Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: Tbd1HfmRSGavfupgNLXaTisq1s3nK4mJYJbGVn69xYQ=
Subject key identifier: FD:7F:AF:7A:AD:78:4D:A2:22:89:4B:5F:A9:4B:B8:7A:D4:77:88:7E
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0197B74520C026A194603C2185DB6EDCD668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: 68a0ql+INpdOQKfWM5IZFnd2UyVWhyrV8hSZrs2ranM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:20:c0:26:a1:94:60:3c:21:85:db:6e:dc:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=fd7faf7aad784da222894b5fa94bb87ad477887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e0:f3:98:c5:62:ec:85:a7:61:44:50:33:7a:
6c:b0:9f:54:fe:af:9e:b8:f9:bb:ba:d6:b8:a1:58:
dd:63:7d:da:3b:a8:c8:96:a1:75:53:47:9f:cf:cf:
40:8b:8b:cd:f6:74:cf:33:63:0d:07:5b:ce:25:af:
ab:4e:c0:79:76:6a:84:83:0e:14:c0:73:0d:f5:0e:
8b:32:d4:9e:10:e0:76:a6:f2:29:17:2e:0b:33:60:
7f:38:d8:c6:ac:96:aa:3b:3c:d6:e8:85:a4:91:2a:
94:f8:9d:bc:90:10:28:d3:5a:e2:18:90:e3:4b:d1:
3e:bc:21:45:93:74:5d:d4:d4:5c:f0:f9:08:15:b2:
58:bc:10:54:45:8b:ba:73:a5:4a:69:8f:85:10:a3:
d8:45:c8:48:c7:64:3d:6d:d8:d8:c8:97:c7:12:71:
8d:41:f5:6e:97:49:63:0c:11:a9:c3:2e:04:e3:9b:
5b:c9:ed:f4:29:62:5e:d1:2a:46:a3:63:4c:13:01:
36:87:20:a6:68:c2:51:5f:b7:47:b8:65:db:99:60:
77:85:fd:01:d1:99:2b:4e:52:aa:84:c2:a5:f4:67:
22:8b:9b:ad:53:74:6e:02:71:fe:5d:09:d8:b5:65:
86:60:6f:56:44:19:da:55:23:20:84:ad:71:7d:2f:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:AF:7A:AD:78:4D:A2:22:89:4B:5F:A9:4B:B8:7A:D4:77:88:7E
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:b3:d8:bd:61:ba:2e:25:c7:c4:87:89:a8:4c:b7:6c:6f:
15:94:0c:1e:3f:52:67:cb:4b:3f:57:77:19:fc:d5:ce:f0:2b:
e7:80:aa:62:74:0d:15:af:bd:fe:03:fb:df:55:f1:38:26:04:
0e:81:f8:d6:80:09:a0:4e:43:c3:1c:4b:ef:a5:ae:cc:ac:2e:
86:9d:d0:a9:46:0b:42:2b:6f:80:55:62:d7:24:f2:77:1f:e6:
e2:a8:a8:1a:6c:b0:0b:c2:60:30:10:51:d7:9a:f7:c4:68:60:
7d:7e:8b:49:4c:93:a3:e3:7e:1a:c5:2e:55:bb:bf:32:51:1b:
57:ac:db:d8:2d:0c:bc:b9:a9:1b:b4:1b:ea:33:6e:7c:78:47:
15:53:df:c1:ef:8c:38:97:a4:c8:31:dc:c5:56:18:91:28:9a:
96:dc:77:d8:21:7b:e3:b3:01:60:65:0f:07:6a:7e:a8:da:2d:
10:bc:19:0d:ca:55:3a:22:34:50:08:89:ab:50:0d:83:d9:ef:
1b:24:57:fa:32:45:8c:28:55:15:db:93:e1:c6:4d:1a:da:c3:
9c:68:38:bf:79:78:3a:d4:b9:fb:c7:a5:68:dc:87:f5:a4:df:
8a:24:5d:40:26:d3:b6:3f:29:8f:76:3d:3f:ec:c3:0a:ea:65:
76:3b:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:19 2025 by rpki-client