Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File: xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier: MSW6lC8SYw17HtSZT5NotyPKQnJ7rVugGr2jtTfpS1M=
Subject key identifier: 7F:5C:F4:17:E8:2B:46:AC:02:8A:DD:2D:94:DB:90:FE:46:9E:E0:34
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 01987C77B228469F1140DD21E7C34ADB5227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number: 069C
Signing time: Tue 05 Aug 2025 23:01:15 +0000
Manifest this update: Tue 05 Aug 2025 23:01:15 +0000
Manifest next update: Wed 06 Aug 2025 23:01:15 +0000
Files and hashes: 1: UDwBWBhc7p3WNVdJtp5WShdrtpI.roa (hash: xcnjrx2kx71cryAKZS4UhrLsHTkf1Xzut87xSakHcWk=)
2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: KnaXLHYhIxaTHGx+sv1KWf4rWadwWwEj5l+o9AuO3HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:b2:28:46:9f:11:40:dd:21:e7:c3:4a:db:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Aug 5 23:01:15 2025 GMT
Not After : Aug 6 23:01:15 2025 GMT
Subject: CN=7f5cf417e82b46ac028add2d94db90fe469ee034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:48:42:a8:e8:7a:95:2e:71:79:77:6c:34:
58:1b:3d:78:a4:c9:6e:c1:ce:a2:79:4e:5e:d6:e3:
22:fa:ac:1c:a7:03:7e:41:16:40:bf:48:da:83:39:
7d:a9:d9:2d:fc:5a:17:8c:02:5c:70:07:46:4f:9b:
41:3b:7f:3d:b2:10:63:b8:8e:65:da:78:6a:41:a8:
80:27:bc:aa:93:20:2e:62:51:1a:c4:d4:c6:6f:8d:
e6:91:e9:21:aa:a5:5b:ab:a8:1b:24:1e:e9:46:ab:
71:4b:fa:79:75:8e:a8:f3:5e:49:49:24:70:bb:84:
b3:19:30:15:02:89:d3:35:ac:77:a9:89:13:66:49:
b1:db:18:59:c5:9d:3a:90:1b:21:2a:89:1b:c6:b7:
2d:48:57:99:81:2a:61:4f:e4:12:58:3c:51:ba:4b:
85:03:b2:8c:41:11:cd:94:70:85:15:b9:9b:e6:a9:
1e:d0:c6:47:3c:a9:b3:81:64:a9:4d:a0:88:32:96:
11:ab:cd:c4:02:81:42:3b:e1:62:91:ee:a5:aa:c4:
c1:60:97:95:78:6c:37:40:1b:41:f1:0b:6d:4a:7e:
4a:11:12:7f:1d:62:18:3e:d3:93:6a:b0:7a:05:7e:
e0:9d:18:a7:20:fe:d4:65:b8:ac:b0:6f:22:98:c3:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:F4:17:E8:2B:46:AC:02:8A:DD:2D:94:DB:90:FE:46:9E:E0:34
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ae:cd:32:2f:84:4f:27:b9:b0:cf:c2:04:c0:4e:23:23:1a:
81:00:49:45:06:2d:62:88:f7:6f:dc:14:bb:83:cd:81:2f:01:
6f:86:4a:c0:75:02:07:ac:72:34:3a:c8:6a:5b:03:d1:30:7e:
67:bb:25:81:bf:cf:c8:29:4b:bd:a4:d7:e0:09:31:5f:43:a8:
63:2f:b5:59:93:5a:f6:25:38:1e:f2:06:e7:f9:7a:da:32:0b:
ea:5c:15:9e:d7:13:99:6d:8d:e6:f9:02:63:88:b2:a7:09:fe:
53:5a:c6:4a:5e:00:a0:1b:7c:7b:89:22:5e:4f:d1:b0:f0:28:
8b:31:c6:c9:c1:e9:84:33:92:b0:21:99:3f:79:cd:15:1e:64:
fb:0c:b8:00:5f:e9:8b:ce:81:80:b1:58:ab:9f:27:9a:ba:3b:
51:49:9c:00:c6:4b:13:6d:21:6f:69:71:8b:17:47:9b:29:07:
cc:ee:db:9f:43:ab:58:97:09:0e:f0:25:73:19:1e:4d:b9:f9:
c3:c2:85:09:32:c0:de:79:27:08:c9:fc:4b:6d:de:79:9b:b6:
44:e3:a3:be:e4:e2:e1:b5:9d:9e:b4:a3:45:79:b6:f5:4a:4e:
21:ac:f5:89:f0:0c:50:74:00:d5:6f:41:b0:ab:e1:85:63:d0:
41:09:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:21 2025 by rpki-client