Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: rUz+kFJiuUrKje5oFflCh5iAISHodH9NU5F+kjWzBt4=
Subject key identifier: 63:94:DA:3B:1C:AF:9E:85:84:B7:54:FA:A4:6C:E6:7B:E7:EE:0A:28
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 01987F0AE3DE47FD7A9F8D47929333D41FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0337
Signing time: Wed 06 Aug 2025 11:01:16 +0000
Manifest this update: Wed 06 Aug 2025 11:01:16 +0000
Manifest next update: Thu 07 Aug 2025 11:01:16 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: Y4XvzQ/7oDb4SFBwz/taEEBgM6qYGkoUua/79SXEk3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:e3:de:47:fd:7a:9f:8d:47:92:93:33:d4:1f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Aug 6 11:01:16 2025 GMT
Not After : Aug 7 11:01:16 2025 GMT
Subject: CN=6394da3b1caf9e8584b754faa46ce67be7ee0a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:31:c1:3c:d4:a7:b0:6b:04:9c:ea:19:4a:
b7:fd:08:79:4f:7c:9e:93:86:1e:8a:d1:6d:06:01:
65:c1:ef:68:0e:bc:f7:8c:ba:15:3d:9e:0c:87:23:
c3:4d:46:43:4f:f2:54:f6:c8:ba:5a:13:f8:3f:2e:
66:3a:f0:10:5a:93:3d:e5:35:08:f4:22:fd:00:18:
76:1c:4f:b1:db:12:78:6a:9e:7a:13:d6:89:3a:12:
2b:50:7a:83:51:ef:f0:6e:ce:93:01:5c:87:d8:e1:
71:00:be:73:63:c6:41:6a:41:9b:9e:c4:4e:e5:a2:
ea:d9:89:41:24:d1:1e:c7:09:3a:c7:b3:d1:a8:22:
e8:4d:14:57:b0:fc:5d:67:38:91:dd:30:ec:ac:44:
6a:11:c7:f6:0d:1d:bc:e3:a2:81:7b:9b:88:f7:11:
de:41:03:9f:1e:e1:fd:09:e2:33:48:a0:30:f7:84:
9f:4c:3d:2e:79:3f:b2:ce:9b:7a:7c:71:5b:79:97:
dd:9a:52:55:1c:08:22:49:ab:3d:b0:9c:86:b4:ce:
d6:b2:5e:e2:e2:6f:00:c3:ed:b7:36:47:36:ba:fc:
f2:56:f6:11:cc:58:dc:13:d7:2e:66:ad:05:ad:16:
82:ae:f7:01:08:f2:bc:79:8c:d6:ef:5c:bd:a6:12:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:94:DA:3B:1C:AF:9E:85:84:B7:54:FA:A4:6C:E6:7B:E7:EE:0A:28
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:80:b4:65:8a:20:6c:2d:4b:d9:e5:f9:f2:17:75:00:fc:5a:
76:d3:b5:31:dc:ed:df:43:e0:37:60:63:f3:14:f6:be:13:d5:
3e:71:74:f9:0c:a9:4d:ec:fb:1a:5c:a2:df:fb:c2:5e:c5:99:
e4:3d:fd:ce:32:1e:96:6d:61:df:da:6d:e7:ca:7c:93:79:31:
04:23:4e:49:49:51:c1:15:a7:85:ba:e5:47:9a:fb:36:6b:24:
e2:f5:d4:e2:c7:7f:02:53:d3:6e:da:e7:24:5f:ab:7b:ee:69:
51:d9:af:cc:90:c3:54:c4:d0:30:98:de:00:99:b6:43:64:ee:
eb:fe:0a:85:99:c0:87:68:09:57:a5:de:8e:16:1e:27:18:88:
48:b1:db:d1:99:13:4a:58:78:f6:1f:72:ec:61:8e:c4:04:65:
2d:5e:88:29:0c:e9:36:e0:b0:10:aa:bd:96:92:cf:62:c0:d6:
93:01:4b:e1:28:a6:6d:cc:02:f9:12:6e:6f:21:98:44:7e:76:
21:98:29:a0:09:5b:82:cf:c1:f4:17:cb:ae:75:16:70:9a:39:
37:e6:05:c9:45:af:fd:27:05:a8:47:a2:c2:f0:49:41:ab:c6:
e2:f1:45:40:ba:72:55:46:61:ef:fb:98:ca:b7:3b:45:0d:ac:
bc:11:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:23 2025 by rpki-client