Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: XO03K1tb4vuIdY+gYIqkic36pfRzUBVc1C08QHVZXwI=
Subject key identifier: 0D:0C:FE:91:5A:1B:49:AF:97:2A:82:38:F4:B8:E5:24:5F:D5:17:2A
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0198D5F11932B2FBE2B330CAD88FFF7FB82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 1568
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: JP0Le1QkQeCxBEnuyygBiNsjVRwvVX219vVhakqMXYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:19:32:b2:fb:e2:b3:30:ca:d8:8f:ff:7f:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=0d0cfe915a1b49af972a8238f4b8e5245fd5172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:e6:5c:f3:10:a1:b1:8d:a0:a3:dd:58:d9:
91:3c:f7:23:d9:7f:00:25:5c:ed:84:1c:bc:c3:47:
99:14:11:34:90:f9:a9:0d:b2:01:21:99:a2:4c:9c:
aa:50:72:9f:51:30:69:ba:f0:41:fe:54:99:26:a6:
09:b0:a3:4d:28:be:ef:18:d1:25:ef:33:7d:90:24:
ab:20:4f:2e:9e:50:7e:71:5e:7a:fc:64:ba:54:e3:
2e:21:73:b6:b5:ed:52:3c:35:84:ed:b9:26:e7:76:
7a:eb:26:1d:74:d5:76:c0:09:57:f7:cd:a7:27:20:
c0:62:72:63:7a:30:3f:43:58:24:28:12:f7:d0:e5:
7c:30:73:96:cf:97:f4:fb:5b:dc:eb:15:06:da:95:
2c:5b:17:ce:32:18:b1:1e:e0:09:71:60:dd:25:ed:
9f:63:ec:c6:ab:81:2f:44:ed:30:00:60:07:2b:a6:
4a:00:83:33:4c:ba:41:aa:a3:c3:f5:4f:c0:53:82:
11:dc:8b:36:48:63:34:b5:9a:d0:32:02:49:8b:6a:
8c:5e:ee:1c:95:43:a2:38:b7:d0:c1:97:12:51:74:
b9:57:98:e1:66:89:3c:26:e3:f3:56:da:8e:cf:b1:
02:3d:7b:8e:23:ce:49:d3:c0:b8:fb:b7:79:11:01:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:FE:91:5A:1B:49:AF:97:2A:82:38:F4:B8:E5:24:5F:D5:17:2A
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:11:9c:c3:e8:17:e1:5d:32:30:f7:84:1a:8f:79:6b:ca:
f8:09:66:09:9d:77:7d:49:2c:2c:28:88:01:15:d3:3e:96:ae:
f5:49:49:35:b5:8b:ac:f5:b4:e0:bb:3f:46:34:9f:77:bb:d6:
75:31:9b:27:75:11:b2:63:e7:18:2e:e4:41:26:23:9e:8b:12:
38:3e:95:6d:92:72:34:a9:af:8b:d7:eb:f4:b7:7a:8e:ee:dd:
26:d3:22:aa:fd:e8:83:1a:61:36:fb:95:5a:12:7d:db:69:29:
66:81:e7:2d:88:e2:c5:a7:b0:f7:7d:b5:b2:31:81:e6:52:8c:
aa:5b:10:d6:92:dd:e1:0f:a3:68:c8:08:bf:ba:e6:0f:47:67:
79:66:70:1e:63:62:79:53:14:f9:e5:e8:d9:1f:5e:fa:1e:fd:
a3:d0:b0:4f:38:92:d9:f1:47:1b:5b:45:55:36:ae:a8:f9:f1:
3e:0a:c4:2b:21:21:e0:6e:fa:e7:ab:57:8e:f0:f0:96:4c:90:
e7:4f:2e:fe:4c:bc:a9:48:05:e4:4d:b7:e0:48:ac:94:e4:63:
99:ad:74:bd:00:47:9d:1b:37:c2:0e:ab:9e:27:b6:35:cb:d0:
8e:87:54:35:73:6b:17:20:08:25:38:9c:ef:58:87:d2:2d:79:
e2:be:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:12 2025 by rpki-client