Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: +6dc4jH79k5AtyqN0Kxs6JBFUWTkC8tySRVD5TH5xP4=
Subject key identifier: 12:29:28:D1:7F:3A:29:F7:4A:34:17:BB:5E:86:A0:0C:D7:FF:0C:7E
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0198D54E2071B50AE3F1B628579973721B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 11FD
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=)
2: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
3: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
4: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
5: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
6: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=)
7: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (hash: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=)
8: q-dwejGkQXDMbD7q4mP3oo-ZowQ.roa (hash: SyMRcGxa30Xi241IBU1XDFGXjy3/q5lxdk8BxSVjqQg=)
9: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: Ntd7W+Sv1t5XGWKTjDxBnU7Cs3IRcWlRz/Jd0iGlRi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:20:71:b5:0a:e3:f1:b6:28:57:99:73:72:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=122928d17f3a29f74a3417bb5e86a00cd7ff0c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:9d:ff:ed:1a:cb:f7:0a:f1:a4:e6:1b:ad:
35:8b:1b:e1:f1:8c:6c:59:d6:aa:7a:e9:62:70:2a:
6a:79:3d:82:14:0f:b5:9f:c7:97:87:d8:26:8b:95:
48:bd:be:e1:70:71:2f:18:34:04:35:35:ca:24:e0:
80:9a:a0:93:d3:2c:d8:ed:8c:09:66:2a:32:1a:5d:
85:c6:67:87:74:be:1f:b5:2b:83:5e:b9:04:36:f7:
d0:d5:82:24:b4:43:cb:cc:9c:5b:50:4b:0e:ec:ae:
af:17:50:24:86:53:f2:99:8d:84:d8:76:3c:38:0e:
3a:31:1a:38:eb:aa:37:dc:b7:81:64:e7:6d:56:76:
47:2b:f8:a2:99:a2:4c:d3:98:dd:e6:30:04:35:3d:
8f:9c:0e:cc:c5:d2:24:e7:9a:5e:78:de:4a:da:90:
c9:52:63:5c:10:f6:b3:a1:d8:a3:53:b7:fc:3a:80:
2b:02:8f:22:ff:c9:a9:a6:8d:a1:ed:3c:57:d4:a4:
b6:cb:a7:2c:07:a8:73:ed:d7:13:c5:a0:99:44:d3:
74:35:f4:27:2e:d1:73:f6:ed:0f:a2:8f:1d:81:15:
7a:6d:99:b1:56:c5:d1:53:8d:88:f9:05:c7:5e:ee:
6a:6c:bc:90:c9:63:0a:96:04:48:c3:a5:3f:74:22:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:28:D1:7F:3A:29:F7:4A:34:17:BB:5E:86:A0:0C:D7:FF:0C:7E
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7c:ba:2c:88:ad:a3:d3:52:e4:e1:3c:e7:ec:4b:95:b5:75:
33:3a:b5:b9:d7:c9:04:4b:d7:5d:a8:24:73:80:ed:cd:62:3a:
2f:5d:c8:f8:f8:78:ff:7d:92:94:85:4e:a8:2f:72:e0:6b:07:
97:db:14:03:6e:da:4b:3f:9d:03:82:e7:4e:30:13:da:7d:ee:
c8:68:e7:94:42:93:66:5b:b0:33:e1:bb:a9:42:db:01:45:c0:
c2:d0:d5:fd:36:e9:25:ac:c8:29:2f:b8:ce:e5:d5:21:9d:39:
f2:9f:f0:3d:18:3a:e9:f3:51:21:7d:1d:89:65:bd:33:fb:36:
a6:85:7e:55:4a:ac:1c:5b:9c:84:e2:88:71:01:55:a9:1c:70:
ac:48:4d:61:66:d6:f4:7f:47:e2:e9:5a:8b:1b:84:f8:07:01:
c0:71:de:1f:3a:cf:03:93:96:24:e7:a8:06:61:c8:c7:9c:ea:
3e:d0:db:f3:f7:bd:9f:fc:4d:dd:fc:2d:91:d2:1e:51:fc:55:
4f:1a:ae:9f:30:a9:08:a1:9c:2f:a4:e8:02:00:63:5c:3d:1d:
b1:83:ca:ba:13:a0:ad:98:d0:ac:9a:bb:f2:df:16:fd:90:89:
1d:50:94:93:6f:8b:f4:e9:00:cc:e6:5e:dd:43:62:c9:98:db:
fa:e6:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:41 2025 by rpki-client