Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: MKVTO5O99joIKYBB1zDETVIMjoVv0TOqqAMcGrKDfJs=
Subject key identifier: 8D:59:74:0C:30:FD:45:65:3A:AB:D7:A1:53:3C:6C:D2:F0:1D:E7:32
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019874BDCBD3A1FD5C4900C6DB255D217CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 0783
Signing time: Mon 04 Aug 2025 11:00:52 +0000
Manifest this update: Mon 04 Aug 2025 11:00:52 +0000
Manifest next update: Tue 05 Aug 2025 11:00:52 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: /OSSFBoh+MHrWrwtd3xjA0OTaONPKNMb3eIwZAGnhdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:cb:d3:a1:fd:5c:49:00:c6:db:25:5d:21:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Aug 4 11:00:52 2025 GMT
Not After : Aug 5 11:00:52 2025 GMT
Subject: CN=8d59740c30fd45653aabd7a1533c6cd2f01de732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:28:e4:02:be:09:17:ad:f6:d4:fd:42:b4:
19:3c:1c:e6:61:ed:29:04:4f:5e:7d:88:a0:24:0d:
b5:2e:06:f3:4a:33:d7:d7:0e:3b:d1:29:c0:b7:1b:
49:72:33:ce:3a:5a:c0:3f:3f:0c:41:0b:ab:97:16:
a7:42:8e:93:6a:22:cc:0f:80:c9:55:79:99:c7:ac:
27:60:06:e4:dd:48:98:44:e6:a1:61:9c:a1:ad:5f:
df:e1:95:08:28:27:61:ab:c2:62:77:92:da:0d:df:
91:92:5c:70:e2:f4:86:cf:60:cd:e0:ff:3d:10:f7:
c8:08:d6:81:8a:b5:78:51:8f:d6:a4:3a:8d:24:ba:
99:fa:9e:93:3a:39:ca:0c:16:51:a2:39:49:d5:8c:
5b:f1:ab:9c:eb:b2:8a:f1:09:bb:6f:94:5c:b3:bd:
08:d4:7b:9c:b0:01:23:3a:09:43:08:28:fc:90:83:
04:fa:7c:30:26:c2:c7:46:09:9c:47:9e:5a:3f:19:
7e:e9:33:6d:b0:8a:c9:5e:33:7a:19:eb:ae:43:99:
88:a5:65:d5:b1:39:23:f6:d0:4e:11:ee:49:2b:79:
52:00:04:be:ee:31:fc:e1:a4:a1:e1:63:42:59:b1:
f3:d6:99:14:51:70:ab:27:26:08:85:32:bf:e3:04:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:74:0C:30:FD:45:65:3A:AB:D7:A1:53:3C:6C:D2:F0:1D:E7:32
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:92:83:d9:d8:61:ed:2f:97:9b:11:6b:ba:45:4b:35:15:27:
41:e3:37:ce:c4:ad:99:e9:40:76:6a:28:40:d6:a9:33:e2:5d:
15:be:be:39:59:e2:aa:31:20:ee:c8:7e:3b:c8:eb:ba:85:33:
ec:a8:6e:63:ab:c9:03:03:a6:82:4b:0d:8b:24:0a:c7:d1:d8:
67:2b:25:cf:5c:2a:3b:c4:60:d6:c3:85:f2:86:fa:43:07:e0:
a6:b7:31:8d:30:13:a6:c5:69:9a:d1:9b:94:4d:2f:d7:52:fb:
74:26:29:41:da:a5:81:bd:90:7e:22:b0:f0:b6:fb:3f:92:75:
5a:31:b6:94:26:4f:da:2e:3a:d6:d2:3f:98:aa:d0:41:df:f8:
04:ca:b3:85:ea:dd:3c:c4:7d:af:ab:8f:7c:ef:24:f9:66:77:
ae:41:13:3b:6d:9c:f8:80:f4:43:ed:4d:62:13:9e:32:9f:7e:
47:e9:6a:84:81:81:e4:52:ec:dd:92:42:87:eb:78:4c:e2:82:
a7:d1:44:77:19:dc:06:78:38:ea:0c:df:8d:54:3b:aa:b3:b3:
34:17:d5:f8:18:06:e3:d3:41:7d:6b:83:5a:be:ef:2e:c8:40:
42:e0:56:b9:f1:36:49:2f:0b:d2:62:5f:00:22:2a:31:61:18:
d8:1a:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:18 2025 by rpki-client