Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: Iho2btU0Njnn4zwAA2A3L8HFTIHqgP8Cp5V46t2cp9s=
Subject key identifier: 48:93:55:36:C2:9C:6D:E2:B7:9A:AA:5D:D6:E3:DC:C8:91:94:1F:CD
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01987A88E4EE8049765852CC06EE8443C378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 0DE3
Signing time: Tue 05 Aug 2025 14:00:48 +0000
Manifest this update: Tue 05 Aug 2025 14:00:48 +0000
Manifest next update: Wed 06 Aug 2025 14:00:48 +0000
Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: xU4kdLbhcz0ZfqyS2zUP2t077yfZTeEhNIF0UiUTc4U=)
2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:e4:ee:80:49:76:58:52:cc:06:ee:84:43:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Aug 5 14:00:48 2025 GMT
Not After : Aug 6 14:00:48 2025 GMT
Subject: CN=48935536c29c6de2b79aaa5dd6e3dcc891941fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:4c:b7:d3:46:69:45:0d:9a:42:84:e2:90:
01:4a:30:5e:cc:d5:de:a2:94:fb:3a:d4:13:da:d1:
5c:bf:87:1f:d9:2a:84:20:f9:07:4d:34:9c:af:50:
89:33:c9:2e:32:14:f0:1e:9d:e4:29:d8:2f:cb:b6:
31:89:f0:bf:34:89:7a:56:64:21:d7:be:0d:09:c2:
2b:ed:13:c9:7e:b3:b1:1d:4e:25:b8:de:1a:d2:af:
c4:21:f1:3f:0f:05:17:da:19:07:2a:c2:75:18:1c:
43:04:cb:fd:45:99:c1:a8:ee:df:d2:94:09:f3:f1:
19:7c:fe:fa:9f:f6:16:12:81:38:e5:db:68:53:aa:
f1:5a:bf:1f:75:52:b7:20:11:b2:31:ab:1e:db:b7:
7a:79:76:0b:7d:eb:c2:8c:3c:65:8a:e2:19:eb:3b:
c7:9a:f2:34:2d:47:cb:69:77:3d:d6:20:c7:a9:bf:
02:89:62:16:33:07:92:c4:df:99:9a:7a:94:84:93:
88:37:9e:60:46:74:86:f7:b3:b7:99:c8:c5:bd:e6:
b1:47:7f:52:38:a9:e1:1d:26:c2:8e:fc:7c:f4:e8:
6d:fb:44:fa:3f:61:f3:7c:a3:1b:05:9e:11:b4:49:
7b:b6:dd:95:a1:dd:83:97:42:27:f8:2d:07:9c:1b:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:55:36:C2:9C:6D:E2:B7:9A:AA:5D:D6:E3:DC:C8:91:94:1F:CD
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b2:8a:77:aa:6b:14:12:fc:7a:62:78:1c:87:be:65:f5:0b:
48:86:15:41:cb:f9:fb:9d:42:9d:02:bd:41:50:3a:f8:25:c0:
25:78:ad:08:f9:cd:9e:e9:17:ae:3a:41:50:09:29:47:ef:ed:
61:d4:43:6b:7e:29:b8:4b:a1:c2:46:01:a5:ac:f4:7a:dc:07:
60:fc:4c:f3:71:22:c4:3d:41:43:5e:f0:b7:08:f7:1a:84:15:
bd:38:98:70:8d:b4:59:f3:1d:1c:6e:4e:d6:b8:3f:07:16:df:
ad:48:2a:b1:2c:d3:8c:0b:b0:48:81:19:48:49:18:90:e5:cf:
ed:89:09:5d:be:41:bc:5c:90:84:65:da:70:b1:42:0a:df:5b:
93:28:58:b1:4b:b9:e5:ec:f7:23:3d:c4:57:23:cd:58:46:e8:
a3:88:80:7e:2f:0f:d3:fb:19:d0:dc:24:ac:56:f4:ea:14:56:
dc:b7:40:86:a1:a4:63:d1:8a:09:40:58:ac:7b:19:da:f4:31:
80:91:f1:3e:30:c9:95:9f:b0:49:ff:3f:51:3c:2c:ff:0b:70:
8e:cc:07:89:d0:25:75:0b:12:7f:25:a9:af:69:8f:37:d6:82:
24:54:66:4a:c1:bf:fe:cc:07:3c:ae:aa:60:30:95:4b:eb:39:
40:bc:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:24 2025 by rpki-client