Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: CUsk5R060ZMXYytTgYi/dbEB3mYrKehda2/grzPYNOI=
Subject key identifier: 38:76:7B:92:42:45:DB:16:CF:71:82:E0:81:5A:67:46:C8:5C:4D:94
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 0198D54E581205FBA5D047E6B3D3F5785F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 1245
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: 4y6CbMPSm3X1+4nyVtN5jpVZt5NAWFwR6s+88q4IO+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:58:12:05:fb:a5:d0:47:e6:b3:d3:f5:78:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=38767b924245db16cf7182e0815a6746c85c4d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:66:f9:8e:05:66:bb:76:b3:c1:2c:e0:1f:
f1:03:52:cb:be:56:4a:f3:17:66:7e:a0:b1:ee:99:
72:eb:6d:2a:1e:0e:5d:e5:7c:b6:39:a6:d5:99:1c:
bf:72:23:80:9a:13:e5:d2:f5:87:02:49:a0:ab:c7:
52:b2:4b:79:1f:70:62:2f:16:da:98:5e:28:d1:5a:
d7:73:40:18:f3:31:46:69:0a:f0:b3:b2:8a:6b:6f:
d9:f2:68:ad:5c:4b:1b:d4:58:98:26:1f:6f:cd:a3:
3c:dd:f4:9b:11:f9:47:91:a3:98:56:41:44:fe:49:
06:c3:ed:40:6e:3a:05:3d:a4:d5:95:ba:d4:f2:c9:
9e:7f:f7:e7:54:ab:5f:ab:4d:9e:db:6e:ed:56:82:
b3:da:c9:76:17:e4:58:df:e0:da:b4:e4:2c:3f:ea:
27:bc:9b:04:a3:1d:6f:06:eb:2f:61:56:76:e2:db:
95:01:22:15:7c:b5:46:38:4d:29:50:d1:af:f9:a3:
86:2b:24:04:95:d5:60:6a:64:3b:f2:06:c2:9a:7e:
f6:9d:ce:26:9d:81:db:54:44:7e:10:13:28:99:c8:
cd:ee:de:36:14:fe:71:3c:fd:d1:31:fd:63:cb:30:
14:b4:8d:80:81:3e:53:4d:4b:72:5b:08:15:36:69:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:7B:92:42:45:DB:16:CF:71:82:E0:81:5A:67:46:C8:5C:4D:94
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:58:a5:ff:f9:7c:ff:45:36:e4:f4:7e:1f:91:4c:9d:8d:
d5:6c:ef:ab:38:9a:71:57:88:e4:b5:aa:e9:99:d0:eb:f5:47:
a5:8d:dd:e5:1e:3a:44:57:d3:52:b8:81:4e:2f:5c:2c:ef:61:
58:e3:d1:f6:4a:d2:be:44:3a:0f:1d:a3:26:ae:69:32:83:41:
ef:d2:51:74:06:9b:4a:3a:b1:43:11:6b:76:1e:62:c7:17:11:
bd:32:8f:5d:06:5e:6e:c3:57:9a:96:da:01:d4:f5:77:a3:70:
ca:38:2d:61:92:27:c8:93:ab:9c:62:5a:ac:37:54:ca:14:39:
a1:2f:cb:64:00:de:23:10:25:55:65:cf:09:ed:50:78:31:a1:
04:ac:ec:fd:48:8f:db:0b:c6:f0:82:af:da:5e:a4:bc:58:1a:
08:40:27:7e:47:fc:5f:f3:06:c6:4d:66:c6:ae:80:6d:c0:dc:
5f:ea:bc:ee:ee:c6:e9:1c:60:c9:11:99:17:32:2a:ef:7e:ec:
27:d3:64:e4:ec:57:7c:76:01:23:5e:2e:49:35:49:3a:92:ad:
78:71:91:03:17:3e:a4:30:d3:ce:d5:f5:11:10:e4:28:40:6e:
da:fe:20:14:e5:12:8b:0d:ac:2c:59:38:5d:af:1b:81:df:7a:
ab:65:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:53 2025 by rpki-client