
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: iJozflEvrdN9mUdhBOjBARgUaLdP31d5or08Oa+X8zo=
Subject key identifier: FF:81:97:92:0C:D2:59:27:76:B3:21:32:7A:95:C1:7C:43:6A:D3:C8
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019872CFC46C5E964F1DB1CD3B090211CF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 02:01:15 +0000
Manifest this update: Mon 04 Aug 2025 02:01:15 +0000
Manifest next update: Tue 05 Aug 2025 02:01:15 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: D5lAtRHfQPjkEIz3hiq5f52bHaQ2Pkfc60up+DhwSWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:c4:6c:5e:96:4f:1d:b1:cd:3b:09:02:11:cf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Aug 4 02:01:15 2025 GMT
Not After : Aug 5 02:01:15 2025 GMT
Subject: CN=ff8197920cd2592776b321327a95c17c436ad3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:44:8d:bb:cd:36:c2:85:d4:9d:c8:46:17:
ad:fa:2a:a5:b9:96:ba:da:a2:79:04:bd:ac:e4:2c:
ee:93:b2:20:36:eb:39:09:f4:77:c7:df:a8:89:9e:
f6:f2:94:e5:7f:d8:18:5f:fd:d2:1a:ad:14:e8:71:
ed:d1:01:bd:f7:07:ee:c6:8d:48:41:89:02:87:cb:
c1:cd:9a:73:a0:89:32:32:d8:d2:fa:d6:52:5a:fc:
9c:0c:95:9b:d1:53:24:a9:7d:0d:1f:bc:18:bf:04:
85:23:12:52:c7:bc:1f:16:de:86:15:c2:4d:08:80:
97:5c:5e:61:90:1b:0f:1e:99:be:30:31:c3:86:1c:
6c:7f:b3:d5:e5:d1:97:96:40:b5:42:c8:b2:1c:70:
59:45:83:71:dc:5b:9b:38:95:e4:76:08:2b:04:70:
99:5e:66:a9:c8:ca:c6:1f:af:1d:07:fb:94:24:77:
bc:23:9b:02:40:97:ec:b8:27:a6:02:90:53:fd:43:
c4:23:b2:ec:ab:7c:f7:1a:97:93:2f:ea:f8:ec:2f:
e0:83:a6:5b:d2:6a:23:70:20:9c:27:71:17:bf:f8:
b9:cf:15:f3:63:fc:f0:5c:a6:20:53:5b:49:10:6a:
16:f3:65:3b:06:d2:a6:fc:e7:b1:66:7f:9b:a7:f5:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:97:92:0C:D2:59:27:76:B3:21:32:7A:95:C1:7C:43:6A:D3:C8
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:28:2d:f8:5c:e2:7e:f0:3b:f9:c9:2d:2d:aa:16:1a:1e:74:
d9:1c:56:4b:5c:b5:ce:f9:bf:65:21:71:c4:c8:ca:a2:d6:f0:
ba:61:e4:26:6d:31:2f:5d:ab:1c:3e:72:27:d6:5c:9b:e3:8c:
09:0d:36:53:00:8a:97:3a:22:0a:a2:21:35:89:09:08:30:51:
fe:fe:0d:d3:92:68:f1:e0:27:57:87:36:ec:93:19:5d:a6:38:
1f:65:fd:1f:64:14:60:f4:17:bc:b4:e0:e8:2a:24:a0:69:ec:
43:f3:39:74:dc:59:61:67:e0:b6:2a:17:46:fe:05:8e:1f:cf:
11:e9:21:c3:f1:ba:38:2c:de:f8:1d:2d:35:10:39:c4:94:a9:
c4:06:78:8b:28:93:16:83:77:1a:40:a7:94:5b:c9:c8:c7:92:
10:1e:95:4f:4b:f2:20:3b:ee:82:2c:bd:29:84:23:39:ee:3b:
32:c0:51:23:fe:ca:90:1f:7c:d4:ac:c0:2f:86:ba:4f:d6:72:
5a:1a:e4:76:fe:e2:d5:10:7d:c2:5a:2a:b5:8e:48:00:71:d3:
c0:f0:aa:e1:cf:92:37:dd:20:99:4b:b8:a4:e8:3a:6f:26:32:
6f:e1:27:66:2f:dd:73:1b:bc:83:ff:b1:ae:19:fc:b6:f0:35:
fd:ae:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:12 2025 by rpki-client