Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: naKbBQFqDfZf4Bdsqyg26ILaNlUj3zcOV8IzOuz6hnY=
Subject key identifier: FB:BB:30:24:39:50:0F:6A:42:66:E1:81:8D:9B:25:8A:15:52:0B:11
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01988B0E748A063A56636225B921F338BF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:00:36 +0000
Manifest this update: Fri 08 Aug 2025 19:00:36 +0000
Manifest next update: Sat 09 Aug 2025 19:00:36 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: DchqUQgXaoAQ8JbZEbaIkhdYHLc63W1khkId+gkWkD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:74:8a:06:3a:56:63:62:25:b9:21:f3:38:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Aug 8 19:00:36 2025 GMT
Not After : Aug 9 19:00:36 2025 GMT
Subject: CN=fbbb302439500f6a4266e1818d9b258a15520b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:bd:7b:ff:51:f6:e9:dd:47:c6:a2:97:57:
4e:9c:81:39:1e:ee:13:bc:0c:a0:ba:71:53:d1:47:
d8:01:0a:05:25:a6:b2:7a:f0:4f:02:1c:4b:53:77:
54:fe:38:e1:6d:06:aa:6c:d7:cd:22:32:34:34:9b:
2c:df:96:4b:b3:aa:56:dc:bb:91:1e:5c:51:25:03:
1d:79:49:12:ae:f7:a2:2d:09:8e:d5:f4:0c:a3:b2:
78:57:70:cf:0e:2f:fc:d0:26:95:61:e6:2d:ae:c7:
54:8a:d7:0e:a7:7d:ce:7c:2e:03:b4:a9:00:6d:26:
84:21:24:3b:f4:21:da:b0:e0:88:af:88:5b:6e:78:
96:fe:89:72:47:9c:bc:7e:e9:3a:27:bb:ab:c7:16:
7e:c8:dd:a2:f0:08:25:95:c0:4c:88:07:c3:8e:da:
9a:2b:0b:d9:64:82:f0:d8:69:79:65:c4:b7:26:de:
6d:10:82:79:37:83:18:e0:22:5e:47:ab:7b:9e:e3:
88:9d:50:3a:83:ab:b2:47:81:2b:60:2c:77:22:20:
52:16:0b:52:e7:7d:a2:d7:5b:30:e4:2f:53:3d:6c:
55:00:70:d3:31:3e:d9:50:9d:92:f4:3d:af:cb:08:
e7:b4:52:50:58:4c:87:ca:c4:41:31:af:62:51:2b:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:30:24:39:50:0F:6A:42:66:E1:81:8D:9B:25:8A:15:52:0B:11
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:4e:7d:44:2d:8f:b7:63:33:e4:8f:16:90:00:0a:4d:63:
f8:bc:19:8b:42:63:4a:1f:f9:7a:e2:61:21:29:d6:81:e6:09:
a3:28:9e:1c:2c:a7:cd:ed:2f:1f:65:10:27:ab:f4:15:09:92:
26:78:83:8a:ec:8b:c4:03:ae:6b:0d:cf:2a:e4:b8:36:59:fa:
3b:23:2f:c9:73:99:8e:75:1f:e6:f9:24:1e:86:f4:fa:ef:f6:
a0:29:7b:f6:b6:cc:21:61:7c:68:f2:ed:03:a1:64:2c:81:f1:
52:ed:d6:71:9b:5c:0e:bb:79:63:45:76:0a:3b:d5:0d:1c:be:
07:9a:f6:5f:74:3b:b5:ff:c4:82:da:d9:a0:16:b7:06:4f:ee:
d1:5d:c2:2d:8e:8a:8e:d9:fc:ed:26:1f:23:36:0e:84:61:5c:
97:8e:6f:79:a0:f4:ab:16:79:7e:ee:79:a3:25:19:23:c4:65:
c0:f4:2e:72:a5:1b:03:4c:c3:9b:6d:8f:7c:71:98:e1:8b:11:
b3:b3:9e:da:40:20:0f:10:1c:8a:b2:76:4d:38:09:f5:31:c4:
f3:a8:dc:af:86:60:bf:81:59:1f:a4:9a:ee:75:47:ed:fe:64:
c3:65:cf:e8:b8:51:9a:d4:1d:38:e4:a7:3e:27:b2:55:fb:43:
92:c3:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:46 2025 by rpki-client