Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: yss9XkvwGfkWWMGpYiniLpkjYWuq4i0+pLPT6m7nwT8=
Subject key identifier: C6:78:2D:D7:F5:6B:6A:81:70:FE:E0:F7:20:AE:60:AD:3F:56:D1:9C
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0197CB3A20EBE2F0FDDEBA8E23BCA8199817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 05AC
Signing time: Wed 02 Jul 2025 13:01:13 +0000
Manifest this update: Wed 02 Jul 2025 13:01:13 +0000
Manifest next update: Thu 03 Jul 2025 13:01:13 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: 8uUGMM3GKSZgxJ6AD08621s0KcLE8bnP+ShE/hM9VQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:20:eb:e2:f0:fd:de:ba:8e:23:bc:a8:19:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Jul 2 13:01:13 2025 GMT
Not After : Jul 3 13:01:13 2025 GMT
Subject: CN=c6782dd7f56b6a8170fee0f720ae60ad3f56d19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:a6:2b:1b:6b:b9:01:61:3b:e5:38:6f:a5:
ef:a3:8d:88:cc:17:b0:f3:6a:cc:46:da:c1:51:13:
11:7f:e1:a2:c2:cb:a2:1f:20:22:b5:f3:24:6c:98:
cc:3a:8a:88:92:b7:c6:cc:8c:e6:72:c0:5f:f6:c5:
8b:9e:df:57:79:bb:a9:10:2a:9f:8d:81:9e:81:9e:
4c:50:59:42:ce:c8:04:d5:38:ea:f5:14:3c:dd:cd:
eb:c6:56:50:c3:0e:ba:df:75:cf:87:45:b4:fd:2f:
4b:d4:fe:21:18:56:d3:76:ad:3e:56:3d:c0:ce:6a:
ff:b0:4e:98:1c:49:4c:c8:ae:3d:3f:2d:d9:2e:eb:
d2:ef:a9:31:5a:c9:5f:67:6c:40:6e:03:9a:90:4f:
b9:c7:4a:9a:67:9e:9f:96:13:ee:1c:ec:ad:98:14:
0d:44:ee:54:1b:41:3f:73:1d:26:75:9b:df:e0:c2:
9b:8f:db:24:8b:b7:e8:56:73:4d:0d:7b:52:a6:0e:
6b:0b:ba:b1:e2:3a:d3:3a:13:5d:f7:ea:c4:8a:0e:
e5:67:da:96:75:0a:cf:a4:45:13:49:6f:91:fc:24:
ba:a4:45:a6:c3:c4:13:1c:33:6b:6d:60:73:6a:f1:
19:4b:7c:76:03:f2:9b:5f:5d:ad:88:2b:7a:d4:f0:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:78:2D:D7:F5:6B:6A:81:70:FE:E0:F7:20:AE:60:AD:3F:56:D1:9C
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9c:fb:ad:41:e9:a7:c0:84:c9:41:1a:dc:22:97:7e:8e:d2:
51:84:b3:7c:70:51:c7:37:44:80:90:7c:12:b3:de:d4:08:35:
94:c5:da:d9:d6:2d:d9:00:3f:ed:8c:72:03:1e:44:d3:e0:20:
32:bf:0b:a9:3c:7d:75:df:2c:c9:46:85:61:23:ab:b5:dd:e5:
7b:65:8d:37:52:b1:61:8e:82:7a:e4:83:3e:98:77:29:65:2c:
e5:79:22:97:fb:f6:5e:1f:cf:80:ba:1b:ae:8c:e1:63:76:65:
15:4f:44:46:5b:e3:a8:d6:ca:78:63:ed:d2:4c:4c:09:7c:dc:
cd:f7:e3:8e:db:8c:01:73:91:ba:e4:24:3c:65:19:9d:8c:bc:
c7:41:32:c1:24:1d:2d:e4:1f:aa:56:0e:96:37:37:99:74:d1:
6f:94:09:b2:e7:88:2c:50:e7:0f:34:7f:bd:0b:e7:6a:20:16:
d0:7f:e0:13:d0:38:25:79:a8:17:fb:30:10:c3:14:32:06:c6:
6c:96:1a:76:99:50:18:24:cf:02:81:0a:fd:99:f5:aa:a8:b8:
b6:a9:6f:94:46:69:f7:18:25:38:a1:a3:72:c9:73:b6:94:ae:
73:a5:28:3a:d2:04:f1:57:54:aa:7d:30:8c:00:5e:d9:b7:e3:
cd:69:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:51 2025 by rpki-client