Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: +vI4GcOdMQVu7FJjAROsmLCrUi2vy7aPQnFuQZllF40=
Subject key identifier: 34:D2:60:4E:6F:F7:04:37:F5:B0:CA:38:C0:3A:88:EE:5A:03:03:59
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019881D52805CE26213E60833F6341BDE89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0716
Signing time: Thu 07 Aug 2025 00:01:26 +0000
Manifest this update: Thu 07 Aug 2025 00:01:26 +0000
Manifest next update: Fri 08 Aug 2025 00:01:26 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: aPbHKoHtcMBzlHGbYV/M9EAddHp41gSpGD/DUc6dYvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:28:05:ce:26:21:3e:60:83:3f:63:41:bd:e8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Aug 7 00:01:26 2025 GMT
Not After : Aug 8 00:01:26 2025 GMT
Subject: CN=34d2604e6ff70437f5b0ca38c03a88ee5a030359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:88:9b:13:ea:86:bc:87:37:82:c1:1a:c3:
40:b4:84:ad:92:ba:4c:d8:91:28:55:ae:21:88:a7:
d8:0c:a5:63:65:cc:4a:36:f6:6d:ec:f2:5e:d3:51:
2e:26:e1:cf:dd:10:4b:3a:2d:70:70:6b:7d:4d:9d:
74:27:10:eb:fa:fd:26:64:33:c1:ed:5c:05:3b:5b:
80:b0:7e:6b:6f:a2:a4:9f:66:c4:ff:d3:33:33:6e:
c7:ef:30:e0:d7:cd:8c:3f:63:e9:9c:a7:50:5f:71:
95:a9:74:0e:7e:3c:0f:af:e0:0a:10:bf:11:76:47:
ba:93:b4:9f:f3:f4:9c:a8:3a:c1:ff:e1:12:28:05:
3d:d5:c6:e5:dc:4a:cc:74:dc:bc:68:ba:99:2e:21:
9c:44:74:18:a5:9e:9f:74:f2:f7:87:f5:a1:ba:3b:
58:45:7d:eb:1e:d9:8e:99:35:2d:d9:5b:44:d2:e7:
a6:f0:ab:ad:88:2f:2c:2a:f2:d5:45:bc:71:46:55:
31:8d:b2:11:fa:d7:79:bb:cf:d2:f5:47:d4:03:36:
54:e8:49:1f:34:42:eb:0d:31:29:c1:44:f3:13:51:
89:d7:c4:a9:4c:f9:d6:df:4e:ea:7d:fd:fc:6e:14:
38:93:c2:db:06:b2:ac:b3:33:16:98:ca:14:d7:03:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:60:4E:6F:F7:04:37:F5:B0:CA:38:C0:3A:88:EE:5A:03:03:59
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:13:ba:bc:ee:22:d2:31:f9:04:e6:f8:3b:b8:c8:be:8e:d9:
df:70:a0:ec:0e:0d:7c:3f:b5:10:ea:fa:b9:e0:fc:ac:84:52:
b2:ff:6c:c8:e3:d9:34:b8:6a:ed:09:88:73:f2:c6:06:60:f7:
4d:ca:d3:6c:55:50:ba:d4:c5:7a:ff:4c:bf:a4:a6:0f:16:c2:
e6:8e:ad:46:88:76:4d:31:1a:ee:95:0c:4a:d8:5a:0b:bb:b2:
06:74:ed:00:ce:27:af:87:d0:d8:c8:09:7b:76:9e:df:bb:f9:
31:84:36:c0:62:ec:87:c8:4a:68:71:b4:a1:2e:63:5d:04:45:
92:51:05:e2:76:07:1c:b9:44:a3:0f:53:d2:e9:8b:88:f5:68:
5b:4f:dd:ca:dc:c4:16:a5:fd:fe:38:4e:8e:cb:d4:45:dd:1b:
26:5e:2c:df:7c:4e:c4:47:aa:da:fc:a7:ac:bb:e1:ec:d1:84:
d5:ed:42:32:9d:66:20:63:c7:8c:4b:7b:8e:a2:c2:dd:1f:1e:
84:35:55:62:16:6f:6d:6a:ab:a8:69:0c:1f:60:0a:b6:ac:4e:
a0:4d:5b:cc:08:d2:b2:e3:64:42:86:66:4d:4a:09:60:fb:be:
88:6c:d8:36:63:66:96:49:35:91:02:57:9f:4e:93:7e:5d:dd:
b2:79:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:23:53 2025 by rpki-client