Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: wyu7yndo7Hi3L9XavaL4GuGBmrhJJjw4gO2Ws8KWzeg=
Subject key identifier: 07:9F:0E:3C:D9:6F:49:96:50:BA:C0:42:E0:16:D5:CA:4A:3C:4C:38
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 0198A1292F7E11B90D9F7897B45176A03FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0D1B
Signing time: Wed 13 Aug 2025 02:01:27 +0000
Manifest this update: Wed 13 Aug 2025 02:01:27 +0000
Manifest next update: Thu 14 Aug 2025 02:01:27 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: Am7hp3ylkibhi7Jpa1CnojYghE1MBFUU1S3box0tJMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:29:2f:7e:11:b9:0d:9f:78:97:b4:51:76:a0:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Aug 13 02:01:27 2025 GMT
Not After : Aug 14 02:01:27 2025 GMT
Subject: CN=079f0e3cd96f499650bac042e016d5ca4a3c4c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:d7:dd:45:87:d7:57:08:f3:c4:8f:be:e1:
7b:dd:dd:fd:55:7d:dd:31:32:c5:81:2d:82:a0:47:
69:96:fb:28:a9:35:9f:7a:96:2b:8f:f4:30:dc:ea:
67:7b:75:91:8e:8f:31:95:9c:2b:75:43:8f:49:89:
db:2a:e4:33:d8:5f:60:22:26:fc:7c:80:c4:6b:75:
4a:a6:56:e9:d2:1a:45:f8:1f:80:eb:2e:ba:c5:18:
11:8c:43:42:8c:ff:89:03:c5:35:b6:2c:d3:47:c4:
3b:96:19:af:e3:87:4a:24:fa:2a:3e:42:1d:a1:ae:
b4:16:4d:fa:aa:4b:09:e7:61:db:a7:8b:bc:96:89:
67:4a:52:da:1a:62:ac:00:fd:c0:64:07:05:15:50:
af:90:55:f4:82:47:74:01:c6:41:a0:43:4d:71:e5:
9e:b7:83:40:69:88:3d:11:51:24:cd:2a:69:f7:36:
ae:8d:04:11:f3:e5:ce:8a:6d:f5:e9:68:9a:96:20:
5b:69:fd:4c:95:88:d6:df:c7:cd:a3:8f:0e:47:00:
67:3c:e5:20:d5:d6:56:ad:5e:3d:0f:14:00:d4:b3:
fb:a1:b5:4a:bd:f0:32:2d:16:10:37:8a:2d:99:64:
42:46:e3:91:1c:41:75:24:6c:76:0e:05:c0:8c:c9:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9F:0E:3C:D9:6F:49:96:50:BA:C0:42:E0:16:D5:CA:4A:3C:4C:38
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:75:68:fb:78:19:5e:55:78:f1:6a:a2:c4:82:a3:9e:53:67:
38:31:83:bd:ce:13:39:a4:0a:36:5c:b6:c2:b9:b3:2f:e5:51:
fa:65:fa:cc:c1:c8:46:44:32:d0:fb:12:b6:85:20:bc:dd:4f:
43:d7:3a:17:90:79:e5:48:e3:c0:df:00:5b:a5:21:42:cc:19:
12:d8:6a:ae:7f:7b:bc:dd:b5:23:72:d1:74:78:4d:ee:cd:a7:
64:9c:f7:6c:2f:e5:de:4f:11:3d:73:b9:33:31:a5:3a:dd:aa:
13:cb:b4:85:68:b3:00:b1:11:82:4b:0a:83:44:4b:0f:8f:05:
46:1e:15:9c:88:98:15:9f:da:2c:12:b7:ea:07:9a:17:f7:1f:
65:32:38:41:5f:de:15:85:68:a6:aa:08:48:52:cf:fe:b4:c3:
05:93:89:11:63:a8:57:a0:c2:10:d3:3e:65:9c:41:93:d5:7a:
48:a2:c3:2d:34:1b:9d:2c:15:ec:d6:af:f4:4a:89:69:c4:67:
a6:df:84:d2:3f:cc:49:c4:08:1b:fe:e6:fd:f5:2f:a8:48:18:
b3:31:76:62:11:ea:0b:d5:0f:e0:6a:ca:f6:46:e5:69:e6:13:
45:79:38:42:fc:2b:1b:80:51:08:aa:3b:9b:66:b0:8d:13:53:
d1:1d:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:47 2025 by rpki-client