Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: 51LUY2l7CKs1K/3ti7BJu6V59vlmMRgIBWSbpCFDRLQ=
Subject key identifier: 71:A2:7C:C2:A0:18:7C:B8:2F:B4:93:5F:90:02:4A:46:85:4E:7F:9B
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019896A595FC5DF0FCA6E87B7BCF30E3AE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 15BD
Signing time: Mon 11 Aug 2025 01:01:30 +0000
Manifest this update: Mon 11 Aug 2025 01:01:30 +0000
Manifest next update: Tue 12 Aug 2025 01:01:30 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: pOY/HTQt2XFQSVP/dcq30lcuA55NVRberZ+8E4i8ycI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:95:fc:5d:f0:fc:a6:e8:7b:7b:cf:30:e3:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Aug 11 01:01:30 2025 GMT
Not After : Aug 12 01:01:30 2025 GMT
Subject: CN=71a27cc2a0187cb82fb4935f90024a46854e7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:63:36:be:57:22:7b:9d:c5:6d:7f:37:92:
56:93:7d:a0:5a:d9:07:8a:e2:29:77:a7:8b:08:cc:
ed:92:50:94:04:d5:5c:ab:df:18:88:d6:fe:49:55:
5f:01:5d:95:4f:9b:15:a7:ca:65:07:2a:69:e8:6d:
02:b4:fe:cd:97:3b:f1:e4:90:1f:7d:3e:b6:0a:8a:
32:59:f8:77:03:d1:13:97:6e:d8:49:fe:bc:a2:82:
8a:54:bb:33:3b:bd:e2:39:23:97:dc:0d:c6:af:ba:
9e:ef:6e:59:c6:b1:0a:91:44:3c:d4:75:cd:07:ae:
6c:c1:69:2f:dc:af:9b:58:48:aa:10:98:5e:ed:24:
eb:98:78:7b:30:7c:b1:dc:17:57:02:dc:c5:00:b9:
bd:b8:1f:cd:fe:85:03:b2:a3:e1:5e:80:90:d8:e4:
92:44:c2:47:68:43:a5:cb:f5:96:ed:f0:8c:e1:8d:
92:aa:1e:d7:d8:da:53:d5:91:fb:a3:99:df:6f:d2:
3b:c9:e6:9c:35:34:fb:59:de:5b:46:28:4b:e1:85:
13:22:3a:1b:33:de:0b:99:44:8d:13:d5:94:77:cf:
de:8d:15:69:6f:32:00:15:ee:49:c2:c6:93:ea:3f:
84:01:53:9c:8e:7c:e2:8e:7d:fe:7e:01:dc:71:1b:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:7C:C2:A0:18:7C:B8:2F:B4:93:5F:90:02:4A:46:85:4E:7F:9B
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:f7:e4:07:cd:69:69:78:e8:75:f9:25:81:80:36:b9:ba:
c7:ab:54:db:c3:30:88:1c:62:c4:0f:c1:82:e3:5b:fd:17:99:
7f:df:29:86:63:1d:e2:69:e2:31:4c:22:e5:8c:3a:f7:bc:a2:
95:de:cf:b9:dc:93:7c:52:f9:b3:0b:a0:c5:bf:a3:1d:6c:f9:
bb:dd:b9:b5:a4:28:fe:15:16:d9:ab:b2:fd:dc:3f:a4:0c:07:
9d:03:36:90:28:a9:7c:f3:d4:67:10:70:bd:5b:e8:49:bb:60:
ef:db:91:ac:f0:e5:1f:83:30:1d:02:f2:a7:2d:1e:e5:12:35:
1d:26:ec:d2:24:bf:c4:4d:de:33:bc:52:1d:dc:d8:20:4e:1b:
06:9d:dd:a0:ff:32:e6:4a:8d:dd:6d:38:ce:0f:41:17:39:a3:
56:99:5e:46:df:16:9c:29:fc:83:70:74:74:f8:c1:d2:15:94:
7e:f2:d0:e2:00:cc:42:fc:b5:cc:89:7f:55:5d:47:07:f4:94:
80:69:e1:a9:d5:f5:66:45:53:27:57:a9:43:3f:38:0c:32:c3:
43:bc:87:14:bd:27:32:d3:69:ab:96:75:a6:fa:b2:34:d8:37:
05:c7:c5:e7:cb:cb:a7:e1:5a:22:fb:28:31:95:af:2c:5e:13:
e1:17:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:34:19 2025 by rpki-client