Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File: xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier: ji4zAd0RmOOlKFpL4FwOfxgdXs9+IKcj9q/gBK0ui/k=
Subject key identifier: F8:7E:92:BE:E9:0B:0C:D9:1D:A2:19:AD:D4:CF:69:0F:DF:22:75:D6
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 0197CB70F495DE7D5E4E3E6B988F2BD6491B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number: 022E
Signing time: Wed 02 Jul 2025 14:01:06 +0000
Manifest this update: Wed 02 Jul 2025 14:01:06 +0000
Manifest next update: Thu 03 Jul 2025 14:01:06 +0000
Files and hashes: 1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: 2cHeWw5Gyk2I0n5OeKSTKoUr4YI3SmcIGLOZ5hvbUNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:f4:95:de:7d:5e:4e:3e:6b:98:8f:2b:d6:49:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Jul 2 14:01:06 2025 GMT
Not After : Jul 3 14:01:06 2025 GMT
Subject: CN=f87e92bee90b0cd91da219add4cf690fdf2275d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:56:1c:9d:97:3b:90:75:a8:dc:27:a0:7c:
57:7e:5c:58:04:5a:94:fd:66:15:3c:8c:91:d5:d9:
7c:73:ed:64:e5:86:a1:5c:b5:dc:f9:7f:1d:6d:10:
fb:7c:64:56:54:ff:c9:22:d3:c6:d9:f3:b7:6e:db:
61:35:69:c7:3a:26:00:35:35:6f:bf:12:46:3b:ae:
4d:4e:f1:14:5b:84:e5:a9:de:6e:63:79:ab:8b:7e:
6c:88:4a:9f:ae:d0:23:58:98:8e:30:47:6c:07:53:
e5:01:7c:76:87:9c:72:0f:0d:ca:d1:69:c6:2a:e7:
f8:57:27:bd:b1:48:08:b5:84:84:de:a7:61:d3:b8:
c2:d9:9f:d2:b6:54:ce:ae:62:e9:27:77:de:d7:cb:
1b:21:f2:bb:71:38:78:74:9a:53:15:69:2e:b8:d6:
e3:fb:03:dd:20:cb:7a:5f:78:92:26:1f:3d:37:34:
18:4d:f7:ba:b6:64:4d:0d:fb:16:5a:64:3e:a6:67:
55:d1:71:d2:2f:92:e1:fe:8c:6d:fd:19:4f:d5:71:
79:09:46:40:60:1a:ed:89:2c:c3:af:56:c3:6c:8f:
1a:1f:d8:c8:e6:77:58:bd:80:c3:d8:b0:79:29:61:
0d:ef:ab:b7:9d:49:16:aa:f6:99:ad:e7:99:fb:99:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:92:BE:E9:0B:0C:D9:1D:A2:19:AD:D4:CF:69:0F:DF:22:75:D6
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8b:46:aa:ce:7c:3e:68:91:2a:b6:52:02:4d:e9:fe:d4:99:
39:8e:38:3c:77:b7:b2:97:8a:45:eb:7b:b9:67:6a:83:0b:6b:
e8:4a:31:a1:28:8a:ee:31:ae:35:8c:94:6f:ad:06:17:2c:12:
91:9f:f7:5f:51:3c:67:cb:a7:cc:c0:fd:02:47:6b:e8:87:f7:
8b:0c:db:c0:41:38:62:68:8a:64:96:97:6d:e9:84:f3:ab:72:
fe:d4:25:0c:55:0d:03:f9:66:94:74:c7:99:0f:8e:e1:b7:6b:
57:88:55:4f:7d:a3:99:23:ff:a2:1f:ed:a5:3d:a3:52:16:93:
9c:f7:19:5e:15:2e:49:09:65:ee:0a:62:8b:8c:43:ab:73:b9:
16:3b:f6:1f:62:50:20:1a:b3:88:8a:40:8c:8f:08:68:66:81:
d1:7f:b6:16:6d:52:ef:98:e5:94:9b:c7:c2:7d:ff:2d:94:f4:
c8:d3:0b:39:71:04:f1:26:36:8e:f8:8f:9a:fb:66:3f:7f:99:
9e:cb:cb:1d:fc:26:46:df:57:80:bb:4e:2c:c2:66:e0:91:33:
e5:28:a8:e9:94:1b:84:73:60:60:a3:a0:7d:5d:0b:a3:14:8f:
4f:c2:c6:0b:30:41:d8:85:9e:1b:be:08:ec:91:a4:b7:ad:f1:
d2:c4:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:16:41 2025 by rpki-client