Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier: iqibacBVOCS+ccHSt96Eihs5K1m7fzZS+qnu2f5/WHQ=
Subject key identifier: 54:2C:96:C6:26:E4:39:DE:15:B4:56:BB:C6:C2:AC:6E:0F:D8:CF:9B
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial: 0198A0F1DBE834D46866F8138D894E4E50CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number: 01E9
Signing time: Wed 13 Aug 2025 01:01:01 +0000
Manifest this update: Wed 13 Aug 2025 01:01:01 +0000
Manifest next update: Thu 14 Aug 2025 01:01:01 +0000
Files and hashes: 1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=)
2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: UKfz+NTN4Qz3TI8apDcoYew45lrWl0tGx1yYAQ4RQv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:db:e8:34:d4:68:66:f8:13:8d:89:4e:4e:50:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Validity
Not Before: Aug 13 01:01:01 2025 GMT
Not After : Aug 14 01:01:01 2025 GMT
Subject: CN=542c96c626e439de15b456bbc6c2ac6e0fd8cf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:c9:dc:ba:58:bf:a1:10:51:c2:16:d4:13:
19:18:ac:ae:61:d8:37:4f:c0:8e:ba:66:9f:f1:05:
00:54:1a:2d:dc:31:bc:ee:7e:63:d6:f5:6c:62:c0:
ee:54:59:60:e3:42:d6:3a:cf:e0:05:85:43:be:78:
06:8e:84:3f:74:9a:72:bf:3c:ee:ae:bd:05:7e:d6:
a8:64:80:d0:d6:1f:8e:ac:72:d1:d5:20:c1:45:6c:
db:59:db:a5:50:ab:a0:ec:bb:ce:3d:5b:0f:05:da:
fc:83:cd:cd:13:57:e7:67:4b:5b:a5:12:fc:57:4f:
b4:84:b4:6f:de:dd:e9:f7:7c:58:90:8d:3e:a9:02:
d5:af:7b:ab:64:13:c6:5f:76:ca:93:c1:4a:bf:ae:
e5:5c:5a:4c:d2:62:94:d4:1e:4f:b5:66:70:ba:5c:
ab:f1:f9:bc:61:d4:34:36:f1:e5:0f:4e:2b:90:b7:
96:aa:a1:dc:5f:09:dc:44:68:2f:9b:38:54:a1:ba:
66:22:95:cc:f1:cb:41:21:a3:74:6a:a2:b3:62:12:
84:b8:25:16:1b:78:e8:08:bc:57:9c:d6:d6:25:63:
e4:6f:be:fa:c4:f3:66:ff:a4:5e:ed:c3:cc:2b:4a:
3e:b1:c2:cc:18:7a:8c:92:d1:c7:9c:52:4d:4a:07:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:96:C6:26:E4:39:DE:15:B4:56:BB:C6:C2:AC:6E:0F:D8:CF:9B
X509v3 Authority Key Identifier:
keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d9:96:85:66:8e:96:bf:fa:a9:c2:ef:9e:cb:92:d7:89:e6:
03:24:f7:02:77:96:c2:a3:d7:24:3b:7f:92:bb:2f:95:89:e7:
12:27:14:6c:c7:ab:30:88:b6:ae:70:f1:44:81:31:98:a2:40:
a0:ab:e9:98:83:15:5f:ee:97:7d:e6:56:78:09:26:96:1e:79:
ce:37:92:06:af:b0:df:2d:ab:5a:54:41:7a:80:cc:8f:9f:fa:
74:33:b1:4c:98:ff:32:9e:e9:2a:d5:c7:7c:6a:91:c5:07:c9:
16:a4:7e:85:b6:5b:67:fe:ce:ff:66:52:bc:ec:93:0a:f9:42:
46:9b:bd:25:6f:17:ad:99:2a:e5:bb:89:68:b9:5c:b7:72:85:
06:19:31:a6:d8:ad:45:36:78:ee:36:42:57:74:74:4e:ad:dc:
32:61:0e:36:5d:d6:5b:16:21:59:34:ea:42:80:db:05:cf:e9:
2c:72:4f:13:cc:91:b4:b5:4c:8d:ea:82:e3:56:c6:c2:8e:de:
d3:4c:d1:41:9a:ca:8e:af:6e:7d:ee:4e:3d:61:f2:1c:ec:b1:
d8:bb:a0:1b:dd:f7:81:f8:3b:c3:df:de:d0:1d:8d:6e:69:35:
d5:69:3c:bb:c7:92:09:dc:d6:17:97:dd:94:07:79:7d:e6:0c:
af:5e:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:35:43 2025 by rpki-client