Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: y861OeOzyTbKi7/WJKfQVurOCZJZFZWICsRmmBY5ZdM=
Subject key identifier: 05:7C:23:43:EA:0F:12:CB:71:2D:58:41:FC:B9:8B:33:26:0F:23:D0
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 0198955BDCD30EB67E43AB342E46359E3887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 15BA
Signing time: Sun 10 Aug 2025 19:01:22 +0000
Manifest this update: Sun 10 Aug 2025 19:01:22 +0000
Manifest next update: Mon 11 Aug 2025 19:01:22 +0000
Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: OKdbckVzXJbjCPJEsw6dF6R6Xq378lS2QLLS4mFSkSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:dc:d3:0e:b6:7e:43:ab:34:2e:46:35:9e:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Aug 10 19:01:22 2025 GMT
Not After : Aug 11 19:01:22 2025 GMT
Subject: CN=057c2343ea0f12cb712d5841fcb98b33260f23d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:91:bb:02:94:7b:b2:52:17:88:aa:ad:f8:
aa:d8:61:b7:73:4f:20:a1:30:cd:50:4b:04:77:bb:
0d:47:06:42:db:09:56:02:48:8d:c5:58:f2:ab:cd:
e7:08:b7:7b:ad:7e:09:84:b4:22:0a:89:26:fa:9a:
39:e2:30:f5:74:2e:cf:7c:ab:0a:72:7a:a7:88:2d:
a6:85:1e:5b:d7:c1:21:91:c7:db:2d:9b:58:cf:c2:
8c:77:c2:12:ca:f6:d8:62:7a:7d:09:bb:03:98:d0:
a3:da:4d:9b:97:a4:4a:99:e1:99:97:49:76:50:62:
00:f2:74:b6:25:64:c0:be:d1:fe:79:70:87:c0:63:
8f:c9:fe:13:c5:62:ae:79:6e:e3:79:e7:4d:d0:13:
df:43:8f:78:3e:1c:6a:67:19:52:6a:d0:00:c9:b7:
e2:51:4b:a4:3d:0b:a4:f8:ea:63:8b:5e:e7:15:a4:
5f:00:7f:af:bb:9c:51:dd:8f:29:24:5b:49:67:e9:
c1:a1:79:f8:b2:65:f6:ad:88:f0:8d:e0:25:37:cb:
ae:c6:5e:29:94:3c:41:db:b7:a6:c5:d0:e6:7b:78:
a0:c7:9c:01:56:30:bf:7b:c5:18:e9:29:94:42:26:
c8:51:8b:05:ff:12:06:95:a6:d0:f5:d2:75:7f:ee:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:23:43:EA:0F:12:CB:71:2D:58:41:FC:B9:8B:33:26:0F:23:D0
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:f7:1f:81:7b:46:37:55:1c:9c:a8:85:27:01:4b:87:cc:
8d:d0:13:07:f3:f3:d8:c8:85:85:9f:38:dd:58:b8:a3:c4:7b:
ef:73:a9:d3:1e:da:0c:81:06:82:23:b0:83:e0:d5:dd:9a:de:
0f:51:22:19:ad:8e:27:67:b4:95:f4:21:0f:f7:d2:e5:e1:4c:
5f:64:d0:30:37:76:a2:d1:9a:8a:f9:31:d9:b1:76:1a:91:96:
4a:6a:4b:4a:bb:3a:d5:65:a6:e8:69:ca:1c:e6:cc:6d:87:72:
3a:5b:ef:cb:5c:81:26:11:69:69:2a:2c:58:1c:00:8e:35:61:
d6:7c:19:02:a6:2e:6c:8c:0c:1d:3e:fb:08:b1:12:00:57:88:
86:fd:96:b5:f3:66:36:aa:7e:22:87:a6:33:07:3c:6c:bd:7e:
70:5a:cb:df:29:d2:58:1e:11:cf:10:e3:12:21:a1:d1:2e:4a:
ad:4e:15:f9:74:cc:e6:47:b1:d6:42:16:5a:8e:4d:95:61:47:
e2:b3:7f:93:12:78:51:53:25:24:c9:4d:17:ae:d5:df:a3:0d:
12:b7:23:cd:fa:76:f7:9d:f0:e2:7d:b5:3f:6a:f2:95:91:9c:
90:cc:4c:18:15:6e:a5:f5:17:c0:2b:d2:0f:80:11:a3:ff:85:
fa:6e:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:24:03 2025 by rpki-client