66:cc:a6:dd:2c:39:77:cc:ba:6a:ac:b7:
82:ad:96:0a:f7:7c:a6:da:78:94:89:a5:71:d5:5c:ee:4b:91:
c3:e4:70:2f:24:25:a8:2b:62:2b:7b:9c:ac:7d:c5:85:45:a4:
51:19:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:46:54 2025 by rpki-client