Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: /OV4Hsf78iIvs88xdMTZPjtRnW2IWo4QcBfIXTexf/M=
Subject key identifier: 5D:DC:75:D7:D1:A4:A6:C2:BA:05:6B:7B:0F:B6:28:83:F9:81:C8:1C
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0197CB39BE280164E2628CFFB0F89A4F0834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 08EE
Signing time: Wed 02 Jul 2025 13:00:48 +0000
Manifest this update: Wed 02 Jul 2025 13:00:48 +0000
Manifest next update: Thu 03 Jul 2025 13:00:48 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: HrAnXHOiiJMNqHaeXl8GOPVatTZezcDwNscAuAWUL7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:be:28:01:64:e2:62:8c:ff:b0:f8:9a:4f:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jul 2 13:00:48 2025 GMT
Not After : Jul 3 13:00:48 2025 GMT
Subject: CN=5ddc75d7d1a4a6c2ba056b7b0fb62883f981c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:07:c3:3e:45:13:fb:6f:03:ef:01:1f:3a:
21:1e:b5:27:56:f9:9f:5e:a3:89:05:3c:fb:8b:a6:
f6:c4:cd:61:8f:52:8b:52:27:8f:5c:98:0c:f0:36:
c7:98:b2:00:fd:03:a9:72:a1:0d:ed:0c:81:40:0a:
87:50:60:03:8e:37:e6:6e:b1:95:d8:49:80:0b:f4:
da:a6:bb:91:03:94:2c:cc:43:e7:02:b8:8d:a8:df:
a4:cf:65:4b:84:56:b9:5c:85:20:39:93:34:72:25:
84:8d:d6:3e:64:82:1d:51:5e:42:0c:68:7d:da:98:
b0:c6:4f:d5:fb:95:45:e6:2b:aa:30:ba:b2:b6:87:
05:89:fe:e2:22:e2:eb:cd:14:68:b6:58:61:9a:d8:
e4:6c:31:ca:de:5c:86:4c:60:1c:dd:2b:2a:68:f4:
48:10:b2:66:72:f7:99:65:83:f1:80:a3:99:ae:43:
96:11:5d:51:bd:70:5d:99:88:60:cb:1f:1f:c6:a6:
8b:77:bb:20:a2:6d:f3:c2:24:0d:6e:fe:c4:be:e2:
58:7c:fd:90:35:62:9f:8f:f9:cb:91:f0:44:61:5f:
6f:69:b3:53:6a:ad:10:c7:42:eb:3e:11:f1:a2:8e:
81:34:87:1f:72:21:af:4b:d0:24:20:26:25:03:00:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DC:75:D7:D1:A4:A6:C2:BA:05:6B:7B:0F:B6:28:83:F9:81:C8:1C
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:39:6a:8c:80:61:80:95:6b:47:4b:7f:18:c2:9d:5a:eb:33:
c8:98:9e:dc:29:35:d1:96:23:c3:9c:1c:93:b9:8b:73:54:8b:
3a:93:43:d5:3d:2c:ae:28:c6:4e:2a:5d:cf:2d:4e:c8:87:06:
0a:9b:ea:8f:e7:7d:66:f2:2b:9e:89:64:d4:39:32:c6:04:f7:
53:8d:bf:01:27:68:1e:d8:15:c2:6e:0a:2e:79:54:da:11:69:
44:e0:3a:8f:cf:da:ee:d5:94:4c:88:f1:07:c7:2a:e9:c2:41:
7f:6c:b3:37:bd:c9:86:31:ba:d3:7d:b4:15:32:81:44:b4:60:
9c:66:2a:9a:30:4e:ed:2e:74:2f:83:88:08:c8:27:c5:61:83:
3d:6e:30:67:6f:47:1b:56:ed:17:06:1d:2a:bf:48:3e:78:fd:
bb:84:a9:44:e1:c7:1e:ca:5d:ca:5f:75:13:16:e5:0a:69:72:
8e:ba:ff:cb:43:27:f4:84:9f:e8:12:69:a1:25:12:65:64:d7:
57:c0:93:70:ee:06:df:7e:9b:52:ab:ac:e3:aa:04:6d:14:0f:
57:4e:ee:da:cb:c2:0a:0c:82:ea:1c:ca:1a:34:d3:ef:20:c0:
7d:36:a8:5e:42:66:0f:84:22:58:45:eb:2b:4c:1e:4f:d6:4f:
e7:22:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:45:07 2025 by rpki-client