Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: JK8DvNp9rwajvwebQEKtJGIJySRc9fxR0/J2jUSWcZo=
Subject key identifier: F1:C4:63:55:D8:3D:81:69:B9:98:A2:14:AB:30:84:38:CE:4D:9F:C7
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0198D4724D64C53E073E8940B0B106290A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1207
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: YNKc02518IYW4OIjy1um0B5hr1Bn+Ao87GtlXEyGuGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4d:64:c5:3e:07:3e:89:40:b0:b1:06:29:0a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=f1c46355d83d8169b998a214ab308438ce4d9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:33:56:7f:af:c2:62:99:d0:6e:ef:cc:9e:
92:d3:49:1e:8b:47:19:c3:d0:fc:38:00:fe:f0:87:
60:59:84:ae:53:50:99:09:ff:b0:3e:ee:28:2b:d1:
22:04:fd:7e:cc:81:fa:20:96:7f:67:2f:7d:b3:1f:
90:2c:75:39:ac:32:42:4e:7e:19:bc:53:a0:16:fd:
d9:68:f0:79:72:04:d2:c0:8d:14:55:ef:eb:e8:17:
6e:06:e8:a8:b0:58:de:d8:83:91:a8:a8:e5:04:b3:
9b:6f:10:17:da:02:f6:9d:f9:6a:86:50:ee:c2:40:
dd:18:a2:8d:6c:a5:6d:0d:5c:4d:ad:37:f2:80:90:
60:4e:3c:14:01:f2:65:b1:73:19:46:20:2d:df:a8:
f7:96:1c:42:36:6f:31:d9:cd:fb:36:c2:c0:bb:b9:
b0:a9:a9:cc:5c:df:09:7e:93:63:1c:62:d3:24:9f:
83:7b:ab:d6:5f:03:18:6e:c7:16:c9:72:c4:b4:07:
22:ca:13:11:0d:ba:3c:d0:c6:19:ba:cc:3d:03:5e:
2e:7d:a9:40:1a:cb:73:0b:07:c0:f8:1d:58:2f:4b:
7d:ee:c8:81:9c:b2:c7:d3:71:ce:2d:2a:aa:7b:3c:
5d:85:b6:3c:31:c9:28:df:36:c9:32:f5:20:51:a4:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:63:55:D8:3D:81:69:B9:98:A2:14:AB:30:84:38:CE:4D:9F:C7
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:78:c2:d1:32:70:62:e3:58:a1:56:b2:01:c4:6b:a2:42:7f:
93:68:91:51:c9:71:7d:58:51:2c:2b:ce:79:f5:d6:42:03:41:
a6:aa:23:5b:41:0a:67:4e:6c:e0:43:23:91:ef:f3:9b:fa:98:
a1:f8:e7:20:da:1f:36:2c:8d:c3:11:a4:ba:88:76:08:cb:20:
ff:45:a8:da:9b:2e:e1:bf:d3:af:60:e0:20:d3:eb:bb:b9:cf:
35:19:21:e3:73:9c:b4:9a:2c:c5:1e:02:3c:63:0f:44:cb:6e:
83:b7:cd:99:d8:a8:f5:77:44:a6:2c:35:77:53:4d:07:7f:b7:
70:ba:76:9c:e4:0f:1f:73:b8:4c:1c:d9:ed:87:84:be:6a:7c:
47:00:e1:ca:0a:14:59:7c:53:e3:1a:24:01:96:8e:f5:f7:6b:
d0:8f:c1:74:31:37:67:d1:6c:06:4d:4e:13:5a:65:ae:fc:ae:
35:76:d3:6f:fc:eb:a8:55:34:db:b9:1e:f0:45:5b:e2:61:16:
94:ae:d8:7f:5a:f5:e7:c0:f6:95:f9:07:2f:f1:e7:a2:08:9a:
8e:33:20:2f:c7:0a:56:21:ef:4b:72:6a:cc:7f:9d:64:a5:c5:
e5:82:cd:09:8e:b4:bb:18:70:90:02:48:56:07:48:bc:d8:ab:
84:c0:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:32 2025 by rpki-client