Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: bWL3vhLuWgOiAexCfIQUxAeK3OnjYNSYfP+3Nv//UO4=
Subject key identifier: 11:84:65:8D:73:E7:14:B4:63:E2:B2:3F:20:D0:07:13:91:00:DC:32
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 019895C950F162A03101C96DB1D5294A59C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 0411
Signing time: Sun 10 Aug 2025 21:00:55 +0000
Manifest this update: Sun 10 Aug 2025 21:00:55 +0000
Manifest next update: Mon 11 Aug 2025 21:00:55 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: P6kb1xlCfIERl0s+0E1lEVabCBBfNXHP1pUtl6Wl9gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:50:f1:62:a0:31:01:c9:6d:b1:d5:29:4a:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Aug 10 21:00:55 2025 GMT
Not After : Aug 11 21:00:55 2025 GMT
Subject: CN=1184658d73e714b463e2b23f20d007139100dc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:f2:eb:24:c3:52:3a:b4:4c:62:34:56:92:
ee:b2:32:e9:67:69:85:7f:fb:23:05:a1:a3:b5:5d:
bf:b4:8d:f4:fd:1c:34:8e:32:e8:52:ad:09:57:85:
fe:6c:72:39:56:22:74:39:30:fb:04:6a:00:bd:20:
fe:6c:7a:20:3a:36:dc:ae:dd:b5:ba:4b:07:85:bc:
10:7b:c8:62:84:86:04:cc:82:27:57:0e:08:9c:df:
3b:08:d0:a8:a1:a2:7b:48:ed:4f:28:16:f3:e6:44:
9f:28:aa:f2:fd:2c:06:73:78:45:18:00:1b:fc:5d:
45:d1:73:8d:00:ca:a0:34:37:df:d2:b6:87:91:be:
fa:d3:5c:87:47:f8:b9:fe:d0:ae:e7:10:07:a0:7f:
1a:81:1a:0b:4b:ad:8d:20:5f:e9:97:49:8a:72:d9:
ba:f9:be:c1:ba:05:ad:90:42:3d:59:89:c1:b8:d5:
b3:16:4c:15:89:f0:c5:3e:1a:a1:50:cc:d0:c6:5b:
58:74:40:2e:77:c2:56:a2:40:3c:19:69:43:7f:cd:
1b:41:bb:9c:2a:27:d2:03:b1:86:ab:b4:90:fb:c0:
9c:62:d8:75:4b:04:1c:e6:9d:05:30:bb:85:d9:ce:
6f:b5:fd:a8:76:a7:9e:75:86:67:a4:87:3f:e9:e3:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:65:8D:73:E7:14:B4:63:E2:B2:3F:20:D0:07:13:91:00:DC:32
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4c:d4:80:d9:c9:9b:01:ab:65:a5:aa:82:6c:e0:ed:4c:4c:
ad:7f:c0:47:df:8d:e0:1d:d7:39:8e:43:13:9e:99:e3:cc:93:
26:31:eb:b4:2d:de:be:11:10:36:f7:f9:cc:bb:bc:ee:e1:0e:
e4:84:fa:12:a2:27:40:11:70:d1:f1:35:96:1d:f7:31:a7:f4:
f3:79:32:92:e0:24:31:4f:19:f8:18:75:60:a5:f8:54:39:d0:
67:73:f7:10:19:b6:b0:b7:26:eb:4b:09:87:14:60:e8:76:62:
84:ce:dc:79:d4:85:d3:b2:1f:79:7d:30:39:30:e7:38:8c:a5:
cb:e0:04:81:ee:74:39:6b:6f:c8:07:9a:e9:bf:aa:4e:9f:1b:
0b:15:ef:90:97:c3:ce:56:ef:10:e3:05:d4:36:6f:22:63:a2:
7f:79:69:9e:cc:a0:92:d8:a4:d1:cf:cb:df:fe:d6:6c:fa:f1:
70:27:3b:56:c0:21:51:d8:4a:eb:7b:2c:54:4c:75:3f:5b:6a:
b6:a1:ec:ae:23:40:b0:0a:39:45:cb:b8:2e:1f:ab:af:3d:27:
69:b9:d1:49:b2:09:f5:ce:33:de:29:4a:ab:4c:9d:a2:d8:52:
20:14:9a:80:75:b3:e5:5b:fe:74:c4:c6:c3:f6:43:10:79:a9:
e4:b3:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:21 2025 by rpki-client