Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: nXzo1I427Eu+SrjMXDt5OCu7vP8RsOzDNek4NO32C/k=
Subject key identifier: 3F:6D:4D:9F:09:05:48:DD:1B:70:A1:DC:63:66:F9:A1:66:E2:BF:88
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 0198D4A7F9743F057C8978FD9BFA9DE43112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 032F
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: cHl7A/iMHveR3sYDnMqyEISqVV54YRlk+dK1ilBOZD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f9:74:3f:05:7c:89:78:fd:9b:fa:9d:e4:31:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=3f6d4d9f090548dd1b70a1dc6366f9a166e2bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:68:2d:65:bb:ad:81:7e:b8:3d:cd:3b:04:
bc:27:e5:82:03:7e:0d:9d:0e:fe:5c:5d:a8:4e:65:
da:98:ff:7a:26:36:02:2a:3c:c2:35:56:a1:83:49:
7b:33:d2:75:0d:eb:e9:12:c3:a0:c8:0c:71:42:b7:
c2:38:5b:ca:26:c8:cb:dd:2b:e4:36:35:bf:95:dc:
49:96:5c:3b:27:fa:28:06:03:17:c4:bc:3f:63:ec:
fe:6e:d3:d2:3d:a6:36:be:c6:c0:9b:17:17:cf:ee:
50:bb:23:69:3b:61:db:e8:73:74:ec:2b:75:93:1e:
ce:be:fc:e8:b7:98:46:19:69:bd:af:d7:03:5c:66:
82:a3:96:7c:32:c7:69:78:a1:35:16:7a:eb:a8:e3:
f0:7b:35:4d:7c:36:44:5a:0c:71:91:f6:0e:67:b6:
74:47:8d:84:fb:dd:d4:e8:d4:3d:b1:ce:e0:ac:58:
96:f7:fe:5e:f9:fd:b4:39:e0:7d:57:1e:49:5e:27:
fd:fc:4f:88:21:5e:36:54:fc:ca:d7:10:43:e7:06:
f2:86:cc:ab:71:22:ae:d5:a5:ca:9b:15:3e:7d:70:
4f:86:4a:c1:a8:68:3a:31:94:e6:7b:e5:df:58:36:
37:de:d1:c5:c2:b5:08:b3:49:83:55:f5:94:4c:c7:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:4D:9F:09:05:48:DD:1B:70:A1:DC:63:66:F9:A1:66:E2:BF:88
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:65:15:4f:84:69:30:5a:18:b5:ee:f0:70:60:de:17:6e:
30:cb:10:45:42:7a:e1:1e:54:33:3b:d4:89:c6:75:35:86:aa:
d9:e1:f8:7e:28:39:ce:5d:ed:16:15:20:9e:89:a4:4b:69:b3:
d2:ac:14:99:9e:2d:ae:60:64:62:90:47:14:0e:d1:0a:e4:8a:
44:7d:87:3f:41:d6:38:89:3c:82:e2:02:ef:fb:48:e1:1a:92:
ad:f2:b0:5b:77:8e:01:90:7c:48:ca:69:d0:9d:f9:a6:d6:62:
0b:57:99:e3:54:2d:b6:2d:d5:80:c5:73:00:d2:5a:7b:37:00:
1e:de:61:ec:f2:b0:58:1a:a7:2c:30:0b:b9:4b:5c:25:b1:11:
d0:65:5a:80:d1:eb:da:92:62:d6:ae:70:68:bb:d5:32:d8:8d:
2f:09:f0:95:fa:2c:60:c2:cd:4c:a2:57:ae:43:05:4c:19:dd:
7e:1b:df:dc:ed:99:d8:0b:41:db:ff:2f:5f:33:ff:d7:72:70:
97:67:98:a7:d4:ca:54:f7:52:5a:87:b4:fb:e6:1c:6b:2a:25:
4e:3b:6e:d9:d8:ea:83:b0:c5:ef:b5:ef:9a:fc:1b:3e:a4:df:
98:b6:a2:88:06:5e:4c:95:f0:b0:f9:ef:cf:04:b5:2d:f4:33:
c1:78:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:18 2025 by rpki-client