Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: QH9YSGCU0bx2rH0j+ktVOm5JVjPhPLkFmWwyG1EPmaE=
Subject key identifier: B8:F8:F3:46:3A:44:77:D7:15:03:47:EB:CE:16:CD:BB:D9:15:EE:58
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 01987B9C317010C748EC059D9BF27DEB4CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 141E
Signing time: Tue 05 Aug 2025 19:01:30 +0000
Manifest this update: Tue 05 Aug 2025 19:01:30 +0000
Manifest next update: Wed 06 Aug 2025 19:01:30 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: +K5vFCKXlplYoq/ox+Vsh6WV8baf/7rtHSQMdZZgdb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:31:70:10:c7:48:ec:05:9d:9b:f2:7d:eb:4c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Aug 5 19:01:30 2025 GMT
Not After : Aug 6 19:01:30 2025 GMT
Subject: CN=b8f8f3463a4477d7150347ebce16cdbbd915ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:72:d3:7b:17:8b:5f:77:7e:0f:29:8c:d5:
53:c7:43:50:e2:bc:c6:fc:44:82:f7:b2:50:c0:e8:
71:4a:53:b1:1b:60:84:43:4b:7f:97:d7:ba:d1:a3:
30:63:fd:05:8c:6f:0a:43:c7:74:95:c4:19:d7:86:
c6:c6:40:09:d4:1a:2a:16:b7:76:69:4a:a4:c6:f1:
95:b3:70:74:c5:41:38:93:77:4d:8f:99:91:2b:82:
4d:83:76:d5:fd:46:63:52:65:39:bd:60:a7:9d:90:
11:59:e6:1a:db:9b:37:a4:2e:71:2e:a2:1a:9a:6e:
d9:99:4f:e7:59:0f:db:97:bc:74:b2:8e:6d:79:1c:
6a:a3:23:11:15:48:83:02:9d:52:96:36:61:e8:09:
60:e6:9d:50:0c:77:7e:a3:98:1e:b0:1c:9e:37:12:
4e:e4:eb:76:61:ae:c2:10:24:98:7a:37:95:a8:51:
bf:b2:03:48:03:11:e2:6a:65:28:4b:ac:b4:76:ce:
a3:b4:b6:ca:a2:e9:29:77:11:6a:cb:17:26:2c:e1:
da:c4:33:15:ba:ee:35:8f:2e:8d:92:94:79:15:33:
f9:e3:fc:79:af:a9:c1:1b:a8:3a:bf:f9:bd:97:be:
4f:5d:1f:2f:72:09:b6:73:02:67:27:00:9a:d8:d4:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:F3:46:3A:44:77:D7:15:03:47:EB:CE:16:CD:BB:D9:15:EE:58
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4b:5c:ba:95:2c:36:63:89:dc:88:16:4e:d3:c4:3b:ff:2e:
0f:bd:b0:cc:69:83:b4:27:4c:57:d8:9a:dd:47:42:09:00:07:
6f:dc:cb:df:7c:ae:a4:46:2d:f3:a4:58:a5:c2:c0:0a:d6:81:
02:6c:74:1f:1d:c8:6f:35:da:1d:cd:65:b9:82:81:c4:bc:b8:
c9:36:06:ab:a6:f1:d0:ae:bc:78:0b:e2:fc:d5:48:08:e6:23:
42:aa:e5:69:c6:70:51:71:9e:6f:4e:5e:32:9c:5a:35:de:29:
a2:66:a1:b0:9f:b5:3f:b2:7f:c0:25:2d:b8:a7:03:63:ec:75:
25:c6:a1:13:9c:04:77:c9:57:cc:44:70:a9:22:a6:70:bc:24:
5b:a2:76:e6:b6:75:63:27:10:f4:73:26:66:1f:6d:54:0d:bb:
68:da:7b:eb:c0:fd:8d:64:26:f6:c5:e7:28:9b:7f:5c:f8:8d:
a7:86:30:0b:fe:a0:d2:43:36:1c:0b:0e:4a:2d:95:85:28:64:
76:d6:6e:ea:a8:5d:9b:d9:eb:76:c7:fe:24:58:b9:1d:ab:dd:
87:35:83:28:a2:7a:93:ec:c9:94:9d:17:43:81:db:d3:23:aa:
54:a2:4b:f0:d3:da:4c:d5:3b:c1:49:82:c4:74:98:ec:79:4d:
f4:ac:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:51 2025 by rpki-client