Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: GYZ0fq3CH3KUkYnaEO4B855yzjIz2nSD2WjB84QQZXU=
Subject key identifier: 2C:A8:5C:8C:C5:86:99:DE:48:0B:08:41:8F:7F:F6:3E:49:48:18:62
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 01988EEC34A351C74979120F1957DE7315D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:01:41 +0000
Manifest this update: Sat 09 Aug 2025 13:01:41 +0000
Manifest next update: Sun 10 Aug 2025 13:01:41 +0000
Files and hashes: 1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: i8Xz9cIbeAnJW7aQPcCiORFwerLBHYxDOkJlpiI5oX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:34:a3:51:c7:49:79:12:0f:19:57:de:73:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Aug 9 13:01:41 2025 GMT
Not After : Aug 10 13:01:41 2025 GMT
Subject: CN=2ca85c8cc58699de480b08418f7ff63e49481862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:ec:34:be:79:68:3e:4f:6e:b5:6b:b5:91:
4c:0d:4b:5d:75:03:3a:9e:3f:af:8b:a2:e4:12:68:
45:83:f1:65:e1:12:7a:16:01:3f:85:0b:bd:35:ef:
9c:3d:65:9c:fc:44:6f:2b:49:46:49:a9:09:8c:e5:
74:dc:0f:96:b6:58:fc:66:74:b9:c9:83:b6:b8:2c:
52:98:87:04:db:7f:57:24:e0:ec:97:c2:ac:8d:01:
fa:6e:56:38:78:81:be:a5:dd:3c:d8:2e:72:e9:27:
e4:d0:69:8b:55:71:5d:d1:31:b6:32:4b:3e:e3:98:
62:5f:27:f6:bb:d0:7f:5b:de:e2:05:20:f8:4a:c0:
a6:85:17:3b:8a:fd:d8:1f:11:64:f2:dd:46:ab:4a:
82:ef:3c:b9:e3:42:78:01:fb:9b:f9:b3:84:16:70:
28:93:6d:bd:87:48:1b:cb:b2:20:37:54:25:29:c0:
2f:a0:82:de:58:d0:8b:a8:ba:3b:d3:e4:05:46:1d:
e8:15:94:08:1d:62:30:04:c2:d4:56:b5:27:95:7d:
f0:ca:9e:4a:20:99:f2:ff:6f:c9:3e:04:8c:95:9c:
72:2b:61:4a:1c:b4:92:26:a2:7f:c3:68:b3:3b:51:
21:86:90:e2:ef:1e:68:39:3e:1c:4f:56:11:92:6a:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:5C:8C:C5:86:99:DE:48:0B:08:41:8F:7F:F6:3E:49:48:18:62
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:51:5e:2d:92:9f:73:c9:a6:61:df:5b:1a:b7:b2:17:10:
b5:ff:4a:ee:bf:5f:83:58:fb:69:ea:3f:1e:3c:be:1e:07:7d:
5f:97:a4:e1:19:b7:9b:ff:fd:91:95:32:e5:df:e2:7f:bc:3d:
9d:7f:58:d7:fb:9a:0d:d8:18:1d:ed:66:6c:f8:13:cb:04:c5:
24:d7:0b:8f:0d:54:b1:60:fa:b8:88:f9:ae:79:b4:4c:c6:00:
93:17:e0:ae:d8:96:b3:44:01:11:6d:10:b9:42:f5:9a:65:f3:
38:12:1c:ba:8c:c0:d1:cb:a3:bb:54:a6:eb:20:bd:f8:82:b1:
e7:2c:dc:1b:ef:c8:84:bb:99:94:4a:e5:f2:4d:9f:2f:c4:62:
75:25:75:2f:ef:3a:ce:b1:ce:80:ee:fa:87:12:f5:01:06:08:
5c:04:37:4b:29:1b:9f:fa:bc:e6:cf:8f:f6:99:d4:6e:bf:45:
4d:a7:2a:69:dd:c8:46:b1:3b:ff:29:23:d2:0e:9b:4b:04:45:
df:8e:f0:ca:07:c9:9e:6f:0d:d6:d9:0c:77:d4:3b:a7:c0:78:
72:7d:14:aa:36:cc:a8:ec:bc:76:ef:45:21:bc:f1:97:26:22:
2f:ac:c9:0c:2c:5a:ef:3c:e0:85:10:4f:e5:3c:52:bf:42:a3:
cd:31:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:14 2025 by rpki-client