Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File: xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier: +qrtQC4BS/CCg5UwsaAKdQ2rw3I4n8bKp5If0zh2MqM=
Subject key identifier: 50:9F:DF:06:7C:2A:BD:DC:86:E1:BE:DE:AA:53:76:F7:08:95:A1:1A
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial: 01987298A4DBA8201FDBB4B16E4DDF17A3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number: 14A0
Signing time: Mon 04 Aug 2025 01:01:02 +0000
Manifest this update: Mon 04 Aug 2025 01:01:02 +0000
Manifest next update: Tue 05 Aug 2025 01:01:02 +0000
Files and hashes: 1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=)
2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: 1W3Sz7TuOqDxi7kheBiVaZTSleJBw19iqQt5tuspdY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a4:db:a8:20:1f:db:b4:b1:6e:4d:df:17:a3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Validity
Not Before: Aug 4 01:01:02 2025 GMT
Not After : Aug 5 01:01:02 2025 GMT
Subject: CN=509fdf067c2abddc86e1bedeaa5376f70895a11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:eb:8d:18:e4:82:9f:96:88:29:b5:f6:9a:
8c:cc:db:4b:a3:55:f7:1b:d2:2e:9c:ea:f5:83:cd:
3e:d0:2f:fc:b7:cd:69:be:68:08:55:fd:e6:62:02:
43:d8:a5:cc:6f:e3:64:dc:14:ff:f6:15:ce:10:37:
49:bb:ec:92:56:d4:48:09:ab:4d:06:4b:e3:db:26:
b6:ba:82:ee:9d:56:54:c0:a6:ce:4a:ba:e9:bc:93:
5d:4b:76:a9:ad:5d:3c:0e:13:2f:bc:d0:17:fb:13:
ac:99:48:9d:4a:58:6f:91:80:9d:65:51:b8:54:67:
70:1f:09:ab:65:f9:b3:7d:20:a4:7b:be:00:b6:c3:
df:49:40:7b:e8:82:0e:b3:cb:af:f6:30:e2:1a:12:
75:3d:63:ed:06:b6:9d:43:89:05:09:ad:92:0b:6d:
77:82:76:ef:45:67:39:9e:a7:65:38:61:da:e1:fa:
0a:98:f4:02:8b:fb:25:c4:ce:3d:d0:a9:f7:bf:3e:
20:e0:f9:81:9b:9b:e7:1d:e7:70:e3:4a:01:96:ec:
57:20:8d:71:4f:b4:f6:15:35:0f:8a:83:0e:60:24:
48:bf:72:2e:35:74:33:66:c9:5a:b2:f2:88:d6:dc:
dc:5c:e9:39:ff:2a:0b:27:90:7f:dd:af:d3:6e:cd:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:DF:06:7C:2A:BD:DC:86:E1:BE:DE:AA:53:76:F7:08:95:A1:1A
X509v3 Authority Key Identifier:
keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:5b:30:bf:07:09:93:25:29:0a:0b:f7:47:68:ff:c8:78:
87:6e:eb:9f:cf:93:b0:ba:95:cc:7c:e0:9d:79:25:3a:df:07:
c7:56:88:5d:ef:8b:ac:ac:14:c1:07:b9:84:8d:1b:f5:5e:ab:
df:3a:e7:34:ea:c5:73:40:60:65:6d:87:06:bf:94:28:98:41:
4e:16:ad:64:01:f2:3b:01:89:13:cf:b0:c8:8b:ce:f3:3d:b9:
49:cc:13:b1:cf:e9:03:34:2b:61:30:36:96:23:68:ab:61:1e:
27:c3:f9:ca:9e:88:eb:f1:d3:e1:9f:c1:1a:ad:3b:9c:fb:61:
d2:2c:e5:6d:2a:e5:ef:f0:79:55:6f:6b:25:68:69:ec:b3:3d:
fa:4e:0b:f1:c6:3d:4d:8b:ed:d7:bf:55:6d:ac:f3:68:c8:e2:
1e:25:ab:19:fd:a9:2b:73:c9:77:52:de:ab:fc:94:50:c3:f4:
3a:74:13:57:34:b6:7a:3a:7d:a5:b4:66:57:c3:d9:a6:98:59:
1c:19:55:8c:17:66:2e:79:5b:86:2f:5a:5d:b1:2d:9e:1e:79:
de:46:84:bd:23:f6:5d:0b:e4:92:f4:b1:d3:0e:10:7c:42:ea:
c3:00:8c:c5:09:b8:50:ed:16:f5:b5:51:a9:29:2c:c6:d2:6f:
eb:7b:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:57 2025 by rpki-client