Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: hTfx9SHX3u5+WvUnWBEOGc220CO9JJlnw7PGfehltzU=
Subject key identifier: 7B:56:71:94:F2:7C:C3:A9:CF:73:6F:69:70:B8:EA:DB:E8:2A:69:F6
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 019899019A5F1F24728580B473C0536BD244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 12:01:15 +0000
Manifest this update: Mon 11 Aug 2025 12:01:15 +0000
Manifest next update: Tue 12 Aug 2025 12:01:15 +0000
Files and hashes: 1: jvr-TtmshyO-21Athyko7-oCA0g.roa (hash: YbFNgrbQ4nYeYFpzPZPmunVsALPP8JY0whWvWBRLdqk=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: zE0N4s5GUAUR1KAYy26WJuysSnnZiqa6jxg09XfyH2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:01:9a:5f:1f:24:72:85:80:b4:73:c0:53:6b:d2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Aug 11 12:01:15 2025 GMT
Not After : Aug 12 12:01:15 2025 GMT
Subject: CN=7b567194f27cc3a9cf736f6970b8eadbe82a69f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:46:d0:8d:4f:75:7d:56:df:68:d5:39:2c:36:
70:0a:aa:c6:13:cb:19:b7:58:24:41:f8:56:20:b9:
e8:78:14:59:fe:bf:5c:85:ba:32:2e:bf:77:8e:79:
77:d3:73:22:9f:07:9d:7f:4f:ea:a7:c5:71:cf:69:
0f:e1:39:31:e1:2d:14:9b:b4:ad:0e:56:a4:70:48:
50:81:0b:b9:3e:c4:9a:84:cd:88:89:2d:43:a9:c1:
de:af:a9:c1:17:1f:5f:48:1d:8a:54:f2:7a:d0:a4:
a8:fb:93:d4:cb:c4:bf:7e:b2:d2:80:75:71:dc:bf:
c1:37:2e:57:33:0b:11:42:f0:3e:b4:34:43:28:09:
0c:c6:68:b3:92:8e:6c:1a:07:93:fc:f8:82:22:90:
aa:bf:12:a6:bb:24:e9:b5:ec:f1:17:c7:f5:d4:73:
8a:9c:d1:6a:56:59:7c:8f:dc:4f:8e:21:a0:39:06:
87:0d:ca:68:e3:24:79:21:09:62:26:12:9b:f8:bf:
53:fe:0c:6a:70:f1:cd:3e:81:98:95:dc:24:67:a3:
b5:5d:f5:30:33:27:40:56:12:93:71:49:b1:52:32:
99:ef:c0:3f:29:31:03:40:71:44:e3:52:48:69:27:
b8:83:32:09:59:27:e5:d1:63:56:a2:58:75:57:8c:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:56:71:94:F2:7C:C3:A9:CF:73:6F:69:70:B8:EA:DB:E8:2A:69:F6
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:82:64:fd:73:ad:a0:dc:ec:38:b9:e2:44:3c:cd:bf:43:a6:
5a:32:86:6a:cf:c1:96:59:9c:17:07:2e:b4:9f:aa:ee:3b:37:
82:90:77:12:7e:cc:8c:43:78:ee:64:bf:82:0b:79:c2:7b:a8:
6a:a1:a8:8e:7f:de:b7:d3:74:21:5c:df:d2:d7:30:51:44:d1:
70:7e:01:23:66:69:73:08:7e:18:25:25:17:57:6b:22:d5:32:
d7:c8:40:e2:f3:da:bc:1a:13:ac:ab:4f:49:ed:b1:78:96:f7:
44:c8:ec:8a:b6:eb:02:29:e3:d5:dd:6c:b2:6b:d7:2f:57:61:
2b:a2:fd:5f:d1:93:f4:3c:d0:a6:e8:1c:61:db:61:50:28:64:
8b:6c:2f:8c:b4:52:d4:50:09:45:bb:ea:3e:d0:5c:8b:bc:10:
7d:35:46:9c:bc:1a:d4:26:c2:17:80:d2:e9:3e:71:75:ce:5b:
48:d8:70:97:46:60:b9:ae:75:eb:f2:29:0c:43:42:09:94:38:
08:e8:53:9b:32:a4:e4:b0:99:24:33:03:64:ea:11:9d:39:32:
3c:80:cc:b8:de:b0:3a:d6:7e:17:26:4d:f7:cd:0b:9a:96:16:
5e:e9:97:97:4e:09:a9:c1:20:fa:b1:e5:0d:71:f0:74:c5:2c:
b8:4c:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:43:52 2025 by rpki-client