Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File: xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier: pMa1R73zcQ1laJAIs4CAQqv29BNAEtfvRTdbpF7j+CA=
Subject key identifier: E1:15:7E:A2:C0:45:CF:AA:09:FB:77:04:B2:A4:22:64:95:56:D8:2F
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial: 0198D705C3114193CFA783445C872CD972AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number: 14D4
Signing time: Sat 23 Aug 2025 13:02:15 +0000
Manifest this update: Sat 23 Aug 2025 13:02:15 +0000
Manifest next update: Sun 24 Aug 2025 13:02:15 +0000
Files and hashes: 1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=)
2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: L+DdxvUGzZ4szKoZDfXCM7YG1VKWbWz9DWcbfOK6xzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c3:11:41:93:cf:a7:83:44:5c:87:2c:d9:72:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Validity
Not Before: Aug 23 13:02:15 2025 GMT
Not After : Aug 24 13:02:15 2025 GMT
Subject: CN=e1157ea2c045cfaa09fb7704b2a422649556d82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:f6:99:23:c7:68:7c:aa:61:a7:79:a6:55:
7d:eb:89:cd:6e:b9:39:73:c2:7b:88:2d:90:e8:2e:
fa:28:22:2e:42:80:f6:55:77:a9:25:67:1f:cf:b4:
ba:d2:e0:d8:c2:26:fe:b6:7f:b8:36:2e:d7:64:ab:
52:64:71:ed:7d:66:86:63:b5:b7:f6:6b:ab:c0:f0:
59:c5:83:6f:43:d1:99:b7:9e:05:5f:ed:89:5c:2d:
9b:7b:b5:96:5d:53:3d:7d:55:c8:d0:7b:39:01:f1:
12:fc:bc:df:15:b2:49:01:39:91:fd:fd:a5:ae:c1:
04:7f:4b:01:c3:da:e2:57:73:a6:79:48:28:12:63:
10:ca:43:89:56:e2:e5:5c:4c:8a:c5:50:d7:c4:29:
12:93:2b:3a:9a:a5:16:d2:89:de:a4:f9:87:a5:68:
bc:f2:c1:d0:d7:15:e2:b8:3a:82:0a:4f:97:20:77:
49:42:f9:29:c4:59:61:5a:1d:54:15:9a:9e:c2:99:
47:49:e5:6c:d6:a6:3e:e0:b6:10:3e:f0:f4:76:35:
90:bb:52:a3:0e:a0:a0:60:59:a6:c1:9b:30:f0:f3:
65:5b:1c:84:ea:dc:8d:3b:72:c4:0f:9f:a4:53:d9:
e8:25:12:47:7a:28:e1:58:97:d5:7f:16:af:d9:1c:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:7E:A2:C0:45:CF:AA:09:FB:77:04:B2:A4:22:64:95:56:D8:2F
X509v3 Authority Key Identifier:
keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:35:2c:83:72:ae:28:d1:ad:1c:97:dc:db:38:db:5d:e0:
47:36:ee:a9:1a:da:ba:20:dd:62:97:c6:da:97:d0:a4:68:1d:
52:4d:89:ec:ae:67:ca:8b:da:53:fb:f1:87:ea:8f:19:8d:be:
6c:8e:5a:85:10:0a:e6:cc:5a:4a:4a:24:aa:ef:d5:4d:5d:b4:
8c:cf:fc:67:fb:c4:c5:a9:24:2f:92:b5:10:3a:d3:81:97:b7:
84:57:96:72:c9:a1:a4:e5:41:01:fa:bc:a0:26:b3:eb:c0:6d:
19:24:63:07:d3:b0:78:13:41:6e:5f:95:ea:c6:35:d3:76:a4:
c9:b0:74:32:37:d2:ab:f8:52:96:58:06:0c:d8:b9:5a:31:73:
19:e0:a3:04:5f:4a:b9:0c:df:22:56:4a:e8:5a:a9:9e:3e:a2:
d1:20:ba:f5:10:ed:bf:4c:be:75:17:a5:54:9b:da:cc:25:3b:
ca:31:f9:25:60:73:a5:a9:89:b8:1f:a6:7c:7c:ec:ce:b2:a3:
a2:c2:35:58:1a:c0:41:d2:cd:72:7e:45:44:2c:57:19:c1:5a:
a0:82:69:8f:e7:d0:38:a5:91:2e:d0:4f:97:4e:ad:56:1f:84:
c7:95:d8:b5:85:e4:a9:72:42:26:c8:e9:ab:ae:f2:5e:d9:29:
75:d0:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:31 2025 by rpki-client