Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: ivTjnKBWdPwprEFBKAeIcQarbcLyXiwB9cVniddjuKI=
Subject key identifier: 16:66:C8:F1:9E:12:4E:07:DA:29:20:1E:28:C4:23:3A:BF:01:26:6F
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 0198D5BBA91CE1E2E31951E8280CA116A06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: fe2DOut7UX7tYvMW7D1pe2l6+mIy/fxO+EdsPhf+gT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:1c:e1:e2:e3:19:51:e8:28:0c:a1:16:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=1666c8f19e124e07da29201e28c4233abf01266f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:25:5f:1a:f1:dd:ba:8b:90:64:36:c0:52:
3e:09:b3:af:f5:71:ab:40:1b:d0:10:9f:27:3f:af:
c1:49:cb:6e:7f:a0:f9:8f:4d:5b:3d:d3:95:e3:43:
72:0a:68:07:e1:4e:e9:00:cc:2f:bf:40:c2:76:e6:
22:15:4d:c2:ac:b4:4a:32:51:0f:59:3f:92:17:65:
c2:29:c5:2b:3f:0c:b0:a8:a2:05:49:84:d5:e2:79:
30:0b:bd:0f:49:7a:33:ad:33:98:dc:d8:6c:f5:96:
a1:21:1e:12:96:49:07:02:d1:de:1a:9d:23:57:e0:
d6:47:31:3f:39:9c:3e:61:32:dd:06:9c:cc:49:4a:
b7:74:83:20:7c:91:65:97:9b:f7:01:57:28:09:d8:
f9:85:0e:54:b3:78:0a:88:e3:58:be:3d:65:fb:39:
33:fe:f4:e5:f6:0d:69:52:fa:f5:3f:8a:26:10:42:
8c:67:b5:a4:18:9a:28:88:0c:bc:6a:7d:38:2c:21:
b6:af:02:a1:de:86:83:7c:ea:95:ad:25:8c:c9:03:
c4:6d:18:0b:33:52:ec:71:e9:19:3c:db:68:e5:91:
d5:f9:8c:cf:a9:f5:6b:e3:b7:7d:b8:5a:83:d8:9f:
4d:c4:23:31:c4:4a:51:21:7f:83:b3:f5:6c:18:e7:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:C8:F1:9E:12:4E:07:DA:29:20:1E:28:C4:23:3A:BF:01:26:6F
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:18:77:23:d9:84:e9:6d:87:b2:d4:d1:d1:76:aa:ff:ec:89:
c1:6a:b8:da:a3:cf:9f:d5:92:ad:1b:47:c0:63:47:ef:5b:85:
33:73:21:c2:7a:bb:85:7f:cf:9e:15:1c:02:8a:50:61:ea:8f:
1c:e3:76:a6:38:a8:fe:94:9d:e8:6c:29:54:ab:ed:08:97:f2:
49:50:c2:f3:58:4a:b8:3c:b1:7b:61:bf:2d:54:07:52:7f:70:
37:d1:f6:9c:e3:ec:7c:04:0e:80:df:5b:2c:8e:94:f8:09:2c:
f4:7b:1b:1a:7d:07:fe:81:fb:b1:84:20:f2:00:56:db:01:7f:
7e:f5:24:0a:e7:04:66:11:42:c5:af:cd:00:b8:f6:22:df:67:
be:dd:be:09:1e:3e:f8:ec:53:a3:27:77:18:fd:06:6c:76:58:
6d:8a:f0:da:b9:88:3d:a3:2b:78:b0:90:d0:4a:e6:58:ed:70:
fd:df:59:ad:c2:4e:15:de:97:f9:e4:d7:13:51:80:f5:f6:05:
e5:23:39:25:db:91:a6:df:b8:0c:87:4a:14:81:b5:3a:15:e5:
f1:ab:e6:2f:54:cf:fb:10:fd:43:0c:93:dc:70:97:fe:35:11:
58:88:b3:3a:c8:e4:14:b1:6d:e2:8c:fe:71:e7:7a:28:51:0a:
eb:13:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:02 2025 by rpki-client