Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: Tid2Xhd2bo6PPj5DD3FYcQhMCauLqNB7v5u48O5iEVU=
Subject key identifier: CA:8E:37:C5:FD:AC:76:52:73:4B:12:ED:CA:26:64:31:60:73:D9:58
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 01987E9C6758D528F2E38A6B6057E651E8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 1531
Signing time: Wed 06 Aug 2025 09:00:35 +0000
Manifest this update: Wed 06 Aug 2025 09:00:35 +0000
Manifest next update: Thu 07 Aug 2025 09:00:35 +0000
Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: 5kucVYXM7Xc9Xp1jNRMRYajHE6prGhvKPLV4I5iL5cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:67:58:d5:28:f2:e3:8a:6b:60:57:e6:51:e8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Aug 6 09:00:35 2025 GMT
Not After : Aug 7 09:00:35 2025 GMT
Subject: CN=ca8e37c5fdac7652734b12edca2664316073d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:20:78:34:b9:04:85:c3:e0:6b:0d:53:fb:
c6:1f:77:c7:48:45:dd:f4:cc:8b:a8:1c:77:78:65:
db:7a:a4:0c:24:45:99:df:05:c2:e5:7a:9a:37:3c:
e4:d7:3e:49:c4:90:d8:31:19:bd:20:71:08:36:90:
7f:d5:93:d7:f5:7c:ce:ad:0a:92:f8:bb:fc:3b:77:
2d:b8:7a:15:ee:72:76:b9:bd:6b:93:18:27:95:ba:
ed:d6:3e:0e:b9:79:fb:10:d1:3f:1b:5a:73:95:e4:
87:ff:d1:0f:ba:ad:bd:29:ce:b8:bf:4e:e8:48:07:
94:06:ff:56:f7:57:04:dc:af:c4:a8:4f:4a:ad:e1:
55:fd:9a:3a:2e:dd:fb:c0:18:05:9d:7a:ed:21:c2:
3b:08:08:2c:7c:06:82:d1:27:1c:bd:3d:fb:73:b9:
fe:3b:27:79:d6:1b:e4:19:fb:aa:a7:98:34:e3:e2:
e1:96:ad:f5:83:5a:e7:ff:57:b4:67:dd:3c:52:87:
75:91:90:64:32:7f:6b:b3:be:b1:6a:a2:f1:19:04:
19:5e:ca:1e:08:bf:5b:15:cd:2f:cf:ae:c5:75:4b:
57:86:0a:cc:b1:1d:ce:0a:e4:3e:89:66:50:3d:72:
4b:ce:8a:18:53:61:df:11:e6:69:4a:cd:79:83:48:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:37:C5:FD:AC:76:52:73:4B:12:ED:CA:26:64:31:60:73:D9:58
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e2:fb:23:a6:2c:e7:32:11:6f:1c:fc:45:91:80:61:37:2d:
32:6a:af:74:d2:a9:b6:91:be:4f:36:4b:6d:03:44:da:51:50:
1e:a0:d6:bc:d2:59:bc:b6:b7:08:70:d4:55:e7:3b:56:b6:11:
d2:b2:49:2c:32:c0:13:0f:a3:73:21:e8:eb:d2:9f:cd:19:a2:
92:0a:07:40:cc:2c:64:25:15:62:8c:40:95:4d:ff:a1:c4:af:
8d:ac:16:80:61:bc:53:7b:10:52:a1:b7:60:58:b6:be:a6:b7:
9d:3e:3e:83:a1:6a:4a:36:26:7c:8b:44:50:9f:c2:33:57:c7:
08:28:fd:a6:8b:d2:9a:fd:6d:47:e6:20:d8:5c:c5:4a:be:f8:
37:f0:3d:1d:41:36:78:7d:c4:50:27:16:3a:0b:78:9a:e4:f4:
eb:82:49:21:2c:49:dc:79:d0:53:45:47:51:fa:0c:4b:ec:68:
7f:5c:54:45:45:c4:36:90:bc:d4:9b:38:1e:bd:01:12:a1:9c:
01:37:d2:43:fb:7c:ef:d8:4e:29:13:b8:dd:f2:2f:0f:61:1e:
42:03:c9:6a:d9:a7:cc:58:7d:08:cf:f0:81:37:52:c7:53:0c:
52:64:33:50:a9:6c:25:7a:b0:76:d2:b2:22:74:af:29:c6:36:
21:28:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:48 2025 by rpki-client