Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: xTNvKODHr1Hof6xzcAVOI5268exhNMSarnIEiLvEycc=
Subject key identifier: 99:D3:5A:AC:F3:AF:77:62:AD:DB:92:64:37:F6:3B:9A:5D:CC:66:DD
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 0198D4A7EDF67374BF8EB02F339845E98101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 02:00:31 +0000
Manifest this update: Sat 23 Aug 2025 02:00:31 +0000
Manifest next update: Sun 24 Aug 2025 02:00:31 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: 36Gp/xY/jexsm+iBs71LMxba/PHtELAJ1VQATtF1zv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ed:f6:73:74:bf:8e:b0:2f:33:98:45:e9:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Aug 23 02:00:31 2025 GMT
Not After : Aug 24 02:00:31 2025 GMT
Subject: CN=99d35aacf3af7762addb926437f63b9a5dcc66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:04:f4:65:fd:cc:91:61:15:96:7a:df:6b:
42:f8:d3:11:94:1a:6e:51:54:c5:ba:d5:86:0d:14:
5c:f2:66:f7:35:b3:d5:e0:65:ae:15:9b:f3:e4:cb:
d8:4f:7f:24:ca:88:74:9d:50:9f:2c:3d:26:8b:db:
27:e7:81:90:66:97:a2:41:db:fa:8f:c6:74:58:b7:
cd:43:1f:63:04:6a:46:d3:48:66:ca:62:d8:84:c6:
a2:a2:81:cf:34:24:80:a6:96:3f:58:73:91:28:2d:
d2:f2:76:11:3e:be:5b:98:64:c1:70:37:38:66:67:
d0:42:da:d4:19:64:d6:54:d8:83:b0:e0:9a:c9:d9:
7b:d3:eb:fc:1b:4f:d4:49:ac:52:bd:ba:3b:04:13:
0d:b7:a7:31:bd:69:56:9f:5c:09:a1:9f:77:a7:d8:
04:f9:39:e5:46:87:6d:f1:cb:ba:d3:bb:a3:6e:d3:
63:76:fc:06:6d:fc:a6:0b:4c:c9:3f:93:be:5a:34:
e2:2c:e1:56:21:46:ca:9e:34:46:97:61:91:79:14:
ed:39:4b:f9:b9:a8:9c:55:2b:ab:8d:82:7c:ae:04:
20:9a:3d:8c:54:41:f6:79:1e:c7:ba:6d:37:4c:c5:
c8:b2:93:a2:82:8e:f0:9f:76:a7:25:51:51:af:dd:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:5A:AC:F3:AF:77:62:AD:DB:92:64:37:F6:3B:9A:5D:CC:66:DD
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:aa:52:49:5f:e6:f8:ca:2d:4b:9f:14:81:13:e1:8f:47:37:
18:8b:75:a7:27:46:ab:29:27:01:3b:63:9f:bb:a8:f7:ae:75:
5b:13:56:f3:a5:09:26:32:99:67:c9:a4:a4:a6:f7:c6:ee:1e:
02:4d:7a:c6:9f:09:56:42:48:75:53:93:93:64:93:b9:39:5b:
28:02:74:81:b4:17:d7:a1:c7:77:85:b7:99:54:36:66:aa:47:
82:b8:27:04:af:fa:70:e7:a3:1f:03:6e:e6:62:88:dc:18:27:
49:6f:90:b4:87:77:f7:e1:f5:e4:19:9e:54:e4:3e:10:fe:38:
7c:63:ca:5d:a5:66:e1:3b:c8:2b:a6:ea:4d:00:6b:68:8d:5d:
5f:d0:9c:bf:09:42:7b:5d:8c:d9:72:0b:e1:fc:1a:c1:b3:d4:
90:94:74:6c:d3:ff:d6:f9:5d:1e:cd:05:3c:ab:4f:15:24:b6:
c8:0e:a5:d1:bf:fc:25:58:7b:b3:93:bf:d5:5b:39:ae:92:a3:
6c:e6:64:e3:61:cb:23:4c:81:85:63:cf:62:4f:78:51:c0:07:
24:c7:4e:15:8a:96:2b:7f:f6:10:cd:ae:e8:49:25:d5:f0:8b:
98:7f:7a:21:98:f3:d6:fd:b8:02:30:eb:7e:10:e2:e0:45:e9:
7e:0a:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:48 2025 by rpki-client