Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: /6LzKI4P7sO5zTqYaHwO6kRG4IoVHYXivNuy5IbJuQ0=
Subject key identifier: 88:63:9A:D3:A3:E9:DC:C8:0C:77:61:A3:B4:9D:F9:40:6E:D6:96:61
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0197C7261DBB7F30E2D61916F177235BB1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 03A6
Signing time: Tue 01 Jul 2025 18:00:53 +0000
Manifest this update: Tue 01 Jul 2025 18:00:53 +0000
Manifest next update: Wed 02 Jul 2025 18:00:53 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: 9q2A+dzPUUmiDw5ZcjDbPDN9j2qxz1VbzSZ3mYuX5dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:1d:bb:7f:30:e2:d6:19:16:f1:77:23:5b:b1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Jul 1 18:00:53 2025 GMT
Not After : Jul 2 18:00:53 2025 GMT
Subject: CN=88639ad3a3e9dcc80c7761a3b49df9406ed69661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:af:5a:23:f9:91:e3:a3:10:66:f4:63:91:
10:63:18:e4:94:bb:dd:8c:ea:1f:46:18:26:8a:d7:
1b:8b:a4:d4:db:1b:6b:7b:56:71:97:91:9a:70:80:
1a:00:51:47:13:14:00:91:65:76:29:5f:9c:fd:0d:
b1:38:4f:a4:76:62:f2:16:e3:cf:6d:d4:d1:28:77:
1a:6e:87:81:cf:5e:80:d6:3f:b1:88:f2:89:fa:49:
f1:c1:5e:f3:0f:c3:ea:3f:5f:9f:e1:91:14:e3:b1:
f1:f7:67:bc:f0:f6:72:67:a2:42:d4:ef:c8:05:74:
6e:6f:ac:e7:56:59:0e:58:13:78:4b:fe:3a:af:e6:
a6:92:a0:da:e7:e6:03:e0:55:23:62:09:88:0e:f9:
2b:51:33:10:db:ad:15:6f:68:ec:36:97:11:a9:9a:
d4:14:a3:56:c4:97:1d:1f:a1:5f:9d:47:1b:e2:4e:
b3:47:cf:84:4f:4c:cd:4e:29:34:da:15:0b:d4:ad:
dd:38:58:90:0c:1e:ec:5d:23:72:bf:39:98:fa:22:
3a:9b:51:a1:fa:ac:42:51:82:e3:60:c8:59:ee:60:
7a:fe:50:0d:f9:79:7c:4e:f2:56:69:68:28:87:0d:
0f:da:01:ae:a0:15:66:e1:ba:d1:eb:0b:79:4a:3e:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:9A:D3:A3:E9:DC:C8:0C:77:61:A3:B4:9D:F9:40:6E:D6:96:61
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:0a:43:54:81:a9:12:10:6b:d5:4d:60:3f:16:03:7d:e6:
6e:75:3a:c9:1a:fd:fb:da:7b:85:c0:88:a0:87:9e:45:3b:66:
a2:0b:91:64:84:06:9c:17:15:e4:f5:09:ec:ee:8e:90:cc:a1:
5a:e8:93:b2:23:08:8f:f6:7f:02:e0:1b:76:d2:8b:91:a6:84:
24:61:66:06:5d:b0:79:83:52:7c:dc:4c:c1:b2:7b:7f:0f:0a:
f3:07:20:46:6f:48:66:d1:8d:35:4b:48:b6:84:0e:ac:b5:64:
83:2c:71:69:09:69:6a:b9:39:c1:41:80:99:f7:b0:62:04:02:
e0:91:3e:8a:b8:87:da:13:29:5a:95:00:91:c7:26:c8:ec:18:
80:90:5d:32:b8:0a:32:99:e4:87:95:96:c2:0d:ec:a3:6f:d3:
46:d1:3a:1c:69:df:86:9d:29:54:08:ca:95:b0:c7:3c:b5:71:
10:29:ff:b4:f3:d4:23:36:2f:1d:6b:d4:4d:bb:46:55:42:34:
39:28:65:40:f9:1b:31:c0:14:c8:c1:d1:4f:ed:0a:e1:bb:61:
83:0c:1b:ba:e6:07:d6:b2:4b:52:b5:a4:53:79:24:78:e7:37:
aa:87:8d:bf:f8:65:b7:7a:32:f8:ec:b8:f1:b7:0e:ac:0c:76:
0f:47:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:52 2025 by rpki-client