Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: B6vzFdNOoomVHfPG8SHFF1cOv3mxAR1uZlaOs3TXETo=
Subject key identifier: CC:7D:63:20:6E:0A:F3:9F:5C:FD:4E:01:02:86:1A:B7:FB:54:AE:8F
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 0198D4DFCD2A014C1C67ABE0598B1A655D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 40
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: tFNtCro51fTE4aburmAq2IcA6fOPZZu49FTNxYHVCwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cd:2a:01:4c:1c:67:ab:e0:59:8b:1a:65:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=cc7d63206e0af39f5cfd4e0102861ab7fb54ae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:46:5f:ae:6e:55:6e:cb:95:dd:f8:72:65:
a3:2a:7c:71:18:49:58:17:6e:2f:13:2f:f2:43:2c:
71:d7:42:8e:9a:97:15:07:5a:a2:32:6d:30:6b:cf:
53:38:0b:c1:01:8b:2c:06:5c:9c:be:bc:09:a8:57:
92:1f:72:be:a8:1b:9d:f3:56:f6:f6:03:57:35:7b:
ed:8d:e6:c9:5a:85:0d:23:da:fc:c9:66:36:40:e3:
fc:9d:6f:ed:d6:01:0e:ed:92:d7:8d:af:35:53:df:
97:4b:f3:7f:54:7d:39:cd:c8:31:78:63:d1:51:53:
31:a7:cb:0b:91:ae:54:5f:9e:85:ca:77:f0:52:8c:
b6:96:d5:46:08:e2:74:09:ac:c8:25:b1:96:79:ea:
9c:dc:38:a5:99:db:8b:e0:97:ae:93:11:00:e8:e3:
65:d5:b9:d8:89:3c:f4:23:14:82:d2:ba:ba:e1:4f:
a3:43:9a:3e:eb:7e:f0:03:b9:2a:16:e2:1b:bf:38:
67:d8:15:12:0b:a7:8a:65:01:37:19:ab:07:0e:1e:
b6:44:06:38:f8:7c:79:b6:ff:a0:e7:16:c7:a7:b5:
47:a9:65:b4:64:f3:c5:82:2b:98:da:e8:9b:41:1e:
0f:12:46:dd:f3:6c:42:6e:9c:fc:8c:bb:fd:a2:38:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:63:20:6E:0A:F3:9F:5C:FD:4E:01:02:86:1A:B7:FB:54:AE:8F
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:fa:9a:a6:f5:79:14:76:00:69:c6:e8:4a:32:e5:7f:e8:
86:9c:2c:93:89:a9:2a:87:42:9e:af:ff:6d:c5:a1:11:69:e3:
4a:20:3a:6e:6c:7f:5c:33:4c:c3:47:b6:b9:e3:21:56:2c:db:
86:f0:20:2a:54:34:b7:e1:28:c6:03:6d:12:bd:6a:00:28:37:
f8:af:ef:77:97:de:eb:7d:dc:ea:07:14:43:ac:20:80:45:8d:
18:c9:f7:8b:eb:60:6e:80:86:6a:84:5f:87:35:f0:5b:19:93:
d1:b9:81:f1:aa:ee:1c:37:db:60:47:b1:d9:e5:a8:7b:63:b5:
f5:03:5b:e6:5f:db:e7:79:7c:84:9a:66:cc:6b:80:d1:1d:85:
be:b2:94:cb:00:b9:22:87:ab:8b:f5:38:a5:de:90:ea:ee:b3:
14:45:6d:a0:24:ea:55:51:2d:68:b9:73:80:6c:b5:00:6f:2c:
79:6b:b2:59:7b:bb:ed:d7:ca:80:8d:81:bf:ff:72:85:c4:6a:
f2:61:3f:ac:e7:ba:f8:39:41:27:ed:17:86:46:aa:aa:1b:75:
ff:9a:be:b7:25:62:e6:79:07:ab:4d:26:48:8d:d9:7a:a8:f9:
0a:55:3b:b9:d9:33:80:cb:ab:97:5c:ce:17:79:7e:0c:d7:e3:
c3:3b:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:23 2025 by rpki-client