Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: 6nkRtGQl4xduCvsnabk3TX5u8EgVXz6Kz1FVGbKcpXU=
Subject key identifier: FC:A4:85:0F:72:95:37:B1:32:84:9B:51:B7:3E:61:5F:F0:43:3A:B0
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 01989524DA0A2E668AB5DB37E6B1BF6A5D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 147D
Signing time: Sun 10 Aug 2025 18:01:16 +0000
Manifest this update: Sun 10 Aug 2025 18:01:16 +0000
Manifest next update: Mon 11 Aug 2025 18:01:16 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: Cwl7eD1k5bmwO1HmObxDTTcZlFdciCSQi/WIEh8O640=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:da:0a:2e:66:8a:b5:db:37:e6:b1:bf:6a:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Aug 10 18:01:16 2025 GMT
Not After : Aug 11 18:01:16 2025 GMT
Subject: CN=fca4850f729537b132849b51b73e615ff0433ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:c8:a5:d1:6f:ad:db:1f:c1:ba:4c:f2:4a:
8a:c0:5a:34:d8:53:12:d1:6b:c2:44:3b:7f:f6:17:
43:70:52:af:49:f6:83:8a:09:c1:7a:c1:c3:68:7f:
e0:41:9e:54:95:fc:91:75:76:6e:b9:67:01:78:1b:
fc:57:fc:3c:77:8d:05:9e:cf:8a:23:4f:dc:78:3f:
5d:e1:56:b5:7c:a2:6a:51:32:aa:c6:6d:f1:58:8a:
c6:ec:ea:3e:50:59:50:c8:b7:77:2f:a4:e3:d7:61:
0a:72:c1:2c:62:cc:b7:04:6d:d6:e2:b4:0d:ee:f7:
0e:d3:80:54:91:ae:fc:c5:65:4e:d7:db:ac:cd:6e:
15:d3:f9:fd:3f:43:78:9c:6b:49:5e:42:89:d2:92:
2b:1b:93:22:8e:ec:6b:ab:b0:fc:3a:80:57:b9:f8:
de:4f:84:0e:94:9a:b6:1c:e5:6c:b4:e7:e5:f4:50:
59:46:bc:45:4c:13:89:b2:0d:ce:f0:93:f7:1f:56:
86:27:39:68:d7:9a:c4:33:53:92:4c:64:c2:1d:44:
5c:a2:ff:ca:fd:2a:b9:eb:ff:47:59:be:0c:be:73:
34:c3:89:de:1a:4d:71:39:e9:2c:90:32:74:91:04:
c9:60:67:4a:ac:aa:e7:ee:98:d2:5d:02:d0:8a:2b:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:85:0F:72:95:37:B1:32:84:9B:51:B7:3E:61:5F:F0:43:3A:B0
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:51:9c:a3:99:5a:3d:96:de:1b:17:05:4b:c3:e7:df:12:
06:ff:d0:01:23:88:b7:03:a7:55:dd:39:03:f7:79:06:e5:1a:
73:53:d3:0b:df:28:1d:60:3e:1b:89:75:a8:5a:b8:a4:af:70:
ba:64:8f:c7:30:c0:62:a3:96:0c:6b:3a:6b:ff:47:3e:3b:71:
95:73:96:3d:10:91:90:05:88:bb:90:c1:6c:9e:9d:b4:6d:48:
34:ba:71:03:d7:d1:3e:bd:62:b9:c6:36:1e:d9:7c:94:c7:37:
56:31:b8:b9:9b:9b:f6:fc:49:06:17:fa:e3:9c:82:fa:09:4e:
0b:9a:c2:ab:b9:9f:b4:76:4c:b8:a2:96:fa:74:96:f6:47:79:
aa:77:5c:4f:a6:5c:73:84:01:17:77:cd:d6:85:17:46:ef:0d:
32:07:74:8b:1c:86:fe:8d:f6:81:3f:c8:fc:08:90:19:64:f0:
ac:75:34:ad:4d:d6:27:6a:fc:fa:34:99:0d:2b:ed:63:a5:f3:
6d:97:9b:b6:b4:54:42:e0:a5:dd:e2:7b:09:62:26:21:c3:41:
c3:17:84:30:d3:f3:fd:ab:02:a7:9b:99:52:7a:8a:13:78:01:
b9:9f:cd:b6:5a:51:02:dc:0f:30:6e:e0:ac:44:fb:6d:2b:07:
d1:24:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:11 2025 by rpki-client