
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier: MnypjKR/exRkhk0I8zPVdDdzfTJvF+lzAdGECvMhePc=
Subject key identifier: DB:BC:F1:6A:A8:31:56:7F:E0:4B:53:08:3E:DA:0F:DA:5A:86:AF:52
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 01988B7CFE5C45CBA23FA4B2DB417E777642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number: 1301
Signing time: Fri 08 Aug 2025 21:01:21 +0000
Manifest this update: Fri 08 Aug 2025 21:01:21 +0000
Manifest next update: Sat 09 Aug 2025 21:01:21 +0000
Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=)
2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: 9E43dd6T9jmbsuZ4hNtEunC0Q9aHTDKghkLCHqFQruQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:fe:5c:45:cb:a2:3f:a4:b2:db:41:7e:77:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Aug 8 21:01:21 2025 GMT
Not After : Aug 9 21:01:21 2025 GMT
Subject: CN=dbbcf16aa831567fe04b53083eda0fda5a86af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:f2:60:91:1b:e8:07:e7:82:22:c7:18:20:
c3:f0:09:ca:a3:56:73:8f:e0:1d:06:22:57:1b:61:
02:49:2a:dc:57:b0:af:6e:fc:d5:5e:c3:bb:fe:89:
0e:ef:6c:6e:01:de:e3:ae:67:88:5b:88:45:c3:06:
e8:b3:ac:05:ac:21:eb:48:e9:5d:a5:4a:81:1c:10:
bc:2d:b4:0b:0b:72:51:a1:9c:5b:7a:41:d3:e8:d1:
4b:4b:c8:a6:ec:4b:b2:57:67:28:c8:9e:85:b7:58:
0d:b9:68:16:cd:90:50:71:e5:0e:9d:55:c5:f7:f7:
61:56:a7:83:e7:0c:be:ea:40:d9:9f:68:93:0f:87:
11:0c:0f:a9:2c:2f:ce:58:3c:ac:bd:4c:9a:81:1c:
ed:49:39:93:dc:67:33:fa:ad:c4:e6:c9:41:00:0f:
e6:1b:f2:30:b6:16:1d:cd:e5:52:18:ed:27:96:05:
36:92:d4:1b:3c:69:b7:c1:29:6e:b1:6e:53:2d:15:
d1:d6:0c:63:80:98:44:73:b2:5d:fb:9e:97:62:fa:
95:27:1c:26:fc:13:85:19:1c:38:a4:b2:5a:83:0c:
89:39:cf:c6:d8:01:52:10:cd:d5:a6:f0:2d:70:5b:
68:cd:30:4a:a5:9b:a8:b1:0b:23:3e:52:ea:81:de:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:F1:6A:A8:31:56:7F:E0:4B:53:08:3E:DA:0F:DA:5A:86:AF:52
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:6d:58:d5:97:d4:a1:dc:41:93:97:80:27:b6:b6:c7:2e:
91:25:b9:6f:da:52:34:b0:cb:21:ab:39:e9:1d:a9:73:e0:f6:
5a:9d:95:9a:fc:c0:b3:01:92:23:6b:13:87:32:89:d2:ed:a6:
61:e1:52:dc:59:6f:57:3f:d6:03:7e:26:bf:61:5d:c6:82:d1:
15:89:30:58:22:da:f1:36:06:b1:50:8f:51:2d:ef:bd:e8:33:
7b:7b:ba:9e:d4:e9:b5:b4:dc:7c:89:3f:6d:11:12:8a:a5:19:
4a:9d:f4:ba:77:b2:b2:23:ad:e8:9f:59:b8:9e:74:f1:6b:6e:
71:53:24:67:05:df:e8:df:bb:9f:77:a2:9b:c7:a7:4e:e3:24:
1c:25:1e:90:ca:c0:42:ab:5f:1d:e0:78:88:c5:fa:25:ea:90:
97:ae:29:b9:8c:98:e3:43:6c:56:35:ae:ed:9e:71:7d:58:78:
8f:23:fd:1d:12:3f:0d:a0:74:b6:72:54:07:76:71:91:e6:41:
cc:a7:8a:cc:fd:5e:b0:b6:d1:ca:20:55:29:07:ad:17:7f:d3:
44:3d:37:59:55:83:3e:18:4a:5c:5f:ff:60:84:e5:b5:83:b1:
48:2a:d2:0d:f0:ad:0e:95:f3:ca:09:eb:26:8e:a1:d2:fd:af:
40:4d:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:17 2025 by rpki-client