Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: NBrzTCccxttlQrFzwbIAI5a8r0KycT9JJpy9OiAVy2I=
Subject key identifier: 66:E2:A2:E6:D9:C9:02:9A:FD:EC:05:D3:D8:1B:D1:C5:BB:1C:DE:16
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 0198D4E08C5EC84529A144B5B47BEAD31D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 1337
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: uX8zDkKwubTmqjHPXLt4lZ4gXutaA3YYQMr24Mc0gvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8c:5e:c8:45:29:a1:44:b5:b4:7b:ea:d3:1d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=66e2a2e6d9c9029afdec05d3d81bd1c5bb1cde16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:87:95:d7:27:54:3d:5b:7e:1d:c0:37:8f:
fa:17:75:fa:de:77:b1:36:5b:a0:28:a8:04:1d:72:
e4:c9:86:fc:e0:86:83:a2:08:26:2c:ff:ae:23:3d:
0f:84:78:b6:b9:05:c7:cf:09:cd:e1:b8:06:f4:ed:
7b:43:32:d0:ff:fd:67:51:e6:e1:43:e4:63:ea:c4:
9c:ef:4f:f9:14:ea:50:21:5b:f1:81:ba:f2:27:9f:
ab:61:bf:0b:a0:52:44:cf:20:b5:39:8a:57:ec:cb:
28:7c:fc:25:83:6a:ca:40:a0:94:c5:23:71:86:7f:
2e:b6:55:e1:5c:55:5e:d1:76:0f:03:f6:4c:91:15:
ca:1d:57:a2:cf:6b:c8:28:36:39:35:de:98:f7:e4:
30:3e:24:cc:b1:80:2f:2a:22:89:54:1c:f7:91:8b:
61:96:c8:8a:1a:83:08:a1:56:2c:cd:bb:d4:81:ba:
aa:b0:f4:a2:19:86:7a:cc:15:f4:aa:68:3d:4c:8d:
ea:ff:29:5c:27:a5:95:46:4a:c9:22:a0:4d:49:52:
a5:b3:5b:4c:ca:bd:62:be:a9:65:60:1d:b8:f1:61:
c8:7e:d5:10:49:93:0f:68:e5:3c:64:7f:1d:c8:44:
86:89:3f:00:15:24:29:85:2d:4f:d0:c9:57:24:32:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E2:A2:E6:D9:C9:02:9A:FD:EC:05:D3:D8:1B:D1:C5:BB:1C:DE:16
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e5:13:25:ea:87:ca:4a:5a:9c:0d:25:2b:c9:2d:87:d5:26:
95:4f:a8:34:b4:41:d2:80:ae:65:c0:0b:ad:9e:d5:02:30:41:
32:51:7c:0a:aa:49:f3:d8:3c:d8:e4:29:7b:39:08:33:26:6d:
5c:3f:61:00:73:b5:f0:1f:9f:b1:cc:3c:1a:8e:23:00:89:c0:
51:88:27:7b:44:2a:e2:b8:df:98:dd:f5:26:82:67:d9:e1:13:
e9:71:47:ab:a8:33:d6:00:9e:ca:37:0e:76:14:b3:8c:82:a9:
88:e1:fc:ea:23:f0:9d:90:c3:4c:3b:c2:84:24:1c:45:82:2d:
ae:df:58:81:18:69:6a:32:d9:d5:d4:e5:66:26:3b:e1:02:44:
d2:d0:c8:cb:bb:9c:e5:d9:38:26:94:88:aa:9f:3b:3e:14:90:
40:ac:c2:65:59:ab:2f:db:06:48:db:95:05:d5:f7:97:e7:0b:
40:02:6e:8c:2e:48:1e:91:99:a4:c3:6a:0e:e8:54:cd:fc:cc:
6d:d5:2d:3e:35:d1:4a:51:3d:35:b3:c2:a2:aa:e9:42:dc:11:
8c:ac:6b:d4:5f:a8:9f:d9:fe:da:44:ca:e2:c9:a0:94:ad:71:
9f:4b:63:12:42:0e:10:ce:ea:69:09:16:5a:be:4d:22:fc:3a:
5b:12:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:36 2025 by rpki-client