Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier: F6Usr9JOGwldsQggc0XiyxfCoRq1EwmLG1k6esNMM+Q=
Subject key identifier: C3:6F:40:A0:09:71:D9:FC:F4:AD:F3:14:F7:EB:74:6C:F9:5C:44:62
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 01988054A1D113974E1CE867EDAFB9251C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 17:01:26 +0000
Manifest this update: Wed 06 Aug 2025 17:01:26 +0000
Manifest next update: Thu 07 Aug 2025 17:01:26 +0000
Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: rLLj1ABsKnvCkuKWTv0NazfNRSXj+Ucl7i8BVgpzldU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:a1:d1:13:97:4e:1c:e8:67:ed:af:b9:25:1c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: Aug 6 17:01:26 2025 GMT
Not After : Aug 7 17:01:26 2025 GMT
Subject: CN=c36f40a00971d9fcf4adf314f7eb746cf95c4462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:d5:05:99:bf:03:53:55:5f:87:69:dd:04:
d1:a1:8e:a1:ed:e1:cd:ea:9a:bc:30:28:05:a7:5d:
82:69:2e:f9:41:af:d3:57:5e:f1:8a:4a:e3:1b:5a:
bb:1c:b3:5d:4e:9c:06:c1:16:cb:f9:b4:54:e9:9f:
69:95:93:de:df:d4:5d:a2:dd:02:47:9a:f0:3d:28:
9c:27:08:ba:6c:2a:1e:0f:74:b0:64:92:bc:c6:4f:
ef:67:db:95:ea:3f:ab:3b:b2:f1:80:15:2d:e0:15:
8e:4a:aa:90:7f:6b:fb:03:eb:54:7e:48:f8:60:dd:
9f:00:4b:3f:45:30:3f:f6:43:c2:85:e9:54:50:ba:
1c:69:dd:76:ed:0f:5e:72:55:47:7b:70:1a:af:04:
1c:8f:0f:57:ba:a4:0c:a4:47:28:29:aa:01:5b:ae:
68:c4:cb:e8:c4:96:31:23:23:68:16:29:35:f2:bd:
3e:d1:33:40:49:d8:02:a7:34:4b:7a:ae:2e:ac:a2:
e8:73:05:0b:89:fb:67:8f:f5:99:da:20:63:27:7e:
ed:7a:75:93:08:2c:ab:93:57:0d:a8:b5:67:7b:7a:
82:b9:5d:37:28:70:df:28:92:a2:2a:32:cc:dd:63:
26:1b:66:e3:65:5b:82:65:7a:0a:f6:d5:dc:05:eb:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6F:40:A0:09:71:D9:FC:F4:AD:F3:14:F7:EB:74:6C:F9:5C:44:62
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a6:40:87:7c:0b:08:8a:8d:f1:82:a0:93:bf:bd:a7:21:eb:
c3:db:7c:50:46:46:3f:9b:b5:ac:6c:67:15:e8:05:b2:f1:5e:
ec:a7:a5:68:95:de:27:99:0a:08:fe:37:d5:ae:bd:8b:62:a4:
86:d2:73:2e:fa:ef:7e:8c:c1:45:59:b7:6e:0b:09:c3:3e:cd:
8c:8a:1b:42:aa:04:d2:8e:eb:42:9c:85:3a:f8:bc:63:f1:90:
70:f3:a9:e7:a7:f4:33:28:f7:d2:f3:3f:4e:5d:b5:76:5b:b0:
f6:a9:94:a1:8a:14:94:55:db:a6:40:c6:0f:ba:f9:12:54:38:
3d:90:5a:47:76:f5:d1:46:4e:79:da:e6:45:73:db:69:19:a1:
4d:0c:cf:3b:24:bc:ff:e3:23:13:c8:ea:ad:aa:66:14:f4:b8:
37:0e:d3:b3:d4:0c:d6:a3:4b:18:91:72:5c:aa:a7:61:8c:e8:
2b:34:86:2b:c2:b4:b2:3f:41:87:25:ad:b8:14:9b:34:df:fb:
e4:e6:ea:1b:f5:d6:e8:f1:49:68:c8:6b:bb:f6:0f:5b:3a:1a:
bd:1e:fa:7c:0a:0c:22:a4:4d:9a:4f:14:68:ce:e8:96:ec:e0:
7f:ae:ac:80:0a:f2:df:6d:24:1c:11:ac:a1:d8:f6:83:e2:78:
d1:e7:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:03:57 2025 by rpki-client