Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: tRNx513aoFSNpupcqqIncS1S2BdPJJ+jFJ3YVtc+110=
Subject key identifier: B7:8B:28:4E:CE:10:11:D8:95:2A:85:4B:A4:70:A4:32:3C:1D:91:DB
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 01988F59D5A09252CDE2F222D6EAACDE2BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 1368
Signing time: Sat 09 Aug 2025 15:01:25 +0000
Manifest this update: Sat 09 Aug 2025 15:01:25 +0000
Manifest next update: Sun 10 Aug 2025 15:01:25 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: igccHHDhGOumFvKxdZYRSHdR4ANERNETxmLx3/WUk+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:d5:a0:92:52:cd:e2:f2:22:d6:ea:ac:de:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Aug 9 15:01:25 2025 GMT
Not After : Aug 10 15:01:25 2025 GMT
Subject: CN=b78b284ece1011d8952a854ba470a4323c1d91db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:34:50:1b:82:2b:08:73:d3:7c:cb:c8:3d:
9a:70:4c:73:8e:53:ee:f4:ce:16:02:e1:86:0f:8a:
ae:06:86:ac:c2:d0:da:10:e8:63:14:75:a5:ba:5e:
3c:d5:a6:58:79:75:25:c0:e6:4a:b5:a2:c2:6c:05:
e5:5b:fb:60:44:fa:8f:7f:33:74:c1:0f:52:c3:a6:
74:ae:6e:75:f6:75:40:75:1b:00:e9:14:be:c5:72:
95:91:36:8d:dd:cc:7b:86:ba:58:69:9e:83:8d:21:
1b:b3:d1:02:58:bf:0f:42:97:9a:d7:e0:20:a2:cb:
73:ba:75:7c:a0:52:7b:4b:a2:10:63:d5:78:2e:d0:
d8:e7:af:58:65:e6:7f:d7:83:8e:97:32:16:0d:23:
83:63:a6:41:79:28:18:31:75:bc:63:52:6e:b0:d8:
32:da:2b:d4:6b:0b:bd:ab:da:85:90:82:77:55:29:
5f:b4:e6:fd:17:b3:4d:cf:a2:d9:8a:33:ab:be:d2:
dd:cf:d8:02:6b:a5:8d:f0:59:0e:7f:c5:b1:49:0e:
8b:29:9f:b4:88:b0:1f:07:b5:cc:de:8f:97:97:d9:
5a:1d:45:e1:cd:18:c5:c0:dc:24:68:2e:5d:fe:9d:
44:08:00:83:df:bb:d2:d8:31:20:3b:04:a9:8f:93:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:28:4E:CE:10:11:D8:95:2A:85:4B:A4:70:A4:32:3C:1D:91:DB
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5e:0c:43:a5:ce:cc:87:a3:94:52:a9:45:76:32:02:b1:c1:
91:89:7a:10:48:4a:f3:d7:4b:ed:e1:3c:ea:95:2a:9f:b5:05:
55:31:68:a8:02:c5:f1:a7:a1:21:96:9e:43:f6:85:6d:9e:2e:
f3:5b:58:4f:42:6d:0e:53:6e:ae:18:45:5d:07:13:a1:82:e5:
d2:23:f8:b0:46:86:d2:6a:3b:8e:34:2d:c2:4a:64:66:d9:a8:
af:93:07:e3:e3:e0:b8:95:a5:fa:d7:44:9a:15:de:70:0f:83:
3b:af:ad:92:35:1b:0e:8e:4b:d3:4b:a2:1e:e2:d3:b2:a0:7b:
32:58:48:77:19:6a:f4:06:52:c0:49:c1:67:b6:71:3f:51:75:
cd:39:67:dd:e8:86:85:dc:cb:f1:fa:5b:b2:a4:92:15:d7:55:
e5:af:c0:09:dc:fc:7f:46:f9:8f:b0:0a:76:38:ab:73:d0:92:
c5:ee:a6:e2:11:4a:09:2d:74:09:d6:47:63:56:53:f0:e7:9b:
e2:47:af:23:90:c6:c8:8a:1a:e5:40:e6:a9:ea:bc:37:9e:cc:
c3:69:2b:c6:af:a7:73:a1:c0:ef:62:e4:06:65:19:78:59:16:
4b:8c:ef:5f:a2:be:2c:eb:29:cf:7b:37:1a:a3:51:e4:8f:80:
02:8f:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:00 2025 by rpki-client