Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: aez9J1JCyTU49dEsDuiH26Gk+2HUQBo0m3emFKytvxc=
Subject key identifier: 41:6A:F5:D7:FA:F1:0B:EF:2B:CE:03:C2:F9:73:E4:A9:F3:97:B1:6D
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 01988BEAB4BFB5749E20C02159B8F76F61F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:01:11 +0000
Manifest this update: Fri 08 Aug 2025 23:01:11 +0000
Manifest next update: Sat 09 Aug 2025 23:01:11 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: AORicIDh5Q93qRwU2zfI8DiUKNN2g9b2sSYT+/jBHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:b4:bf:b5:74:9e:20:c0:21:59:b8:f7:6f:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Aug 8 23:01:11 2025 GMT
Not After : Aug 9 23:01:11 2025 GMT
Subject: CN=416af5d7faf10bef2bce03c2f973e4a9f397b16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:dc:43:09:e5:d2:7b:86:3e:eb:2f:16:75:
6a:b1:e5:e7:a8:6e:9d:44:a0:7b:35:16:18:53:ba:
d8:a7:d7:6b:8b:9b:9a:ad:8f:d6:7c:b8:bd:c1:00:
9a:76:ba:26:ad:6a:8c:12:0c:ff:d6:6a:75:d6:4f:
a8:12:01:8d:46:d4:61:2c:18:22:5a:d7:20:ac:ab:
53:34:2f:4e:3b:74:54:02:8d:ea:0c:f4:2d:ad:42:
4b:d4:e8:67:1b:f4:f3:80:9a:22:1d:1e:78:33:75:
55:b1:67:f4:23:87:06:ae:0f:d2:b9:a2:3c:9b:59:
ae:37:6c:7e:e1:24:4d:73:1f:dc:e6:d0:0c:b1:04:
f1:42:33:a8:b2:0f:51:33:b0:ef:d1:3b:9b:89:49:
c9:8d:30:ca:cb:13:30:9b:83:67:a9:09:86:ac:00:
95:07:11:c3:00:e6:c5:8e:20:35:bd:e4:f5:cf:9c:
1c:a4:84:08:57:f6:01:2d:4a:f4:e5:ad:84:ac:b7:
83:86:35:9a:1c:40:36:1f:ac:df:a4:4c:4a:64:59:
bc:74:bf:e9:53:56:06:08:8e:6a:b0:d6:b8:70:89:
89:48:39:8f:7e:5d:90:2b:db:8f:33:72:83:8e:2b:
5d:70:25:1e:19:7b:35:ee:64:e7:c5:cd:c8:35:aa:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:F5:D7:FA:F1:0B:EF:2B:CE:03:C2:F9:73:E4:A9:F3:97:B1:6D
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4c:14:43:b9:2d:9d:e7:a6:7a:da:b7:2b:30:31:e7:da:62:
6c:1d:91:e7:1a:a5:7f:21:02:3c:8b:f2:31:14:dc:fe:11:d2:
b1:5e:80:0a:9c:8b:26:d2:d4:01:9d:23:76:3f:c8:cc:af:1a:
dc:06:a5:af:5a:dc:44:74:8c:e2:f9:8c:aa:e4:9b:3a:d6:a8:
ce:6a:cc:5f:ee:14:99:a3:87:90:5f:9b:69:07:af:70:7c:3b:
6d:19:50:ed:46:34:4f:f9:98:3a:25:d6:e5:97:8a:5d:b8:00:
66:6f:ef:5b:d9:f7:16:41:2e:e1:12:e8:f7:f7:b3:52:3c:81:
4f:75:29:19:e5:8f:bc:57:0f:98:d8:c9:6c:14:b3:98:44:d5:
9c:a1:59:e3:16:c2:24:15:60:71:c7:3b:88:bb:40:77:75:d3:
bf:d5:e9:38:0c:83:f5:09:96:ad:5b:1f:3f:c7:15:dd:68:ab:
31:41:cd:57:2f:93:7f:03:ff:be:fc:47:83:35:c4:f7:38:8d:
45:75:4e:ec:02:be:50:49:48:b5:59:02:de:e4:64:bd:0b:7f:
ee:23:9d:a5:8e:a1:1c:e9:58:9f:0f:c5:fb:50:f7:6b:9f:71:
65:b3:eb:76:52:0d:09:b5:3a:fe:8f:d4:43:30:ea:b8:54:be:
4e:d7:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:04 2025 by rpki-client