Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: 3B9HA1iREwTNAKLvMgI7OpN0IKFkhhLa3Y70WBkoYC8=
Subject key identifier: 9B:7F:CC:49:77:03:3D:F4:09:29:FF:AA:BF:0F:84:BF:58:62:F4:D6
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 019892C9ED9E79C0AC133E59FE4B7FB74AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 07:02:43 +0000
Manifest this update: Sun 10 Aug 2025 07:02:43 +0000
Manifest next update: Mon 11 Aug 2025 07:02:43 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: N8eNP4UmE+nIZ4ojKfOF1NPD7Thej333fWr/W1Oq5FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:ed:9e:79:c0:ac:13:3e:59:fe:4b:7f:b7:4a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Aug 10 07:02:43 2025 GMT
Not After : Aug 11 07:02:43 2025 GMT
Subject: CN=9b7fcc4977033df40929ffaabf0f84bf5862f4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:6b:9e:33:2b:10:bb:2f:8b:89:5d:3d:15:
e4:94:b1:d3:c3:76:c0:b3:91:33:21:67:e9:4c:76:
a9:ba:80:04:09:24:b6:ec:36:55:ba:62:a1:17:ba:
88:4f:16:b2:99:04:0c:48:1c:8c:b3:58:ea:bf:d3:
97:b4:90:42:ca:f9:51:f8:38:3a:d9:98:0a:a9:2b:
71:12:20:10:f6:12:41:99:0e:7b:19:cd:91:d0:38:
63:8e:79:cc:f7:ff:cf:82:a6:80:8a:55:15:27:6d:
49:b4:f2:2b:fd:a2:b0:75:6e:28:8b:7d:ec:8d:a2:
f1:94:70:bb:d0:6c:47:dd:c6:9b:47:bb:8e:0e:8f:
c5:99:17:af:19:31:2e:fe:51:17:6e:1f:34:09:5d:
c3:9d:f9:ee:c0:f9:df:37:46:ca:7e:cd:d3:11:d3:
c6:00:98:37:19:49:84:c8:14:69:88:88:f5:2e:b0:
2a:a1:8d:89:e9:d3:87:98:83:82:9a:35:87:aa:c8:
67:1c:28:61:95:43:5a:dc:df:9a:53:a2:ab:41:b3:
67:9c:eb:f3:f7:08:46:17:9f:2b:a9:cb:40:68:df:
ad:52:68:f4:1a:77:21:53:01:1e:50:47:05:fb:71:
8d:e6:87:92:62:1f:33:b6:df:ed:72:98:d2:88:46:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:CC:49:77:03:3D:F4:09:29:FF:AA:BF:0F:84:BF:58:62:F4:D6
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7c:36:6a:64:bc:50:84:7e:b6:e3:e1:8b:9b:40:36:71:7a:
0b:62:30:14:db:04:6b:af:24:ca:0c:74:0e:25:95:7c:ef:86:
01:2e:97:2e:6a:02:85:9f:b9:0e:dc:c1:7e:27:2a:c6:b1:05:
d2:7f:a4:0a:83:48:e0:3d:64:1c:27:84:3b:3e:90:c6:64:1d:
6a:81:d1:91:1f:d2:34:f4:7e:a2:c6:70:67:f3:0f:db:cc:9c:
fd:02:44:78:fe:15:d4:db:73:51:a9:41:81:32:4e:12:1a:56:
ef:88:29:69:22:07:d8:f0:81:4c:aa:a8:99:39:e9:dd:ed:c3:
65:f7:b3:87:a4:4c:a0:e2:e6:56:da:43:58:0c:ea:6b:fc:36:
60:fa:4e:b0:29:79:8d:bb:0a:f2:e3:5a:5d:ea:63:0e:17:18:
cf:e7:d9:45:01:fe:2f:a3:11:c4:83:f3:63:cb:ff:18:6e:03:
3b:7b:9a:9e:a1:d6:3a:12:de:74:b9:96:45:a6:c3:1c:c8:34:
69:8a:5b:b6:77:46:50:15:89:aa:d9:aa:ce:07:ff:2b:74:2a:
b5:a1:a8:44:e0:ac:65:13:fd:c3:07:ad:0d:f8:2d:34:b5:ef:
45:3f:e9:14:90:16:7a:d9:9e:33:a9:21:ff:e1:a8:0c:f1:f2:
f8:72:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:46 2025 by rpki-client