Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier: ZG9T69o3chDJ2vocAfyxsmwkuCBSp79Uf7aLBpO67UM=
Subject key identifier: 8E:64:25:40:40:0D:FF:4B:32:FC:07:7A:E5:92:C8:57:AF:79:35:9B
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 0198892074F532F9A36BAB815194308EF012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 10:01:02 +0000
Manifest this update: Fri 08 Aug 2025 10:01:02 +0000
Manifest next update: Sat 09 Aug 2025 10:01:02 +0000
Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=)
2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: wJkDFwvgVseNmd+RDIGKXctXoAKsTKyn05gYnhqI3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:74:f5:32:f9:a3:6b:ab:81:51:94:30:8e:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Aug 8 10:01:02 2025 GMT
Not After : Aug 9 10:01:02 2025 GMT
Subject: CN=8e642540400dff4b32fc077ae592c857af79359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:8a:5e:c0:eb:8f:73:85:d2:72:0d:9d:92:
6f:bd:31:bd:30:42:e6:a4:c5:29:64:44:e5:f2:b9:
22:ee:d1:41:11:0f:ed:2b:01:52:5d:c1:df:28:63:
4f:e5:1e:d4:56:e7:f9:4d:3d:c2:99:c0:70:70:96:
6d:5e:9c:2d:03:1d:98:8d:04:7b:34:8b:da:ee:48:
42:bb:19:14:b5:07:07:f7:23:32:63:fd:24:bb:d0:
a4:12:93:ff:a4:10:8b:df:03:48:40:46:11:95:79:
c8:c8:0b:65:5c:d2:27:25:b8:40:d1:f0:63:a3:f8:
b2:3a:ff:d8:19:53:e3:eb:f2:62:a7:ce:6c:11:5b:
25:ed:e4:d9:1e:2b:d7:af:9a:f8:aa:e3:74:f5:4d:
bf:f9:74:3b:e8:08:00:2d:9b:16:5c:58:d9:97:50:
93:0f:3c:77:6f:63:64:1b:1a:3d:8e:81:43:dd:c9:
d2:7c:90:e1:a3:24:48:2a:9a:86:e9:f2:39:b3:b5:
0c:25:02:61:0c:f3:b7:72:64:66:e9:e7:1e:51:84:
5d:e6:21:09:76:e8:fa:48:39:f6:93:e4:4f:c2:05:
8a:4d:97:7c:79:8b:09:c8:c9:69:d4:6f:44:7b:6c:
d2:35:a0:38:b4:81:72:a0:9a:9e:ba:55:ad:4e:b0:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:64:25:40:40:0D:FF:4B:32:FC:07:7A:E5:92:C8:57:AF:79:35:9B
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d8:6a:2c:31:5f:6a:00:87:e6:bd:22:85:74:cc:10:81:6a:
ba:8c:75:f2:6c:cb:87:f2:2c:f3:6e:ff:f8:80:46:8c:fa:eb:
05:b6:c3:14:cb:36:01:49:99:4a:a4:66:54:cb:78:7c:da:85:
99:32:52:52:65:33:65:b6:cc:f1:5f:b9:ab:06:ff:3a:22:04:
8f:17:01:84:36:41:35:ad:ab:f9:e6:32:7b:00:45:49:4f:a0:
1d:fb:cc:a2:c4:be:b9:38:91:37:08:1b:e0:f5:3d:ff:56:d7:
40:95:a1:4b:6a:f1:dd:e5:50:8b:af:d2:fd:57:79:37:50:02:
74:80:8f:de:cf:a0:2e:21:34:2b:d8:2e:29:c0:68:e7:9a:51:
f2:76:96:19:55:8c:89:33:9b:bd:70:66:1c:f2:3c:5c:7d:ca:
4e:6f:c4:8a:35:51:fc:1d:5d:27:45:d1:8c:b9:4e:fe:1e:77:
f2:8b:e6:51:44:19:bc:56:a4:4c:90:af:b4:4c:9b:b9:77:38:
cc:f9:dc:39:05:d3:6a:f3:70:3f:1b:06:ca:41:8a:d8:42:c3:
09:d8:2f:83:40:78:f3:c8:5f:b3:13:da:51:fd:0e:a6:dd:d7:
02:8f:10:a8:06:f5:8e:16:00:30:30:8b:01:3b:2e:d7:b6:33:
ba:ae:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:48 2025 by rpki-client