Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: P/+QT35m7AgWy+7pIGVbjGz3c20jxZtvGYlOHNog8jA=
Subject key identifier: EF:E5:6F:6D:16:0E:89:BC:37:CA:94:A3:6D:BA:FD:6A:08:C6:2E:67
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019874502E6B670BC15245D7E5FCA15C4B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0B8B
Signing time: Mon 04 Aug 2025 09:01:08 +0000
Manifest this update: Mon 04 Aug 2025 09:01:08 +0000
Manifest next update: Tue 05 Aug 2025 09:01:08 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: rSwbPBnEhAfysJHAHLtAFq4sIahhMqPWQPBnFBBnFII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2e:6b:67:0b:c1:52:45:d7:e5:fc:a1:5c:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Aug 4 09:01:08 2025 GMT
Not After : Aug 5 09:01:08 2025 GMT
Subject: CN=efe56f6d160e89bc37ca94a36dbafd6a08c62e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:64:bb:be:ba:8b:b2:0d:d9:7d:ef:aa:4a:
f6:b3:3e:31:e9:cb:9e:1b:ff:5f:ac:47:0e:45:70:
0e:28:c7:4f:51:5c:7a:d3:46:b6:80:16:68:8d:18:
27:3b:5d:93:88:0c:9f:00:02:74:59:da:69:72:a0:
fc:8e:ce:7a:0a:2a:50:0b:92:f4:55:28:d8:72:39:
c7:9f:20:3f:ac:15:47:ab:14:c6:fe:9e:46:dc:d0:
b8:68:46:b0:4f:96:50:5a:4d:ef:10:3c:47:65:b9:
95:ee:16:54:b6:07:60:ae:e3:8f:33:1e:27:e5:d2:
72:3c:d2:55:ab:1a:88:44:5c:fd:29:06:48:4f:3b:
14:c8:d9:fd:50:b5:23:fa:9b:13:03:48:94:12:db:
c4:a2:a2:c1:0d:9b:f4:32:c4:7e:cb:d4:26:dd:55:
9f:03:e8:26:b0:e1:41:71:87:38:29:b8:57:55:a1:
a2:e7:48:0a:57:e1:43:65:67:04:99:83:c5:4e:f0:
15:50:3d:6a:cf:f2:6e:de:95:81:1b:10:a5:9f:bd:
dc:43:1c:3a:9c:15:47:66:13:36:7a:ff:cb:54:c6:
93:ab:1e:15:95:ad:21:52:2f:47:00:59:28:45:b6:
04:48:8e:0c:a4:28:3c:28:2b:01:06:02:6d:77:51:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:6F:6D:16:0E:89:BC:37:CA:94:A3:6D:BA:FD:6A:08:C6:2E:67
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:c5:b1:9e:38:28:75:ca:c9:be:53:2c:28:72:85:3a:be:
78:e8:6c:3e:45:b0:88:29:de:1e:aa:56:8a:ab:58:82:de:1b:
c5:be:53:23:bd:bb:13:1d:db:08:ed:5d:ff:a7:6f:c4:6c:94:
0d:2c:fc:18:89:e3:72:fe:31:83:ae:c2:a2:29:4a:12:83:9e:
51:b7:c0:e8:06:48:b4:73:e8:63:d7:b0:3c:2c:b7:49:70:1b:
36:2c:2d:e4:bf:b3:49:7a:6c:92:72:9d:44:cf:2a:4d:4c:53:
2f:69:3d:e8:19:b8:cc:1d:30:7f:4f:da:9f:c7:92:74:06:9d:
5f:ca:e6:34:c3:c8:89:64:fb:6b:12:e1:bc:c9:fb:3c:55:43:
1e:07:5f:f1:79:bb:71:04:52:2c:ce:fc:6a:f5:5b:79:ee:ce:
b8:a8:ac:15:17:66:3a:e1:4b:63:5b:41:31:2f:c9:b6:bd:d0:
d8:7a:4f:41:30:5e:44:76:42:31:3c:15:c2:8d:cc:88:62:43:
9e:ee:98:47:c2:de:a6:25:6f:d7:93:76:28:54:6e:7b:73:69:
71:67:c9:17:c3:7a:fb:6c:6e:2e:57:dd:2d:60:30:4f:46:81:
f5:7a:3c:b5:82:c6:4a:f4:0e:28:fe:c8:b9:ce:9f:bf:c4:08:
f4:8d:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:56 2025 by rpki-client