Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: VPAx02mtYD8nCuCmr3c0h8L9xHxrgm8fk2sSVgpq+04=
Subject key identifier: 94:1B:37:DE:21:CC:AD:6A:CB:9A:66:B0:55:0C:47:75:C2:DE:14:85
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 01987450BE2C2CE7044055EAA9E38F33197E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: fSc6Ce6DWO7ECFhGSyDK46lJFWsFuj7m57j1/hf/Yog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:be:2c:2c:e7:04:40:55:ea:a9:e3:8f:33:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=941b37de21ccad6acb9a66b0550c4775c2de1485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:d4:27:43:84:56:08:81:bc:39:a1:a3:a9:
0e:62:d5:fe:0f:9f:31:4c:8b:79:90:38:2f:00:42:
7e:67:48:18:f1:1e:a3:45:02:ed:94:a0:da:2f:91:
54:50:1e:b4:25:61:28:dd:ba:10:03:cd:08:b1:22:
c9:8c:f4:b1:82:b2:28:df:8f:27:33:dc:60:ae:3b:
cf:a3:0f:90:18:aa:9d:e9:84:c0:64:49:11:9a:34:
fd:c0:8c:6b:28:09:4f:d8:95:70:74:32:5e:4e:9e:
8b:75:44:24:b9:a1:68:0f:88:fa:15:6d:8e:6a:4c:
f0:dd:8c:dc:4d:69:86:41:9d:4e:57:ce:75:b9:98:
d6:98:23:75:2d:c4:e4:29:16:59:e8:81:5e:47:48:
d0:ce:c6:ca:06:ab:37:86:14:ad:87:b7:12:02:cc:
4a:98:13:41:dc:89:03:c1:41:49:28:e3:59:a6:a2:
d1:bb:4c:b8:42:61:65:c9:8e:4a:11:12:08:83:91:
c5:85:06:7e:20:c5:7d:11:e4:2d:2e:c6:31:04:ec:
7c:02:32:24:52:08:2c:21:5a:7e:de:c6:42:39:fc:
1a:43:ea:d4:10:f8:66:95:5a:f9:30:2a:fd:b1:7b:
c9:30:9f:ff:8d:4e:1e:6a:96:41:73:71:b3:c8:87:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:37:DE:21:CC:AD:6A:CB:9A:66:B0:55:0C:47:75:C2:DE:14:85
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:95:9c:1c:55:02:03:f6:8e:2f:5c:97:20:d9:4c:8a:9b:
f0:e0:79:c3:b7:59:3a:63:90:be:12:04:17:c6:b3:19:c9:a7:
01:18:e0:77:ae:04:26:b8:55:e8:50:f4:ca:d4:f6:8c:e7:8a:
48:11:7e:89:f3:aa:a2:d3:43:2e:fe:08:43:e0:5f:89:e5:8c:
d2:40:a2:f0:f8:05:06:33:37:45:96:3e:da:26:4c:fc:aa:2d:
8d:27:20:d0:53:1e:98:78:38:5e:d2:20:2d:ea:4c:71:fe:db:
54:6f:5d:5b:32:1e:c4:9f:15:0c:53:4c:2e:8f:22:d2:6e:83:
3b:8f:5d:df:9c:1b:07:8f:18:4d:7d:32:24:9a:cd:f6:90:7a:
4d:83:39:9d:23:c8:e5:94:15:1f:5f:58:4e:04:a7:e7:b1:c3:
21:41:df:cf:a1:1d:be:bc:a8:75:d7:7b:bb:95:41:3b:54:12:
1a:d0:e8:5a:0a:58:82:f0:92:3c:bd:39:05:2a:19:95:a8:02:
f3:2b:6f:2a:25:74:45:c8:9a:10:76:25:fd:6a:c1:0c:98:6a:
5b:06:cc:b6:ee:b1:8a:d7:aa:11:67:7a:b0:f3:20:97:b5:37:
3c:5b:7a:ba:33:1c:d4:a2:80:00:d1:fe:45:2d:f1:54:03:19:
09:65:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:12 2025 by rpki-client