Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: l68fc13XE+f/8+8/+jJpKMooYJOgd3EgX9SUuNWi/Lc=
Subject key identifier: 21:EA:F5:1B:04:8F:38:64:91:F7:CF:E1:A2:71:72:CA:46:8F:76:DC
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 0198944855EB8C232231505988BE010E217C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 0F4D
Signing time: Sun 10 Aug 2025 14:00:25 +0000
Manifest this update: Sun 10 Aug 2025 14:00:25 +0000
Manifest next update: Mon 11 Aug 2025 14:00:25 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: VklyDSjzGfprUbzkNXgQ2Dvpo/ZHwDWLCCXzMXs2Qpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:55:eb:8c:23:22:31:50:59:88:be:01:0e:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Aug 10 14:00:25 2025 GMT
Not After : Aug 11 14:00:25 2025 GMT
Subject: CN=21eaf51b048f386491f7cfe1a27172ca468f76dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:3a:b9:a0:4f:45:03:f4:3a:bc:5e:e3:8b:
52:18:a0:26:7e:78:65:d1:a4:ae:c6:a7:ce:34:ec:
ac:51:aa:70:0b:ed:a2:3d:a8:90:17:7f:57:c2:8b:
5c:0e:d5:50:14:b9:b0:65:91:7f:8f:51:0e:f3:5b:
5d:35:48:cd:47:14:f1:ae:1e:76:ff:99:ad:80:29:
be:a1:dd:8c:e8:ad:d5:6e:d2:56:d5:4b:db:3c:36:
ca:bb:53:3f:af:c6:fb:d3:d7:c1:c7:23:a8:33:9a:
c5:9d:80:35:71:c3:6e:fd:95:ba:32:a5:35:0e:2a:
0a:5e:05:15:57:90:8b:32:8d:80:50:06:79:af:57:
de:c2:7a:5d:fe:41:13:cd:37:77:4a:ad:74:a0:f0:
13:87:1c:43:b7:74:1d:c9:4a:5f:dc:cb:15:20:8a:
d7:79:95:3c:8b:1f:96:42:35:f1:cc:da:e5:f7:b9:
33:7a:1e:9d:42:79:b3:70:e9:a0:f8:5b:69:60:86:
b9:d3:4e:75:a3:fc:29:87:91:8d:70:dd:b3:ab:1e:
94:0c:c1:a7:d6:90:29:c8:78:a4:eb:e1:1d:77:78:
28:08:43:72:ee:ae:15:03:6c:5b:4d:21:85:e2:de:
72:52:4f:5c:68:bc:33:d2:7c:d0:25:ce:5a:2e:da:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:F5:1B:04:8F:38:64:91:F7:CF:E1:A2:71:72:CA:46:8F:76:DC
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e2:cd:45:7e:27:fa:d3:7c:6d:60:96:15:ab:c4:d2:1b:7c:
bb:9e:50:16:d9:83:cd:b4:19:67:50:b6:5e:fd:13:26:11:8b:
08:58:1e:ae:7f:17:09:92:ff:a9:a2:fd:24:e4:0d:5f:01:94:
fc:f9:8f:b4:a4:f4:4c:1b:3d:02:ca:ae:44:b8:e9:bb:6a:07:
c6:83:20:e1:82:1f:05:76:34:a4:82:e7:bc:0a:17:bb:b4:38:
8f:31:08:01:cd:86:10:95:ff:04:d3:7f:f1:3f:51:7e:14:40:
c0:18:82:1a:90:56:63:ca:d9:78:96:6b:a7:37:61:f2:e0:6d:
55:e4:0b:f8:70:d2:a7:64:1a:b3:a9:6d:7e:fa:b1:ea:aa:8e:
cd:af:c4:58:5e:bd:4d:7a:2e:05:49:42:57:7e:26:6d:79:34:
03:a1:c2:8c:46:81:a2:eb:22:75:c4:f8:08:b1:a7:88:dd:06:
32:7b:78:f1:ab:1c:f8:cf:f1:3c:a8:56:fa:bb:3e:b0:6f:2d:
a4:8e:4a:dc:ea:10:56:2d:29:6d:8c:d4:18:c1:b7:24:76:3e:
ee:7d:ce:5a:40:eb:ae:b4:14:01:dd:11:7b:2f:ce:b6:51:fc:
04:8c:2a:c6:b0:af:f4:42:10:1d:80:62:7d:44:e6:57:97:10:
4e:c0:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:55 2025 by rpki-client