Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: /c/v0WMNUDsOmCEqSlvVJnipu9aR15rFyhf+t0K+1Eg=
Subject key identifier: 3B:34:CE:24:BF:0A:93:77:79:6E:E5:04:49:15:AC:AA:46:5D:9A:3B
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 0198D4E0A03D79A2AB052E619E2E92D33F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0741
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: 9Kl8OVPCJ+Je3K5OV7Bep5JMk8qbOPSiz637CcF4sNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a0:3d:79:a2:ab:05:2e:61:9e:2e:92:d3:3f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=3b34ce24bf0a9377796ee5044915acaa465d9a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:5e:4e:e5:dd:57:a7:8d:c7:de:7e:5b:d6:
ae:a9:12:24:b4:b6:21:8a:48:15:90:92:2b:00:3e:
f2:42:6b:d5:00:6d:4e:8f:ae:07:66:29:16:a2:08:
b6:bd:4b:03:69:34:78:27:14:a7:03:fe:10:c1:eb:
27:cb:57:49:ac:70:89:9e:3f:79:17:db:33:34:db:
c9:da:2a:13:8a:d7:60:9e:be:22:fb:65:57:9c:71:
6d:77:25:93:11:1e:1e:b2:c0:0d:f2:04:f0:1a:43:
e1:1e:a1:10:b1:af:d1:f9:b8:9b:f1:53:ac:0e:44:
48:e0:10:e9:b9:ef:52:59:dd:b1:de:45:6b:5d:5c:
53:09:a8:30:bc:07:bd:53:be:1f:1f:ab:27:e8:23:
03:ec:fa:a7:aa:75:f4:da:4d:25:fa:da:93:55:83:
b3:b6:97:96:64:00:6e:93:09:8b:da:ba:da:a4:0e:
67:e6:2b:0e:db:5e:28:21:0b:13:b5:05:e2:64:36:
e9:b4:0f:fd:5b:0e:a7:ac:13:a4:8b:be:2f:52:52:
fd:41:7f:ad:50:c2:f1:11:d0:1f:78:81:a4:a3:07:
5e:34:35:49:57:c6:76:27:ec:ed:f6:19:59:86:aa:
e2:98:0c:9b:d6:2f:32:77:74:91:25:93:d0:d3:74:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:CE:24:BF:0A:93:77:79:6E:E5:04:49:15:AC:AA:46:5D:9A:3B
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d8:7f:a5:e4:ee:0a:45:eb:db:84:dd:fa:d6:7f:44:da:56:
8e:3c:3d:17:2a:ce:32:a2:19:30:d8:ed:66:b6:75:22:82:f7:
c2:73:2c:11:f1:58:e6:11:7a:3a:ee:01:43:6a:6a:08:31:53:
8c:47:c6:02:95:ab:95:ea:ba:ed:3a:a4:c0:12:3d:5e:db:99:
b3:76:8b:c4:2b:02:96:63:f5:f9:1c:b8:3a:e9:b2:c8:30:ed:
dd:72:a9:21:25:f8:0f:48:e8:49:d6:31:e0:1c:d6:df:28:b9:
60:45:68:87:50:fd:3f:18:de:06:4f:11:aa:d8:47:88:1f:66:
9e:db:55:82:a3:9a:4c:f6:ed:a8:48:0b:50:78:22:f0:87:77:
2c:72:4e:29:86:99:68:fe:be:9c:7f:cd:0c:14:92:18:ee:4f:
f0:3b:2c:21:87:2a:5b:10:93:d0:c7:ab:02:1d:df:3c:eb:27:
e5:b6:38:5b:dc:2c:cf:37:bb:da:69:4f:72:3b:59:02:81:ab:
23:9c:52:e3:22:55:6f:8b:dd:00:36:aa:43:19:13:d8:51:00:
3f:45:36:0f:23:c4:93:24:b9:58:0e:d6:76:93:ae:12:96:07:
57:dd:fb:f4:f6:59:92:aa:be:1f:6a:eb:5f:bc:98:37:4c:46:
ea:27:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:02 2025 by rpki-client