Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: 2eQPUTPgsfVW3Soj1AeP6dW5ewQ6U17L12NmECZhHAc=
Subject key identifier: 17:94:CD:EE:55:47:48:D1:48:02:7F:03:85:DC:C1:3A:C9:F3:97:10
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 0198D404BE1AC13836C04B332A4B1A9F43F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:17 +0000
Manifest this update: Fri 22 Aug 2025 23:02:17 +0000
Manifest next update: Sat 23 Aug 2025 23:02:17 +0000
Files and hashes: 1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: gM1lBB8VTIQCqYbk+o6v6OaXxT4eXf2dW50quNubtu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:be:1a:c1:38:36:c0:4b:33:2a:4b:1a:9f:43:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Aug 22 23:02:17 2025 GMT
Not After : Aug 23 23:02:17 2025 GMT
Subject: CN=1794cdee554748d148027f0385dcc13ac9f39710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:f3:df:5c:79:88:e9:96:32:98:03:46:cc:
5c:ed:95:46:59:f3:4e:ab:05:a9:db:d8:94:64:15:
9d:50:c2:9a:91:3f:91:f4:bb:44:47:f7:ce:bf:52:
05:5e:3a:ff:16:46:68:e9:51:45:43:ee:5c:56:a2:
d4:f4:f2:86:f6:6e:df:cd:58:ea:e4:ea:ec:d7:4c:
f3:5c:65:14:e2:8a:64:f5:cf:ef:9f:10:d8:fc:b0:
8a:95:1b:db:b8:ed:fe:f2:35:32:83:19:a7:95:74:
bd:ad:37:d3:24:8d:e2:ce:9d:f4:fc:d5:ad:dc:a6:
a9:ec:54:e8:5d:ce:42:d8:d6:10:bc:99:c4:0f:b8:
2e:4a:ca:e7:3a:a2:10:6b:0e:bd:ab:fd:df:43:13:
03:ef:c3:45:f0:1c:eb:d6:00:34:5f:15:a0:9f:13:
52:45:2f:a4:3f:de:34:2e:2d:ea:c9:1e:35:60:8a:
51:33:80:99:c3:6b:32:87:98:13:54:25:f6:5d:78:
cc:da:35:13:ae:50:a5:62:dd:02:35:d3:e0:71:29:
af:99:43:14:a2:00:dc:c8:b2:ec:89:3c:ac:e3:49:
a4:8e:37:fe:13:2d:08:67:02:c3:54:24:b0:d3:f8:
4b:05:ee:8a:1f:fa:22:46:16:ec:89:c3:c1:69:77:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:CD:EE:55:47:48:D1:48:02:7F:03:85:DC:C1:3A:C9:F3:97:10
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:04:4d:01:5d:ef:58:bc:ce:32:7d:74:b6:fd:32:14:80:
91:1c:5a:04:ce:2e:86:94:7a:00:f8:46:df:95:66:a3:be:80:
d5:04:34:4e:be:c1:75:e6:b8:33:43:db:4d:63:96:cd:9b:5a:
01:bc:a3:9b:52:52:f4:f7:ab:6c:11:0d:d8:48:86:f1:d9:37:
4e:2b:c8:f2:03:99:94:1b:59:42:f6:91:ef:12:9b:36:4c:51:
f8:9c:1a:c9:b4:a6:64:e7:12:37:13:fe:55:0a:c1:65:ac:be:
43:e0:30:bc:45:6a:10:36:b8:be:e9:fc:10:e9:c3:48:f4:b3:
a2:2c:c0:dc:6c:5e:d1:17:c1:26:6e:88:ed:01:06:22:17:e7:
ac:d5:c8:09:52:9a:ee:42:f0:13:a8:ac:7d:7a:da:e1:80:82:
e1:c3:b5:cb:ac:84:b8:89:38:e2:ed:3f:1d:f5:38:4c:59:96:
d0:df:25:49:ef:12:93:66:4d:dd:dd:18:6b:62:e1:e3:21:3d:
b9:d0:c8:f7:5a:af:a7:d3:8b:52:91:73:11:f1:c1:54:6c:9c:
3d:d3:31:b4:41:e2:98:16:04:ee:37:84:f1:a4:f9:c2:19:1b:
49:a5:a1:61:68:90:53:85:71:da:77:92:f7:f5:54:99:5f:f0:
3c:f3:a4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:46 2025 by rpki-client