Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: ukq7WwUKkoj7o1tcLDBz0fCuChPpEi9yke4V7r5OMDs=
Subject key identifier: 8E:E4:DD:66:92:03:38:BA:28:89:07:11:E1:6D:B2:64:07:47:07:99
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019885B1638D7CE1F40BDCDE6E1285D8594F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 17
Signing time: Thu 07 Aug 2025 18:00:51 +0000
Manifest this update: Thu 07 Aug 2025 18:00:51 +0000
Manifest next update: Fri 08 Aug 2025 18:00:51 +0000
Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: 54RXG0INmn9Fl1kuXPJMfpWI8Mu6/4v+/AVuFUlfye4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:63:8d:7c:e1:f4:0b:dc:de:6e:12:85:d8:59:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Aug 7 18:00:51 2025 GMT
Not After : Aug 8 18:00:51 2025 GMT
Subject: CN=8ee4dd66920338ba28890711e16db26407470799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:09:db:fc:b8:28:2d:61:a9:68:8e:2b:b1:
e2:b7:1f:93:9a:04:a4:e4:23:b4:0c:0a:f6:48:48:
b4:8e:9f:79:b7:da:52:3e:5c:c9:9d:0e:7f:0c:cd:
28:e6:9c:d7:a1:85:ae:7f:52:35:07:4d:f0:99:dc:
f1:b7:8e:d3:da:17:c4:89:8f:45:86:5b:e5:34:51:
29:c5:3f:85:4e:5e:e5:8f:54:c7:77:1a:5f:04:b7:
27:b8:1d:6b:3f:71:d7:a0:be:86:1e:7a:4d:af:12:
4e:4d:38:e7:e7:e3:b0:96:e3:a5:22:58:86:f5:de:
97:34:95:84:a6:5a:29:a0:67:5e:b7:76:5c:0c:fc:
8a:79:cc:90:18:12:ac:a5:35:7b:90:a7:1b:3d:26:
ed:24:00:68:51:13:3f:c6:ea:7a:09:7f:df:81:af:
f1:06:7e:4e:7e:0d:78:97:3a:57:01:86:25:c5:9a:
f7:44:c8:7b:4a:73:6b:32:b6:6e:03:1d:85:b8:ea:
ab:fc:c5:34:e3:fc:4c:2a:2c:9d:2d:57:0a:1c:a1:
15:b8:c1:80:dc:76:14:0e:a3:e7:88:79:e2:8d:7a:
45:9c:cf:f7:21:00:29:54:e3:86:2b:ab:56:65:67:
b2:39:b2:a0:eb:70:9a:20:9c:09:9e:f8:78:50:97:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:DD:66:92:03:38:BA:28:89:07:11:E1:6D:B2:64:07:47:07:99
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:43:34:0b:f6:cd:4d:99:f5:22:8b:ae:23:91:ed:fd:6b:
7c:f3:3f:9d:32:f8:57:5d:ab:8e:46:90:c7:46:61:c2:3e:e9:
57:3a:d3:77:42:88:e3:23:25:65:e6:c1:01:66:74:72:0e:e0:
18:f1:52:3e:88:5b:5b:d2:72:c5:76:8c:eb:d7:82:d9:e5:e8:
c0:1b:dd:d5:ae:a3:e1:28:ed:42:8d:b1:1a:4f:dd:24:d0:95:
79:69:0c:f0:49:a7:f4:b3:06:83:0c:4f:73:89:47:a8:34:6f:
40:82:be:62:a9:d2:1a:10:03:2b:fd:a4:84:15:14:98:79:7b:
98:06:fb:69:f3:0d:56:99:86:82:35:4e:2f:76:f4:93:40:e9:
7a:5d:6e:1b:bb:94:dd:e6:e4:bb:40:21:13:bb:b4:e4:10:de:
91:22:fa:4e:a5:b7:1c:9e:94:b6:aa:3b:01:7c:9f:5e:e6:5f:
7f:a1:66:0b:2b:b1:0c:70:a2:0c:c8:e6:b1:67:8b:ec:df:51:
35:ed:a3:dd:af:f9:cb:a4:f9:3d:5a:c4:12:be:2b:92:dc:b9:
49:b8:1c:14:e6:d6:3d:46:0b:d4:ad:89:d0:dd:32:ef:06:4e:
25:60:4b:d2:54:f0:e0:c1:a4:6c:5e:9f:61:3e:37:78:c7:e9:
6d:0f:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:19:19 2025 by rpki-client