Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier: MEXXiFLiKsJatCzYu0CMOShH8Eq7sHk07Z3NfN+/kiw=
Subject key identifier: 06:46:DC:A8:CB:6C:11:68:ED:9C:F5:5B:37:6C:AD:64:A8:EC:9B:15
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 01988E0F8CF6A24735211074C7CBA385744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 09:00:40 +0000
Manifest this update: Sat 09 Aug 2025 09:00:40 +0000
Manifest next update: Sun 10 Aug 2025 09:00:40 +0000
Files and hashes: 1: nEhO-4IOflDc16smasjo46yXDrU.roa (hash: TGudjeK9/qruL2a7Ja97DNoAnaGXmeBxOzedTAd1+AI=)
2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: /xVj+INfZowY5GlY6w929CxMO0pqPsclEbX28rUHKs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:8c:f6:a2:47:35:21:10:74:c7:cb:a3:85:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Aug 9 09:00:40 2025 GMT
Not After : Aug 10 09:00:40 2025 GMT
Subject: CN=0646dca8cb6c1168ed9cf55b376cad64a8ec9b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:f7:c0:f8:00:65:80:57:64:21:e8:75:4b:
ca:2c:33:e0:0e:40:05:0f:74:f0:6a:79:8a:4d:d3:
1c:6d:d0:8d:e7:43:cb:ea:c9:de:b8:06:d8:7e:56:
d8:39:43:32:4b:dd:b5:f8:52:47:1e:32:e0:be:69:
17:69:8b:de:27:49:7c:eb:5d:ee:d0:01:61:e0:08:
58:04:ed:04:0b:86:50:73:96:72:49:52:03:af:18:
18:68:96:11:f6:de:f6:89:e5:16:49:a7:65:2b:6c:
9a:60:7e:3c:bf:de:7e:38:ff:7d:41:4b:3c:c6:30:
10:26:2b:0c:b5:36:64:f7:e5:fb:19:b7:15:33:88:
46:c0:1b:70:94:51:a0:61:54:21:f8:a6:c7:37:e2:
96:9a:1e:c3:a0:77:72:9b:07:75:2a:f2:6f:c8:0a:
37:aa:cd:48:5b:53:01:f6:6d:ac:0f:f5:da:84:46:
94:a5:3a:0f:c5:d9:d9:a2:a0:fc:8e:88:88:1a:cb:
09:bf:ac:27:5a:58:a1:e1:d6:92:57:5d:1e:d0:fd:
88:b0:62:ff:b2:b4:0e:fb:53:d5:27:bd:3b:4a:e6:
c1:bd:4d:00:95:0b:33:99:db:a5:44:9f:5f:6c:8b:
3c:38:7a:2a:35:cb:b1:da:89:fc:7f:53:6a:ff:7f:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:DC:A8:CB:6C:11:68:ED:9C:F5:5B:37:6C:AD:64:A8:EC:9B:15
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:87:f4:77:e4:68:df:a4:6f:73:ca:b5:95:c1:0d:51:e3:
dd:e1:25:c4:ea:80:f8:45:a9:ee:ad:34:56:6f:9d:46:51:45:
10:ff:b6:eb:fa:5a:46:37:8d:3d:2b:8f:f2:c5:8d:93:d0:38:
51:00:53:eb:5e:f2:fa:fe:98:b5:e4:e6:3b:47:46:24:bb:27:
94:02:47:3c:bc:61:93:63:ab:54:5c:41:39:5b:7b:a8:9f:47:
57:73:f8:d2:07:64:49:38:6b:d3:86:e8:b0:b5:db:ad:8b:c2:
6a:49:c5:77:78:31:7e:d7:5d:64:77:0d:04:b7:ed:3b:2c:ad:
86:54:93:8b:c7:29:9b:7f:c0:c6:66:bc:3e:e8:69:6b:de:c8:
dc:97:4e:72:20:33:9a:73:8d:a1:c2:84:19:5c:92:bd:12:d3:
b9:df:c6:cb:ef:61:db:64:df:c5:b7:ec:ad:05:8b:3e:77:b4:
52:e2:18:9b:a3:ea:75:e7:c3:d4:b8:11:88:67:b8:ad:bd:68:
2f:1f:a8:49:69:9a:1f:cc:9a:d0:13:c6:53:d9:0c:ed:22:b9:
38:e9:f0:d0:9e:f0:fb:a1:cf:2d:62:56:1d:49:57:24:b6:18:
da:23:56:90:e2:53:20:37:ca:62:20:9f:a7:dd:23:d8:86:61:
a0:96:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:04 2025 by rpki-client