Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: 1fEwRjzSW3XQnI++uHcjcTQYAcZHHfzFgGXet01hcDE=
Subject key identifier: BE:7A:43:9C:D0:D2:6E:08:BF:6E:97:5B:05:3C:8E:BF:9A:D1:0F:D6
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 0198A0BB67D0F6A39CC39F915F8C1BDB41D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0B6F
Signing time: Wed 13 Aug 2025 00:01:32 +0000
Manifest this update: Wed 13 Aug 2025 00:01:32 +0000
Manifest next update: Thu 14 Aug 2025 00:01:32 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: Ck9Cn+A6k/DggXOF4r/HQHrESl2jCWLS5gFFfaAgpiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:67:d0:f6:a3:9c:c3:9f:91:5f:8c:1b:db:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Aug 13 00:01:32 2025 GMT
Not After : Aug 14 00:01:32 2025 GMT
Subject: CN=be7a439cd0d26e08bf6e975b053c8ebf9ad10fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:cc:88:5a:ac:98:8a:92:82:c0:36:9b:00:
5d:cf:db:9c:88:e6:cc:72:5b:4c:ab:dc:c5:65:30:
b7:aa:be:01:c7:c5:4d:a0:ec:38:c7:3b:18:40:ac:
a8:08:a7:9d:3b:88:56:49:06:42:54:95:d9:b6:71:
c7:85:9c:aa:ee:d3:53:61:47:aa:ee:fe:4a:99:2c:
7a:94:94:4f:50:e8:2a:af:52:ae:c0:f2:fd:32:00:
95:6a:a2:77:a7:58:ef:ff:1e:b4:11:a5:f7:37:56:
f6:76:4d:6c:7b:a3:ad:ab:cd:b3:de:a2:56:dd:87:
b7:1d:43:a3:09:fe:34:4f:9c:62:0d:6c:71:76:19:
d5:65:59:14:c0:dd:70:f4:a0:3a:39:c9:38:24:6a:
5a:bd:c0:7d:e6:ab:0e:eb:30:b3:af:65:cc:b7:dc:
42:04:d0:6c:bc:bc:ba:c0:c3:9e:42:18:79:ac:56:
9f:b1:39:e7:b7:38:ae:78:b2:55:dd:d7:63:d6:72:
5c:14:31:be:1d:40:fc:00:64:e7:47:79:af:f0:04:
b2:fe:69:c4:5b:e3:2d:68:88:fc:32:1d:7e:45:d1:
c1:ce:41:dd:bf:9f:25:43:0e:84:16:0f:de:1b:6f:
c8:78:b2:cd:ec:87:49:eb:79:80:e0:b3:d7:b6:a8:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:43:9C:D0:D2:6E:08:BF:6E:97:5B:05:3C:8E:BF:9A:D1:0F:D6
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:46:53:b1:4a:09:ad:fa:09:34:ff:8b:7f:6a:30:08:39:9f:
f1:18:ca:33:d7:d6:1e:87:df:66:bb:62:a3:c9:61:cc:8f:5d:
bf:c5:44:1c:93:da:ed:26:81:3c:60:7b:c8:0b:ee:c4:ea:30:
b3:d0:7f:0b:71:c7:18:82:45:e3:72:63:49:e7:72:32:7b:d6:
aa:09:2e:53:17:99:2b:41:eb:59:fe:53:48:22:23:13:6b:4a:
3a:46:97:bd:37:87:fa:7a:4c:8b:1f:a5:69:2e:39:63:9c:87:
36:97:5e:de:de:f4:d1:17:62:b0:b5:6a:04:1e:a3:15:ab:cc:
53:93:b5:c4:00:6b:5b:ff:ce:24:fe:99:d8:ee:dc:a2:81:69:
80:8c:cc:a9:08:21:23:23:4c:43:80:9f:95:be:52:d5:3b:35:
71:77:4c:a8:b6:46:b4:b5:96:5b:bf:ec:a8:5f:74:b5:e8:76:
15:85:8a:11:9b:6d:f4:2b:4c:91:42:ff:6e:8d:3e:d2:0b:b3:
33:ad:bd:34:78:53:6b:62:9f:eb:9d:01:15:4c:c4:eb:40:67:
42:8f:dc:11:04:96:f1:cb:57:13:89:7e:81:d1:ca:6e:fd:ca:
ec:62:59:7a:47:7f:41:aa:80:1d:27:c0:29:a2:f6:e1:3b:c6:
db:1d:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:13 2025 by rpki-client