Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: n/TL8wlHsKuDXww16QD4XFR4krOCoY7jDB+gsiUFEfY=
Subject key identifier: 8D:A7:BD:61:69:7F:E4:F2:8B:13:8E:15:7A:63:92:71:F5:03:05:BE
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0198D8BE0336488F01AB1BDA6F1720D79CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 0574
Signing time: Sat 23 Aug 2025 21:03:07 +0000
Manifest this update: Sat 23 Aug 2025 21:03:07 +0000
Manifest next update: Sun 24 Aug 2025 21:03:07 +0000
Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: s5VM6Mnwd+sOGAQf78jQF8Tb+RS8AfXc3fb4+aDqkak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:be:03:36:48:8f:01:ab:1b:da:6f:17:20:d7:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Aug 23 21:03:07 2025 GMT
Not After : Aug 24 21:03:07 2025 GMT
Subject: CN=8da7bd61697fe4f28b138e157a639271f50305be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:df:e3:29:62:14:9c:61:61:f7:e1:10:5e:
ad:bc:af:60:a7:c6:1b:4f:67:f0:bb:f8:d1:1b:d5:
1c:97:45:15:7d:86:a2:12:21:9e:16:05:72:27:ed:
b3:c6:ca:80:27:1c:f2:ac:57:4d:bc:a6:b0:14:f0:
14:4e:f8:50:fe:07:bb:d8:4d:43:16:04:76:2b:8e:
23:18:70:bd:80:e8:39:a9:fa:74:21:d0:a1:59:92:
7c:7c:76:c9:09:96:b2:12:a5:99:c1:15:be:40:32:
64:08:68:d9:bd:b9:ea:8f:8f:49:61:08:82:d2:a6:
c1:a6:6e:e0:26:33:ed:74:e8:3a:76:93:8c:6d:20:
6c:97:b2:ea:db:76:6b:64:7c:86:79:9f:09:49:45:
24:63:25:9b:87:33:7d:be:1e:46:45:d3:93:e4:6c:
6f:6b:6d:da:94:04:cb:0b:8d:ee:c2:54:1e:6a:5b:
e0:8e:8f:59:80:f2:67:24:ef:0f:e8:4b:97:5c:5c:
f5:a1:74:15:c5:22:12:d1:8a:a7:44:2f:54:db:6f:
95:65:32:92:3d:9c:9c:17:d4:c0:5e:24:2a:3f:0e:
0a:1f:23:9e:8f:82:5a:a9:8d:16:c3:1f:bd:06:38:
78:20:cf:d4:0c:c6:30:f9:8c:38:29:2f:76:08:65:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A7:BD:61:69:7F:E4:F2:8B:13:8E:15:7A:63:92:71:F5:03:05:BE
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:f6:60:5f:0d:20:d2:af:81:8e:1b:d9:9c:6c:d3:fa:86:
f4:22:3b:02:9d:12:62:5b:68:f5:58:b6:4a:68:04:80:9f:a5:
9d:b6:a4:1b:06:6e:f9:8b:22:33:d0:74:3b:5b:8d:65:22:ef:
01:fd:4d:06:93:bc:4e:3a:3a:e7:55:10:bd:38:7c:d2:f2:94:
ca:f6:ee:89:05:88:33:9b:f4:a4:15:85:79:96:2e:90:6a:dd:
e9:4f:6b:e4:1e:99:88:dd:ab:23:b2:b1:52:5c:2a:bc:b5:ce:
20:e8:c3:6a:9a:d2:fe:54:c9:63:24:5f:d2:cd:da:93:1f:c1:
73:ae:97:05:eb:32:93:7e:94:66:ec:0c:c6:95:42:d6:ca:32:
26:6b:4b:be:79:f9:4c:80:e6:0f:71:aa:cd:86:50:85:f4:c9:
0c:09:f9:ef:c9:86:9f:b4:5d:3c:84:27:1e:58:57:58:ba:9d:
c9:ae:5c:57:ef:e7:8d:96:92:03:86:92:28:e9:b2:81:fb:ce:
84:1e:38:eb:4a:fc:7f:81:f2:ed:e7:fc:66:27:55:1b:f8:c3:
02:97:ba:17:80:5c:0e:f1:5b:c2:5c:14:3a:17:82:3f:87:14:
85:8c:06:47:e0:46:83:6b:51:ba:92:bb:bd:40:45:54:8c:c1:
7f:41:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:17:59 2025 by rpki-client