Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: Mr1H6jwxdoqWbZx0sf5I1RJIJlNTnKm9dCcMZ1ULr1U=
Subject key identifier: 36:42:FB:2F:9A:61:E9:54:8C:CF:E6:D3:E9:3D:B9:BB:1D:3F:25:DC
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 0198D8509345AD86814AC22044B2D1F5CA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 1293
Signing time: Sat 23 Aug 2025 19:03:35 +0000
Manifest this update: Sat 23 Aug 2025 19:03:35 +0000
Manifest next update: Sun 24 Aug 2025 19:03:35 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: magrw69fk9X61Wi1xjtqs0w/BfPiOABlwgWy3o4mR3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:93:45:ad:86:81:4a:c2:20:44:b2:d1:f5:ca:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Aug 23 19:03:35 2025 GMT
Not After : Aug 24 19:03:35 2025 GMT
Subject: CN=3642fb2f9a61e9548ccfe6d3e93db9bb1d3f25dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:d2:f3:a1:9a:dc:1a:89:46:f0:86:e1:63:
73:eb:a1:0e:1b:54:15:53:32:64:cc:ce:55:df:2d:
e7:ab:a3:06:c5:7a:64:91:a6:72:c6:32:93:a0:39:
ba:45:34:32:ae:91:12:b9:fb:c0:a4:5d:d3:a0:fe:
df:0c:c4:5b:4c:37:f2:40:f5:e9:27:63:68:b6:e1:
22:62:39:80:34:5e:8f:07:bd:86:5f:07:37:16:99:
b3:bb:d2:97:52:d8:44:cc:46:e3:ac:5d:d4:f5:b5:
d0:1b:35:8c:e1:4d:ec:2b:e2:52:27:49:f0:de:c1:
c9:7e:d9:8f:fc:be:2e:2d:29:7e:b7:2d:12:fd:7c:
f6:89:19:bd:86:c2:05:3e:29:1e:a2:14:d3:1b:73:
81:d8:69:b7:ce:4a:11:9f:26:eb:b5:28:65:b4:33:
a5:c5:4a:bc:0e:1a:3e:84:35:d5:39:77:4f:ee:af:
ae:7c:74:7b:76:82:62:07:d8:67:8a:e5:51:f2:a7:
7a:38:44:08:95:71:b7:b8:e6:e8:48:7f:87:0b:85:
1e:98:ba:7f:7a:c8:50:7d:2c:3c:ed:b7:f0:f0:1c:
02:91:66:bd:bd:bb:4d:a3:db:b0:95:b5:00:d1:56:
03:4b:2e:6c:48:27:a8:d9:ee:c9:2c:61:ef:e0:ea:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:42:FB:2F:9A:61:E9:54:8C:CF:E6:D3:E9:3D:B9:BB:1D:3F:25:DC
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:7e:4d:8b:3f:6c:7f:bf:79:cc:4c:fb:9a:7c:47:8d:2d:1b:
ab:5b:72:55:4e:f1:82:ea:d3:b4:64:3e:fc:8a:46:f2:aa:b5:
bf:c6:cb:5a:2a:9c:28:6d:97:8d:2d:42:11:03:c0:1b:47:94:
ae:05:f6:0b:e9:27:84:77:59:06:17:79:f4:e4:6a:ae:f8:2f:
26:5f:08:d1:27:56:bc:b1:d5:9a:1f:ee:ba:38:d1:eb:74:53:
21:e2:47:20:41:a5:96:e6:33:4b:3e:4f:cb:60:d2:38:48:7c:
66:d5:d9:2f:60:96:3e:7e:de:3b:17:7a:3e:da:ab:ad:74:2c:
e1:ae:8c:bb:c4:aa:e6:e3:c9:96:8e:27:87:86:74:e2:71:66:
c1:f7:4f:71:bb:fc:bd:3b:90:b8:96:21:33:97:d4:bd:cd:ce:
04:2e:de:7e:6f:20:2b:04:3d:73:27:47:70:a0:c8:fd:61:75:
9b:79:1d:dc:f5:bd:74:4c:a5:53:d2:45:3a:cc:56:2a:5c:30:
44:67:d2:d4:46:90:49:53:34:e6:3d:f8:0b:5c:49:09:3a:0d:
6d:7e:59:fd:82:4a:c6:eb:b4:96:c1:df:7f:63:eb:ab:27:53:
fe:05:df:c2:fa:01:17:15:9e:1b:5d:47:8b:91:8b:4f:e7:e0:
c4:fb:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:46 2025 by rpki-client