Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: fdE14v3AFveE9U9Kkawfz0u594ZPz7iW5H0HSa9cF68=
Subject key identifier: 3A:0E:76:40:25:15:26:EF:91:51:B4:23:35:CE:2C:FB:C9:EA:75:CC
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 01989FDEC02A6F27E4F61167BF8A13F587C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1631
Signing time: Tue 12 Aug 2025 20:00:32 +0000
Manifest this update: Tue 12 Aug 2025 20:00:32 +0000
Manifest next update: Wed 13 Aug 2025 20:00:32 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: ouDCBpS0faN3ZtEml4K6tJkGkNnd9jgC8+ItTtv36xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:c0:2a:6f:27:e4:f6:11:67:bf:8a:13:f5:87:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Aug 12 20:00:32 2025 GMT
Not After : Aug 13 20:00:32 2025 GMT
Subject: CN=3a0e7640251526ef9151b42335ce2cfbc9ea75cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:44:ee:b7:f6:64:01:ad:6d:e4:5e:dd:6f:
4e:49:70:78:06:90:c9:ca:a5:9c:ed:bb:0a:71:f7:
17:a9:54:f2:3c:ef:3a:d1:6d:1c:75:67:1e:ba:76:
e5:b3:92:06:c7:b5:7d:f9:af:32:12:7a:8f:41:03:
38:60:c1:03:f6:3c:09:26:fa:df:b0:f3:1d:3a:98:
ff:ad:d9:30:c6:71:a6:9d:df:c6:7b:d0:8d:f0:6f:
da:0b:bd:0f:6e:f0:93:87:cc:26:85:f1:aa:3b:68:
21:10:8a:ba:c4:56:f4:90:f4:d7:5a:2b:3e:70:3b:
11:de:64:e1:aa:64:ee:81:d2:7a:8c:ae:87:77:62:
b8:78:3d:20:ea:05:5c:3a:24:f3:51:f1:22:ab:4d:
ba:ea:db:ee:d4:67:12:8d:30:e6:60:c1:2f:cf:1c:
7c:60:0e:b4:f8:e8:ad:f9:32:d7:94:11:66:c5:c5:
16:9f:f8:31:c4:d4:37:45:9c:5a:45:c9:96:e0:74:
6c:86:81:49:e8:6f:0b:6d:c9:d1:21:5e:b5:11:a1:
b3:32:47:13:bf:18:a3:12:3f:85:06:2d:9c:85:ba:
74:d0:43:88:cb:ac:e3:68:9e:c9:1a:86:c3:3e:dc:
e4:e4:89:78:4b:3c:2a:66:f3:f5:30:d4:07:ef:f1:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:76:40:25:15:26:EF:91:51:B4:23:35:CE:2C:FB:C9:EA:75:CC
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:d4:ab:92:ce:15:12:08:98:2b:87:64:e3:a2:39:3c:a1:
0f:64:c7:10:02:2a:28:16:b3:33:80:01:33:c5:c0:6a:11:be:
da:b3:54:a8:9e:2e:f0:6f:27:78:88:33:17:49:9f:a2:3e:a0:
c2:79:cc:08:ea:92:b7:05:d6:eb:4e:53:2b:a9:f0:97:6f:e6:
95:9f:95:62:fa:b7:d2:51:12:ab:25:c6:33:56:8b:4a:3e:ac:
2c:b0:2d:f1:a3:bf:9e:35:17:ff:6b:3e:77:46:95:b4:a0:15:
60:d7:4f:0f:4e:48:31:d7:2a:8f:47:aa:a2:80:91:80:4c:b4:
ea:5a:02:ef:d2:54:c4:25:5f:a7:46:ee:04:44:49:81:16:f1:
10:33:ff:b9:00:6d:1d:01:3a:25:f1:b5:06:87:50:7f:d8:f5:
17:0d:30:ec:01:b4:e3:59:6b:d2:6b:a1:83:9d:4e:a6:4f:c5:
a6:f8:55:17:73:97:ec:e7:c3:34:3d:d4:db:18:a6:97:9c:b0:
c0:85:64:96:df:6b:ec:4f:55:20:22:dd:72:91:c1:52:30:28:
8b:bd:60:76:a8:06:3b:59:dd:dc:53:89:6e:65:e4:46:4a:55:
c0:c2:3e:5e:28:14:ef:d3:16:13:14:39:07:ec:d2:78:4f:bb:
e7:a0:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:39 2025 by rpki-client