Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: 4WwZaVay2S2DhLUNgsYAGlfv7fPlbuFIdjHr4BU6GdU=
Subject key identifier: 73:88:D1:A3:09:19:14:DE:C6:50:E8:0B:1F:CA:B2:1D:11:0C:1C:8F
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 01989F39E5E69B7B5A76C4ACF730B05824AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 1229
Signing time: Tue 12 Aug 2025 17:00:28 +0000
Manifest this update: Tue 12 Aug 2025 17:00:28 +0000
Manifest next update: Wed 13 Aug 2025 17:00:28 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: bzaqq+GQakQ6AOyfExDj7eyWHYW/bqrcyCBq5TYIxsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:39:e5:e6:9b:7b:5a:76:c4:ac:f7:30:b0:58:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Aug 12 17:00:28 2025 GMT
Not After : Aug 13 17:00:28 2025 GMT
Subject: CN=7388d1a3091914dec650e80b1fcab21d110c1c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:72:51:34:c9:37:87:7b:77:ae:40:26:71:
ed:67:7e:f1:ca:a3:63:ce:8c:6a:0d:9f:a0:e4:ae:
a2:66:96:b9:6b:28:d6:4b:d6:6b:4e:75:a1:2d:40:
46:b4:90:e5:22:59:e2:4e:2f:31:73:28:9a:fe:20:
99:4b:14:84:8f:76:1f:44:df:c3:6b:12:a5:b6:b5:
b2:ed:b5:78:bd:e7:ad:ca:8f:75:2d:b4:6f:b0:b6:
b5:60:da:e9:7d:36:59:5a:80:24:d7:4c:5d:0c:71:
60:c3:fa:62:c3:3e:60:f7:9a:e3:50:e5:f4:74:3f:
59:83:04:b0:74:57:21:5a:18:4b:a4:1c:45:88:eb:
0d:84:48:2b:b0:06:b8:c9:45:6b:61:33:1c:aa:96:
e4:6a:27:2a:bb:bd:ff:98:0a:dc:10:c3:35:1c:c0:
0b:74:83:10:a5:53:78:3c:a0:ca:4a:17:1c:b1:51:
31:93:d7:12:57:7a:58:40:e2:cd:46:ea:88:0f:d8:
a7:0d:41:5b:e6:36:06:13:be:05:85:b5:d1:61:d6:
4c:3f:8e:e4:4f:5e:50:d9:d8:e2:36:4b:6a:f7:94:
e3:ad:05:aa:4e:95:d5:1e:65:29:33:20:e5:23:bc:
b1:29:c6:b6:0d:0f:fa:4c:08:2c:33:70:a2:00:41:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:D1:A3:09:19:14:DE:C6:50:E8:0B:1F:CA:B2:1D:11:0C:1C:8F
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e5:22:35:76:96:3c:2b:de:47:da:8f:97:70:8b:04:96:5d:
a5:ec:2b:b0:b4:be:08:62:4d:cf:3a:98:73:6e:3c:a3:d1:be:
3c:e6:cf:de:36:2a:ca:7e:bb:1f:f9:ac:5a:af:6c:58:4f:6b:
bf:dc:3e:2c:00:41:9d:65:e5:2f:d0:ed:39:83:30:b0:e2:84:
dd:27:0d:15:06:29:f8:58:58:30:6a:29:e4:07:50:2a:7a:22:
0e:6f:49:df:d3:48:a3:fe:fb:ec:26:3b:d5:96:9b:96:e2:47:
6b:aa:f8:d7:dd:03:b1:b9:45:6c:54:5e:bd:ab:89:9b:d9:b8:
f8:8f:6d:a8:90:fd:e4:8b:26:2a:3a:d7:10:e4:0f:6e:b0:76:
2a:39:48:bb:23:c9:7b:55:27:06:08:8d:9a:91:d4:85:16:5d:
8e:57:d4:df:dd:6d:a7:b5:4b:43:eb:18:bd:1a:ff:43:39:35:
e2:4f:39:d9:6d:27:16:8a:f7:18:b2:e3:39:fb:ab:46:b3:1c:
f1:bd:64:f5:c6:93:3e:0f:b6:02:c2:4f:5f:02:94:51:f4:d3:
92:71:82:51:4e:e8:e2:04:fa:a2:89:b6:5c:48:66:1b:78:82:
27:20:fe:bb:b3:be:4a:30:fd:21:c1:af:be:a7:67:a9:8d:ae:
28:06:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:37 2025 by rpki-client