Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: U4FxCac/MIsRBPBa6m+IYmTVKMrG3qaZpadI4baOv1k=
Subject key identifier: 1A:F5:40:5D:ED:AD:06:1F:8E:A9:DC:89:26:61:C7:E6:70:6F:D4:DE
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 01988E0FB0CFB873E83B3A15D5716D2E355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 15F5
Signing time: Sat 09 Aug 2025 09:00:49 +0000
Manifest this update: Sat 09 Aug 2025 09:00:49 +0000
Manifest next update: Sun 10 Aug 2025 09:00:49 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: 8EYijS711E8z8pRo+1EmhbiA9bclJRZc27jb4EfsV1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:b0:cf:b8:73:e8:3b:3a:15:d5:71:6d:2e:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Aug 9 09:00:49 2025 GMT
Not After : Aug 10 09:00:49 2025 GMT
Subject: CN=1af5405dedad061f8ea9dc892661c7e6706fd4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:c8:2e:db:83:32:c8:ea:9a:47:cf:8a:bd:
07:68:e1:44:73:46:9c:86:e8:fb:d6:99:a4:59:f9:
40:f2:58:92:c5:73:11:2b:9d:a8:01:36:af:e0:fe:
e2:58:ca:0b:8c:17:7c:41:66:db:db:81:db:bb:2d:
e9:8e:8c:55:41:a1:42:da:fd:bd:e0:78:04:2c:83:
8d:84:9f:54:5d:d2:9a:f2:88:ab:a5:09:32:14:78:
7d:d9:36:a3:de:48:0f:fa:9d:07:54:a4:f7:c7:48:
3c:95:3c:42:50:86:70:3f:16:95:d5:98:09:f2:51:
fa:fc:cb:4e:80:25:9c:14:a5:06:47:b1:8f:95:a5:
4a:f9:e9:7b:53:7e:3a:92:a0:33:05:47:4a:d3:e4:
49:26:e7:03:40:7a:ba:19:d2:28:f3:0d:c2:fe:04:
8b:fb:1b:c5:4b:84:45:36:a2:f2:52:f2:c5:76:7f:
05:35:cc:d4:6b:dd:0c:f1:1b:ef:36:a4:7e:01:9c:
6e:2c:12:0a:d5:d9:db:32:fc:dc:ed:8c:bb:67:01:
94:3a:b7:da:c7:de:bc:3f:95:86:cf:0b:68:e3:cf:
5e:fd:8a:07:eb:3f:e1:83:df:82:fe:a8:2f:d7:ae:
2c:97:10:1a:7d:e5:f0:63:5e:9f:b8:e7:18:26:37:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:40:5D:ED:AD:06:1F:8E:A9:DC:89:26:61:C7:E6:70:6F:D4:DE
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5c:89:5d:e3:44:26:07:8a:ed:b6:fd:53:68:6d:6f:ae:27:
1d:a0:c6:6c:bb:63:19:f7:8c:27:55:3b:7c:d5:14:3a:d2:65:
66:e3:89:3d:9d:92:da:c6:4c:16:19:cc:54:f7:27:0e:87:99:
ce:6d:0c:70:41:db:a8:b4:f1:e4:72:67:fd:e1:1d:64:63:9f:
7e:e8:10:be:b4:06:b3:4d:8e:9e:4f:9b:c3:cc:52:13:b4:8d:
ca:c1:96:7b:15:12:ff:e8:5f:c8:ff:2a:5b:6e:b3:0b:78:bb:
6c:cd:c8:ed:58:a9:df:e5:8e:af:35:fd:14:56:c4:e7:4b:d2:
73:72:ce:e7:e7:30:9a:3c:25:21:3a:dc:88:e5:a5:c8:82:bf:
6e:76:24:80:8a:35:24:62:bd:3f:65:75:18:2e:28:43:3c:7a:
b7:27:e1:a0:ea:81:83:6d:b8:4e:5c:a5:da:9d:6d:0a:bf:0d:
77:34:99:4b:cf:51:15:73:04:74:02:f3:28:4d:43:5d:9c:b9:
c3:9b:f1:a6:6d:00:58:40:fe:13:75:6a:89:4a:5f:49:c8:e1:
20:24:95:c9:0d:14:a1:8c:bb:49:4d:17:ec:55:39:65:5d:ef:
8e:65:8b:37:65:d2:25:22:e5:47:51:74:62:69:53:ad:bc:f6:
f2:e6:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:45 2025 by rpki-client