Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: daxFrMuqElVEbh4TjWvQgLUmWaQ5KGoxZPifR+RDHNs=
Subject key identifier: 92:03:57:FD:41:9C:8D:16:C9:DE:54:C2:29:10:DA:8C:63:50:46:7C
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0198D3CBFF526730D8A84360A2A9E2A5975D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0977
Signing time: Fri 22 Aug 2025 22:00:18 +0000
Manifest this update: Fri 22 Aug 2025 22:00:18 +0000
Manifest next update: Sat 23 Aug 2025 22:00:18 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: Nc7MRUaxGUHfi/Hh3FW9ODWCg8kq84o3F/5eBwzuv4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:cb:ff:52:67:30:d8:a8:43:60:a2:a9:e2:a5:97:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Aug 22 22:00:18 2025 GMT
Not After : Aug 23 22:00:18 2025 GMT
Subject: CN=920357fd419c8d16c9de54c22910da8c6350467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:0d:af:70:ff:b9:a9:c5:c8:c1:cd:f2:a8:
6b:89:c5:4f:65:1d:0e:60:96:bc:f9:96:92:6f:4d:
b5:3c:31:e7:3d:6c:e5:ea:ad:bd:49:fa:64:dd:54:
d9:c7:fb:60:f6:1b:87:13:fd:6a:1d:2d:10:2c:18:
23:d5:7e:68:7a:b9:4d:22:5b:58:54:21:94:a3:e4:
7e:0d:1d:12:a9:ac:6e:73:8f:fe:2f:a3:de:4f:39:
16:51:bf:31:33:91:b4:c3:37:0b:30:d5:d9:a8:38:
45:da:6e:27:93:1b:c8:81:67:7f:b4:8e:28:48:0e:
5b:6e:20:99:44:23:0d:44:6e:63:7c:49:88:7d:ec:
d6:20:80:96:e5:c4:c1:85:02:a9:21:e0:e5:72:e9:
36:78:13:c2:6d:52:10:95:55:b8:48:99:85:e3:c8:
2f:6d:9f:47:b0:17:6e:ef:99:f5:6e:7a:f9:2e:5a:
13:5f:8a:a5:62:2a:a3:14:dc:e6:17:4e:1c:28:d1:
79:eb:54:b8:6a:b1:ed:22:a1:19:81:cd:35:2c:e5:
00:24:c7:d7:83:ac:aa:12:ba:56:b3:2c:5f:85:9e:
00:55:c2:b3:20:53:18:a2:00:5b:2e:b6:6e:25:e9:
2a:19:44:57:c5:1f:ed:89:24:65:49:16:84:4c:95:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:03:57:FD:41:9C:8D:16:C9:DE:54:C2:29:10:DA:8C:63:50:46:7C
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:36:42:28:50:bf:27:96:1f:5a:b5:6d:69:53:2f:b8:29:
c1:79:e5:d9:0d:cb:35:dd:b2:67:2e:5e:aa:a3:b4:19:71:5a:
db:2f:4a:55:e9:24:19:12:9f:92:1e:91:aa:9d:f6:6d:32:68:
89:c1:35:73:fb:13:e0:8e:54:26:dd:b0:aa:a7:d1:61:c2:cf:
51:5a:3a:32:16:82:c6:a2:a5:e5:92:05:a2:cd:a8:95:50:69:
bf:7a:22:be:7a:a1:6b:16:a3:8b:35:0b:ab:da:c5:0b:46:16:
7b:48:74:5a:66:b1:42:fa:7e:e5:29:2d:24:bb:2e:6c:24:85:
67:2f:97:cb:96:85:4d:45:39:44:c2:4f:c3:1f:94:39:44:e5:
bd:74:50:3e:b9:66:e5:d3:b3:2b:58:e0:41:91:4e:c6:7f:11:
86:99:f6:66:cf:36:44:96:f5:5f:02:32:5d:33:23:78:78:8e:
78:91:d0:39:3a:be:c4:b3:f9:a1:7a:04:e0:0c:c4:5b:b8:0a:
6b:fd:27:31:7c:4c:16:b4:46:ad:ba:9a:ca:6e:38:f5:0c:8c:
da:d0:b4:ed:17:48:57:2a:a7:52:ef:60:13:3a:17:17:52:99:
95:10:5d:a5:9a:ce:c1:a5:4a:c1:ee:9c:b1:64:fa:3c:b7:40:
f1:d5:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:01:47 2025 by rpki-client