Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: /FZRocMQJfxNXj59+Xj7c8oXcAJrfep8Gq95frxWE5c=
Subject key identifier: DD:0E:9D:51:E6:75:93:A1:D7:1C:82:51:4A:EC:25:B3:E9:EC:76:31
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 0198D73AE1401E05A2CAF25FF2846710CCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 0411
Signing time: Sat 23 Aug 2025 14:00:16 +0000
Manifest this update: Sat 23 Aug 2025 14:00:16 +0000
Manifest next update: Sun 24 Aug 2025 14:00:16 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: 9pwK3KXO+oBGGX0GApsWiRuQ69itrZpWcW/7V29id2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e1:40:1e:05:a2:ca:f2:5f:f2:84:67:10:cc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Aug 23 14:00:16 2025 GMT
Not After : Aug 24 14:00:16 2025 GMT
Subject: CN=dd0e9d51e67593a1d71c82514aec25b3e9ec7631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:d0:71:4e:a8:d0:b5:ae:d3:fb:9a:3e:d5:
7f:f0:ec:b8:6e:97:08:3c:fb:39:58:b3:81:9a:8a:
ed:9a:76:ef:6f:9c:26:1c:a7:4c:d4:c3:8b:56:63:
f0:c6:e4:47:2d:3a:d9:85:98:59:db:bd:11:1f:71:
38:34:e5:32:83:69:54:ee:47:21:b1:19:be:c2:76:
b4:49:ee:ff:ab:d7:33:a3:c7:db:db:df:90:25:50:
33:b4:6b:e2:80:06:92:b2:8e:70:1d:10:3d:a0:83:
e6:21:18:78:c3:41:39:05:4a:2f:ab:98:da:66:c4:
42:3d:8c:40:f5:d9:0f:2b:05:bf:28:53:8f:35:d9:
a2:d6:3a:ff:cd:98:66:01:a4:0f:d8:28:ff:d4:d1:
d8:14:5e:6f:30:3e:8f:71:1e:2b:69:db:45:ef:0e:
dc:92:15:5d:20:86:0e:30:43:ab:93:ac:99:82:de:
b7:b2:40:23:25:f8:6a:97:5a:f5:a8:23:d7:35:b7:
99:de:f3:10:b2:01:43:f4:fe:7d:99:54:36:3e:0c:
61:d7:e4:5a:c3:44:3c:f3:2e:31:9c:22:e3:e3:4a:
49:cb:d6:0f:d3:7e:fa:19:ab:54:fc:8f:c3:71:13:
43:1f:b2:83:59:88:ad:2d:cd:4e:b6:da:2f:d6:10:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:9D:51:E6:75:93:A1:D7:1C:82:51:4A:EC:25:B3:E9:EC:76:31
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:ef:33:d3:05:84:61:0b:55:42:61:fa:a5:22:47:c0:41:
e7:61:cb:a2:d9:c3:a0:92:42:dd:5b:d2:63:d4:e2:ba:90:38:
6a:d6:fd:0d:74:27:7a:56:4c:92:a4:67:24:47:46:6d:76:86:
ce:80:85:a1:18:11:22:75:25:c3:85:e8:1b:88:c0:dc:1a:f1:
53:5b:05:5b:86:b1:d2:ae:4f:dc:dd:6f:97:e4:84:98:f8:53:
c5:43:50:09:1a:98:0b:29:30:f8:57:40:7a:47:1d:80:bb:5d:
08:1f:af:8b:33:40:9c:32:1c:df:96:42:b3:2e:12:db:a4:d8:
c8:11:27:9f:eb:74:31:77:c1:af:d1:b3:5a:2c:27:b1:f6:e2:
d0:ac:54:83:57:7c:31:82:45:d8:2e:c8:87:fc:56:85:60:bd:
99:d0:4c:36:b7:e1:fe:e7:fc:cc:85:61:38:3c:2f:21:eb:48:
2d:32:10:03:30:ad:d9:f9:ab:19:8c:d6:71:d0:4d:12:51:d6:
86:6e:ab:8f:67:95:c9:a7:1e:78:56:d6:05:be:86:78:d0:e2:
6d:be:a0:cc:8c:22:89:12:0d:0b:75:96:17:3e:10:1e:e4:cd:
b9:e0:d9:6a:52:c8:39:44:f9:b9:04:3a:05:5e:27:92:b2:c7:
69:29:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:56 2025 by rpki-client