Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: NPHEr/BE+3Vse+vGA+Ew7FijU0i0Ckht3KjIKnxjbAs=
Subject key identifier: 38:75:17:30:73:44:1D:08:FC:37:7F:ED:62:A4:4D:6E:04:A0:88:F2
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 01988E7D7AE75704CE4AF005EA2AA9A6444A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0A8F
Signing time: Sat 09 Aug 2025 11:00:44 +0000
Manifest this update: Sat 09 Aug 2025 11:00:44 +0000
Manifest next update: Sun 10 Aug 2025 11:00:44 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: jI9Im5mqQF2GBsTAx9STH799k0y4f15UW0NbHshpnYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:7a:e7:57:04:ce:4a:f0:05:ea:2a:a9:a6:44:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Aug 9 11:00:44 2025 GMT
Not After : Aug 10 11:00:44 2025 GMT
Subject: CN=3875173073441d08fc377fed62a44d6e04a088f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:45:65:8b:e4:09:fe:88:06:35:0d:f1:47:
5f:eb:c0:86:27:76:47:4e:b0:6d:0b:37:cb:08:d5:
d8:81:b2:96:86:8f:f2:c3:a9:1d:c3:fd:77:5b:94:
23:25:79:71:d2:32:4a:13:98:ee:3e:75:a3:d7:b3:
9c:0f:81:0c:b5:bd:47:ec:d0:d6:db:f0:27:c5:2c:
70:7e:de:dc:8b:35:24:22:ad:3b:55:3b:e3:3d:a9:
30:0d:bc:ac:dc:df:62:5e:42:f9:7b:38:58:69:ac:
88:4b:42:e8:92:b3:3f:0c:4b:e7:32:5b:e3:3c:a4:
23:69:66:a6:7e:57:31:9f:28:6e:8c:a7:cd:ca:06:
92:c1:32:c2:5b:04:ec:10:41:bd:38:18:a0:1d:cf:
7e:f8:ac:e0:5b:25:ec:3c:4d:18:e8:e9:04:d7:88:
a8:6b:87:47:a2:e9:05:1c:23:fb:d6:e5:1f:3d:54:
de:cd:d6:82:0c:d6:71:91:ed:f3:5b:f9:d9:4f:0a:
2f:7c:c7:aa:d6:21:29:82:3e:e7:bc:1e:65:1a:d3:
2e:ba:de:00:bc:71:dc:a0:d8:3d:3a:b5:6f:03:c4:
6a:86:c5:61:e5:db:9b:d6:59:aa:60:62:80:99:67:
e8:bd:0d:46:9f:a9:bf:67:5c:75:7e:b5:04:27:1b:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:75:17:30:73:44:1D:08:FC:37:7F:ED:62:A4:4D:6E:04:A0:88:F2
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:11:d0:7b:0d:08:f7:0c:bd:d1:b1:c1:bf:d4:8f:e5:aa:
ab:0b:dd:08:3a:6f:3f:62:47:bb:57:e0:af:8e:af:ff:6e:dd:
ec:d5:04:9b:8b:c3:92:af:01:98:0a:44:3d:65:f7:ae:47:16:
b3:b6:2d:4b:fb:80:4b:7e:ae:17:84:62:c0:d7:78:22:71:0a:
f8:d5:c0:c6:f8:1d:a7:b4:5d:2e:0e:70:82:a9:9a:20:43:7d:
30:9d:01:13:e6:77:14:60:3e:b3:d2:67:b9:e0:04:b7:16:1c:
69:08:61:86:b7:38:53:d8:5d:b6:6e:52:33:92:b8:96:14:7b:
74:dd:ce:a0:3b:e1:19:53:6b:85:54:21:6d:a8:62:a7:c4:4c:
d2:e2:75:82:08:57:39:64:a4:e8:5d:5a:69:f5:42:9f:9e:ce:
0c:00:71:21:16:c6:e6:5f:1f:dc:c0:11:3a:16:1e:7b:9d:72:
38:82:9e:b1:e5:ee:79:3e:d9:0b:cf:ce:18:0a:13:58:19:34:
f6:6d:33:e5:17:7c:df:72:94:52:b9:e7:34:fd:21:d2:06:c6:
7e:91:82:b5:ac:0d:e4:8e:35:72:23:60:1f:28:69:86:65:0c:
8e:a6:62:e1:87:db:4e:12:c5:b4:ff:f4:b6:6b:03:2e:b3:1e:
0c:b5:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:02 2025 by rpki-client