Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier: ewlYmp6one4QadxdR5p4V5oROa/CHF52lm50vxguTqo=
Subject key identifier: 4D:D3:88:A2:1E:23:04:67:E1:7F:8B:66:34:5E:CD:22:8C:8F:DE:50
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 0198D404E76695480C53400583D507C0DCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number: 13EA
Signing time: Fri 22 Aug 2025 23:02:27 +0000
Manifest this update: Fri 22 Aug 2025 23:02:27 +0000
Manifest next update: Sat 23 Aug 2025 23:02:27 +0000
Files and hashes: 1: qptSZ2XpOAOxaz7moTgQi3lsLeM.roa (hash: KtrtO/sBSgHAN1gAhTfDKw+KYUTZI/b5RNJ8EjfK/UU=)
2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: BSbHhXhV4Di7hRD+YbERx/ytjLYV1Hr9Rpsn19uSrsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e7:66:95:48:0c:53:40:05:83:d5:07:c0:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: Aug 22 23:02:27 2025 GMT
Not After : Aug 23 23:02:27 2025 GMT
Subject: CN=4dd388a21e230467e17f8b66345ecd228c8fde50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:d5:a4:58:47:28:1d:6d:a3:2d:f5:fc:63:
74:0b:24:d2:61:b0:06:3c:aa:f8:5f:9a:e5:58:3d:
30:b1:60:df:a3:68:1a:e5:b3:e9:d9:64:29:b8:9c:
21:b3:22:65:c9:ab:0c:6c:8f:f8:97:7d:a4:4e:a5:
fd:c5:af:e8:74:62:b7:a2:09:f3:49:38:51:08:ad:
c3:df:12:ba:d5:00:f8:65:27:db:36:b9:a5:d9:c0:
60:ea:dc:ff:7f:e0:79:28:73:1f:1d:bd:84:bc:32:
88:80:45:71:ac:18:34:23:51:6f:e6:46:bc:ab:96:
c1:5f:12:73:02:86:0f:0c:9b:06:2e:9a:f4:25:17:
e7:42:7a:2d:29:7e:4c:ea:b0:d9:28:ba:79:8b:73:
97:17:0b:17:9c:2b:e8:4c:bb:25:69:ed:81:dd:66:
b8:4a:f8:36:08:cc:2d:75:fb:ae:d5:c4:38:b7:f1:
c0:3a:92:84:88:e2:24:07:86:87:01:6c:29:bd:5c:
2e:d2:02:db:48:3d:36:eb:11:5d:f2:ca:b7:99:72:
a3:5b:05:64:49:8e:c8:c8:ac:04:a7:33:48:a5:ae:
e3:13:16:ab:78:47:ec:6e:2e:27:5f:8b:ff:95:34:
e8:22:90:75:e8:e6:70:d6:45:d2:b5:53:6c:d9:78:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:88:A2:1E:23:04:67:E1:7F:8B:66:34:5E:CD:22:8C:8F:DE:50
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:bc:5f:4f:b8:3a:3a:5e:5a:7c:a7:c2:77:84:03:64:25:
28:2d:73:f9:49:14:06:4e:84:09:fd:44:d0:54:6e:c7:39:7d:
cd:ce:b3:30:68:4b:75:07:54:3d:35:3f:49:bb:b4:ef:73:1e:
8b:cd:2e:6e:80:f4:bd:11:d8:76:db:8b:8f:04:a6:f3:5c:07:
2c:33:bf:be:74:f6:32:08:1d:92:9a:b3:4d:f2:06:24:b4:97:
48:9c:b5:e1:6f:d8:1e:b0:78:8c:dc:08:31:98:4f:4c:45:8a:
ef:00:5e:c1:80:f8:93:80:49:28:3b:a8:51:f7:e8:02:93:86:
87:a2:8e:8a:7f:98:eb:08:94:af:0d:83:9b:9d:85:bf:14:34:
10:ac:e0:62:06:34:34:97:9a:9c:38:63:db:50:83:97:5f:45:
cb:b0:ad:97:e0:f7:01:e2:7e:16:5c:19:19:e9:f6:65:7b:74:
58:2e:30:5d:ed:50:20:41:6c:c8:40:12:86:8d:b9:fb:52:53:
05:e4:c3:4c:a7:5d:20:93:4c:e2:8e:5c:18:c7:bd:13:8d:f2:
8f:ad:53:3c:90:4f:5d:22:7c:eb:98:c5:46:ea:72:ea:f1:10:
f6:88:88:ac:b2:94:b3:ed:0a:2c:2d:0d:47:15:58:d6:2e:a0:
f5:44:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:03 2025 by rpki-client