Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: nU+So/fj8qR+aUgTRCg9jvcuJY5JB7Yoz4cRf1sFhew=
Subject key identifier: AC:22:2B:D5:5C:EA:05:FC:B2:0C:B1:8C:39:01:30:A5:21:3E:7E:6A
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 01989DF0902AB1D298615575C332FB0B32C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1631
Signing time: Tue 12 Aug 2025 11:00:45 +0000
Manifest this update: Tue 12 Aug 2025 11:00:45 +0000
Manifest next update: Wed 13 Aug 2025 11:00:45 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 1TTadgvzl77JT2cLWmQW9nGA4i8dFDl+pzkwU9Cv2Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:90:2a:b1:d2:98:61:55:75:c3:32:fb:0b:32:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Aug 12 11:00:45 2025 GMT
Not After : Aug 13 11:00:45 2025 GMT
Subject: CN=ac222bd55cea05fcb20cb18c390130a5213e7e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:eb:40:c4:d3:1e:89:6a:09:ad:e3:e4:39:
b0:54:09:26:5e:8b:87:a0:6e:d6:a5:73:8d:cb:5c:
21:b7:e0:35:7a:0b:ef:fd:fb:b7:07:cc:01:60:1f:
da:22:b3:03:0a:da:96:f4:80:17:d8:b0:1b:2e:8d:
aa:cd:62:8b:7e:34:28:3b:40:d7:86:92:e6:94:bc:
42:6d:76:04:ba:1f:24:0e:44:bf:b5:aa:77:01:20:
60:f1:c2:ee:45:ce:87:fc:f0:d9:ba:38:f3:06:ed:
1b:6e:9f:55:54:bf:66:57:7b:4d:d9:5b:6a:ea:8d:
cb:4e:66:f8:c9:b0:c9:b0:68:f3:fb:aa:05:12:58:
58:4c:15:f2:23:73:07:f3:dd:06:9d:ce:f1:c1:70:
24:46:df:ee:fc:08:2e:8b:86:57:77:14:b5:16:57:
8b:b2:91:98:f8:3a:ac:d1:98:00:21:a0:63:30:17:
ed:13:87:1d:b2:87:de:ed:a7:39:e0:7e:87:cf:fd:
68:f6:2a:18:1c:2b:e1:f2:cc:3d:4d:2f:51:0f:d6:
a4:f8:65:f7:0a:ba:c6:a6:0b:52:c9:9a:a6:bd:c0:
74:b1:1c:7b:4f:ef:5a:c5:29:72:73:f9:7d:89:00:
ab:f6:22:bf:05:5c:15:bf:07:3b:4e:cd:57:52:1f:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:2B:D5:5C:EA:05:FC:B2:0C:B1:8C:39:01:30:A5:21:3E:7E:6A
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:f9:e2:27:68:af:60:4b:9d:a2:4e:cc:81:f7:8d:3a:80:
f2:70:07:2b:c4:b9:08:7f:b3:ca:26:5c:ef:16:b7:fc:8a:9b:
5d:e6:50:85:46:57:76:6a:b0:36:41:c6:77:3d:c0:23:3c:b0:
6c:b6:53:18:0d:d6:88:88:28:09:04:64:42:bc:13:09:1f:e8:
ea:b3:4e:4c:3a:27:40:9d:b7:cf:35:d6:37:b1:b3:33:55:57:
be:83:0b:0a:a8:cb:e0:e4:72:9e:83:34:d4:16:08:59:c2:bb:
1d:5a:52:e5:13:3d:c3:7d:84:ae:8c:92:b2:05:69:01:c1:de:
cb:77:11:41:c4:bd:ed:4f:53:cd:a8:af:79:cb:ed:39:7c:76:
b4:14:23:fb:76:78:06:7f:75:1a:05:84:87:8a:01:9d:55:1d:
74:9f:56:55:f6:30:07:ed:e0:25:e3:9f:d6:72:01:6e:1f:48:
10:c0:f8:e4:9a:24:05:f7:28:12:72:98:74:14:34:a7:44:8b:
52:bd:85:39:62:a9:aa:6c:a5:9d:bd:a5:df:57:32:3f:49:62:
65:39:a5:37:f9:5c:f6:de:29:33:97:f7:b6:bd:4f:86:c8:bf:
e8:68:81:6b:5e:8b:58:cd:33:d1:7d:df:76:02:d1:58:17:9d:
fc:bd:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:40 2025 by rpki-client