Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File: xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier: 5QNhcfoV2/znS+yYgkN/46ton4xAe2AI0Git4IU0OBw=
Subject key identifier: D8:F8:11:A1:2E:CF:E5:9D:42:98:84:59:A9:44:57:88:73:FE:75:9E
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 01988AA125D6A0EC967B7FAA021EFE46175D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number: 0291
Signing time: Fri 08 Aug 2025 17:01:13 +0000
Manifest this update: Fri 08 Aug 2025 17:01:13 +0000
Manifest next update: Sat 09 Aug 2025 17:01:13 +0000
Files and hashes: 1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: zE7Xg9rwnnj+29NeXlJ/x4h8hRZydWFMupbNGOK9eHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:25:d6:a0:ec:96:7b:7f:aa:02:1e:fe:46:17:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Aug 8 17:01:13 2025 GMT
Not After : Aug 9 17:01:13 2025 GMT
Subject: CN=d8f811a12ecfe59d42988459a944578873fe759e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:0c:66:4c:3a:e3:e0:10:94:34:9c:f5:5d:
76:51:15:2f:1c:ea:10:b2:2c:a0:1c:39:fd:dd:27:
84:2a:d0:39:7b:82:c1:81:17:be:be:b2:e3:60:f8:
0e:05:8d:5c:ad:50:b7:5c:94:21:65:44:b2:1f:64:
24:3f:f7:4c:3a:79:44:1c:09:88:c7:e0:ee:b3:df:
d9:4f:2d:59:8f:a6:2e:0f:92:ba:dc:02:58:66:d1:
3e:f9:47:c2:ee:05:4c:aa:42:5c:67:c9:0e:3f:38:
ee:34:ef:b2:01:db:aa:e7:69:e2:47:fb:0c:79:b3:
ea:13:b9:e8:c0:fa:89:db:84:35:75:e8:de:b7:54:
0b:6f:1d:d6:16:8d:35:43:ad:33:38:47:41:f8:f9:
a1:5b:68:b1:2c:fc:be:a6:87:5f:41:65:b6:2e:a3:
8c:d7:84:c4:50:ce:bd:d3:4a:98:b7:68:a9:1e:4a:
ae:85:3b:ac:56:04:37:5d:63:d3:8b:e2:8c:87:1a:
9b:d2:c6:16:fe:56:aa:c8:8f:18:96:87:a5:96:76:
29:65:4f:69:08:ba:1b:b2:73:51:bd:b7:cd:87:05:
32:43:6d:b2:54:bd:bf:b6:d6:d1:b9:ee:2b:6e:74:
d2:d7:c8:97:49:e5:8e:03:1c:91:a4:ef:7b:ff:72:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:11:A1:2E:CF:E5:9D:42:98:84:59:A9:44:57:88:73:FE:75:9E
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d7:96:18:10:11:8d:38:09:ab:dc:19:dc:7c:2d:3c:23:26:
4d:b8:6e:32:dc:88:6b:27:b7:c1:48:4c:65:9f:76:cc:65:96:
17:b6:f6:35:f9:fc:2c:6f:58:5b:2d:37:f1:fe:d0:92:b7:6a:
8c:f7:fb:a3:6b:4a:31:c3:db:a2:a0:f4:fa:58:80:b6:78:f1:
ce:4c:b9:ee:b6:b4:22:e7:d8:f8:dc:52:04:9f:8e:12:96:32:
21:80:40:4c:f2:8f:95:36:e9:0e:61:59:9e:c4:23:6d:d9:f8:
ac:2b:46:22:4b:38:43:af:02:12:da:9f:c2:75:a8:da:f0:c1:
a1:f4:52:9f:7e:cb:8f:22:7c:3a:86:f5:b6:a2:d3:ba:9b:35:
b3:c3:49:2c:a7:1c:6c:65:ba:f6:3c:0c:07:ae:84:2b:67:4f:
6e:86:f4:6a:08:e2:d9:7c:56:7a:d6:b3:41:16:3f:b4:ab:60:
d4:7c:da:91:7f:bf:c6:ad:c0:66:9c:87:a0:cb:d9:22:d9:ec:
cc:53:60:8c:73:a8:85:be:42:2d:0c:f4:aa:fa:e4:a9:24:36:
54:ba:0d:42:78:2e:ae:12:59:0b:1a:2d:e2:2c:92:7f:fb:a2:
96:71:08:0c:8e:a0:d9:40:79:80:a5:0a:15:53:68:45:99:1c:
56:da:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:47 2025 by rpki-client