Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: 7MF4CmqbS+yOm820pqinStrMv83g3SEvWniVmj36TiU=
Subject key identifier: 14:62:1E:FE:C2:AE:F5:9A:F2:BC:09:DA:62:92:E7:A9:10:1B:89:53
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0198827A113D196A5040A7A3CE2279D946D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 15BB
Signing time: Thu 07 Aug 2025 03:01:34 +0000
Manifest this update: Thu 07 Aug 2025 03:01:34 +0000
Manifest next update: Fri 08 Aug 2025 03:01:34 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: KpsqHCLd0A9suw5N3UjuAB3V7nLOKCikciSzo4rdUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:7a:11:3d:19:6a:50:40:a7:a3:ce:22:79:d9:46:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Aug 7 03:01:34 2025 GMT
Not After : Aug 8 03:01:34 2025 GMT
Subject: CN=14621efec2aef59af2bc09da6292e7a9101b8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:fe:9e:e3:b4:f5:35:9e:ab:92:b9:ac:6a:
46:db:c7:67:93:e1:ca:77:91:c7:7e:ea:e4:9a:45:
59:95:f1:f5:82:70:6e:00:c2:7b:13:88:e9:5c:53:
72:a9:91:5f:ff:fd:77:d1:0b:a8:06:3c:07:e3:dc:
8b:0c:8b:f0:04:5e:74:1e:43:fe:c9:f0:be:2d:eb:
8d:2e:eb:b6:fd:20:7a:ab:90:74:d9:ee:74:03:7c:
38:39:0d:72:e6:1c:09:6e:76:74:62:70:c5:2b:28:
93:28:c9:03:4c:70:27:d9:d9:ca:0d:30:f8:dd:39:
5f:5d:6c:37:38:c7:ec:31:72:93:d1:b9:0c:45:dc:
0b:40:64:44:d5:66:f9:bc:1c:6f:e4:22:af:c2:37:
f8:42:96:f7:48:f8:4c:6d:e9:47:d6:ea:e1:9d:5a:
30:81:7f:7f:ce:34:fc:1a:f4:83:db:03:2c:1c:d7:
3f:e7:09:97:5e:78:12:0a:fc:58:b2:ef:62:90:34:
b3:b1:8b:20:f8:51:c3:e7:7f:a0:36:9c:1f:99:a4:
82:60:7d:44:69:66:da:df:b3:af:b7:e8:37:6c:c2:
12:7e:95:4d:86:74:ce:4d:92:45:c2:9a:2c:96:a1:
58:0f:ea:aa:6e:ec:39:15:56:46:0c:89:d2:cc:79:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:1E:FE:C2:AE:F5:9A:F2:BC:09:DA:62:92:E7:A9:10:1B:89:53
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:be:1d:5d:83:69:6c:b8:6f:6a:d6:c5:91:d9:10:45:cc:
99:39:9a:7e:66:79:70:52:05:9a:6c:6f:72:55:28:95:69:8d:
65:53:11:de:53:37:b1:5b:ee:b1:69:ea:0b:8b:b8:db:4d:a7:
7a:50:b3:91:c9:53:16:4d:57:32:e0:7f:a6:74:86:14:f1:2e:
bc:aa:92:a8:6e:c3:c5:62:a6:f8:ea:72:2a:f7:fb:12:36:81:
11:e1:e0:86:8d:c2:56:35:86:4f:2c:dd:2e:f4:7d:e1:7f:49:
5b:4c:d9:2d:62:0d:71:a0:65:d5:02:f1:f4:de:15:74:d1:82:
b7:3e:da:8c:66:25:94:41:88:8c:e4:dd:8d:dc:61:a5:a7:1e:
25:c8:e5:a1:22:07:28:db:3c:8c:6d:f1:cf:25:8f:57:83:ea:
2d:b7:ae:1d:e0:b4:50:a9:80:98:c2:ad:58:87:8c:af:bd:92:
a5:05:89:2e:7e:14:37:fe:97:ed:ee:7a:22:eb:1e:1a:d0:81:
86:8d:c9:bc:ed:b0:75:81:2d:ae:8c:63:6a:b3:39:ef:f7:58:
69:29:d5:f2:f4:fc:54:9b:61:b7:d5:ac:8f:0a:e8:31:9d:93:
de:30:97:60:f9:67:2c:4b:96:78:21:8a:8f:f8:24:2c:41:8a:
5a:a8:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:54:29 2025 by rpki-client