Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: Xw6uIsUT90jB3qWXBp1TnSiZ+JbILcC2Cp969HwFa24=
Subject key identifier: 6F:1A:C0:A4:78:A8:11:1A:6D:18:7F:B4:1F:E5:61:ED:76:2B:53:66
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 0198D54E1A9729A3145A9927E76FEF143B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1547
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=)
2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: 8kajuEeB2QOUu7u0vaGnNl9RlERRvhpKtHqYgG65MVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1a:97:29:a3:14:5a:99:27:e7:6f:ef:14:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=6f1ac0a478a8111a6d187fb41fe561ed762b5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:7a:c7:47:24:b3:cf:9e:f4:b2:c0:68:1a:
fc:51:68:91:81:a5:5e:bf:79:52:60:94:f3:57:a0:
85:30:b3:17:8a:21:8e:5d:2b:45:79:c9:e6:a8:4e:
7e:58:fa:e0:e1:99:aa:e8:97:b9:65:62:40:b5:c8:
0d:3d:25:b4:ff:0b:11:12:88:31:12:05:7d:fb:b6:
58:18:25:8d:d3:ca:05:e8:91:10:7b:6d:64:bf:8a:
2b:4b:58:e9:6c:b6:e1:e2:34:c0:9a:9c:13:bb:d7:
b3:c1:83:06:f9:4f:45:4e:ec:21:75:80:29:86:22:
f5:4b:b7:4a:b9:84:cc:7e:34:ac:82:42:05:96:fe:
54:c5:b2:9d:80:7d:80:e1:68:78:3e:4f:d9:cb:8a:
3f:20:87:78:bf:be:4d:15:14:65:5c:96:97:c3:4a:
e9:11:29:72:15:1b:c4:5e:34:21:84:5e:3d:13:fd:
13:e4:ab:65:15:35:1e:b0:6e:bf:b8:49:d1:9b:a3:
14:e4:f1:02:43:1a:8a:70:e3:72:f9:24:fe:42:d9:
68:ee:75:73:c1:b2:b1:09:04:6c:aa:f2:1a:08:cc:
2b:84:dc:21:04:bb:0e:f2:e3:ac:18:89:30:55:f1:
d4:46:5e:f3:70:7e:19:ad:5a:9f:7e:0c:b1:1b:f9:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1A:C0:A4:78:A8:11:1A:6D:18:7F:B4:1F:E5:61:ED:76:2B:53:66
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:46:9d:44:77:7f:7d:94:ec:1e:2e:bf:80:5b:3b:86:43:
2d:de:f7:59:76:1f:2c:21:90:a0:1e:00:bd:56:4d:56:33:c6:
ee:5f:4b:1a:a1:7f:53:bd:86:fb:0c:6e:d1:f8:e1:80:94:c2:
33:7a:73:83:e6:7a:89:c6:72:18:cc:72:c7:f2:e2:fb:49:7e:
a6:dd:dc:3f:f9:3f:62:26:fc:12:35:c1:ea:bd:20:a6:96:73:
c0:b6:b9:13:22:62:98:f1:f2:4f:ba:89:e1:83:67:03:c9:58:
38:e7:7b:1b:6c:ae:cf:b6:b0:e7:20:d5:ef:04:ea:06:92:e2:
09:78:0b:98:26:83:4b:18:5a:d7:ec:83:da:8e:e0:cd:f6:1f:
a3:4d:05:d4:fc:02:ea:ee:34:5c:67:32:be:a7:1e:5b:20:65:
ee:a9:08:1a:00:ff:e3:88:32:8a:d6:c8:0c:0e:16:96:a5:6c:
d6:a1:8c:a4:b5:9e:64:5c:95:fa:3c:5e:6a:24:2e:60:fb:14:
44:35:93:72:56:a8:f8:b3:b9:f1:d9:45:e9:db:cb:33:e1:cb:
15:81:ed:a8:64:4b:72:e2:10:a6:7e:e5:ea:14:83:b5:81:0f:
e9:2a:26:d4:c8:f7:c4:c9:64:6d:c2:32:a8:5a:94:75:0d:32:
9d:a6:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:44 2025 by rpki-client