Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: vIOLKOkzbg39eHuTHcgBNCQibBiibKL7jJWva7Dmgqo=
Subject key identifier: 17:C3:4B:8D:91:12:29:65:A4:2A:B0:0D:EA:33:53:6A:B7:35:65:74
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 01989ECCAC564213B12B2C9F444AD6D6E51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 0556
Signing time: Tue 12 Aug 2025 15:01:10 +0000
Manifest this update: Tue 12 Aug 2025 15:01:10 +0000
Manifest next update: Wed 13 Aug 2025 15:01:10 +0000
Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: P2zU1TbOj1COww3nJJnEXhsdZfi6AtKkMFuDC/Ui1EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:ac:56:42:13:b1:2b:2c:9f:44:4a:d6:d6:e5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Aug 12 15:01:10 2025 GMT
Not After : Aug 13 15:01:10 2025 GMT
Subject: CN=17c34b8d91122965a42ab00dea33536ab7356574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:68:c0:85:8a:b8:5b:6d:ac:44:5c:a0:99:
7d:d6:95:8b:9a:58:40:89:d7:71:d5:4f:f5:52:5d:
36:6a:d2:5d:83:53:3e:6b:3e:d6:a2:e9:8f:80:9d:
7f:3f:96:c2:d8:d2:be:a2:da:e6:b5:fd:61:6b:8a:
e2:ac:ca:25:e1:21:f8:cb:cd:75:da:32:30:61:21:
0d:7a:b5:ec:6a:24:ff:85:f1:12:a0:e9:f0:e6:df:
d5:71:7f:75:ec:a9:b3:11:76:9c:09:d2:e7:e2:6b:
ef:ac:f1:26:ec:d4:45:69:d1:55:a0:22:17:31:c6:
d0:18:47:58:ff:04:6c:4a:91:dc:4e:9e:8f:6b:f9:
74:71:01:0e:f5:12:cc:11:8c:15:1c:b6:3e:3b:44:
27:e9:3f:de:7c:6a:68:8d:f7:fd:29:56:2a:c9:0f:
f8:f5:ea:84:46:e5:a5:bc:1a:5c:aa:3a:71:3e:4e:
b4:cf:80:95:ad:a0:07:0e:5e:15:83:5a:89:bd:72:
e1:53:93:96:5d:75:1d:36:d6:63:63:5e:35:bf:64:
ff:39:57:90:f3:95:19:b7:c9:3a:15:f8:d2:a4:05:
e4:c4:67:1b:f6:c0:a4:bf:b4:1a:0a:9a:15:74:08:
8a:2c:0a:b5:0e:69:a5:32:45:23:cf:da:7c:aa:42:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:4B:8D:91:12:29:65:A4:2A:B0:0D:EA:33:53:6A:B7:35:65:74
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:cc:fa:7c:b1:6a:09:0f:43:06:67:a7:62:fb:e1:d7:41:
1c:c7:7b:19:e2:ba:63:33:7d:00:ff:8c:7f:db:ee:73:4a:f1:
c9:ba:7b:24:f3:8e:53:79:2f:e5:50:d9:5b:88:af:20:5f:b0:
d6:35:b7:16:a6:76:ce:f5:e5:dd:5f:0e:68:5f:f6:d5:b1:2a:
c5:e3:d9:28:31:c7:ad:f2:35:34:3d:af:06:bd:79:d6:b3:50:
f4:5e:3e:04:ea:a4:86:d8:27:56:b9:d3:38:e9:bf:a6:e7:ee:
3a:64:70:e7:d2:4f:d3:1b:ca:70:7e:41:db:3f:a7:fb:24:e3:
ca:0f:50:ec:72:ab:02:ab:91:9c:af:f4:91:1e:85:3c:69:3c:
93:fe:15:8f:99:d7:8c:da:66:82:d7:21:05:b5:fe:ea:15:cb:
f7:1d:3e:2a:c3:3b:81:9c:71:7f:a9:b8:ef:49:64:48:4d:22:
a3:02:18:c9:a9:dd:b0:29:50:e7:57:c0:27:0d:3b:74:3b:dd:
05:2c:e6:f6:07:d1:27:7f:36:ef:87:02:76:0b:29:68:07:05:
d6:6f:6c:10:2f:f7:64:29:6e:50:a3:c3:4c:b6:e3:73:e6:45:
21:5f:68:0b:d9:5e:cc:64:72:48:1a:6f:e0:1a:40:36:8d:e1:
34:74:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:06 2025 by rpki-client