Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: VFsialLek4QgJQCNBIu3KHnaEx9i27rfv7rGrE3JH84=
Subject key identifier: C9:21:C1:BB:75:4F:3B:57:5C:37:B0:B0:64:25:66:3A:F4:21:FB:C6
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 0197B8C5D30F99A07CA7371D4B44EC164961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 23:01:01 +0000
Manifest this update: Sat 28 Jun 2025 23:01:01 +0000
Manifest next update: Sun 29 Jun 2025 23:01:01 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: mr9amD9eSZ2QTf4Yw7ElXkZcZQazKlpJqDBWyiTLTvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d3:0f:99:a0:7c:a7:37:1d:4b:44:ec:16:49:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jun 28 23:01:01 2025 GMT
Not After : Jun 29 23:01:01 2025 GMT
Subject: CN=c921c1bb754f3b575c37b0b06425663af421fbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:c6:fe:90:d7:c7:ef:21:26:58:70:ee:e5:
a3:0d:f8:8d:78:fe:3d:66:10:78:4b:56:50:1c:e1:
14:d5:09:27:f5:f3:b1:0d:25:6e:b6:b5:20:73:2e:
4a:b4:09:69:92:70:80:06:d8:f7:54:ea:33:43:20:
db:f0:8a:e8:30:f7:c7:fb:a7:3d:52:78:87:11:a9:
a5:fa:af:57:84:3c:8f:d2:ef:08:4b:ff:25:9a:54:
ee:3d:ed:ef:e5:f9:a2:63:6f:6f:a2:d6:87:04:cc:
cb:45:eb:5c:4b:c1:da:02:cb:c5:40:fa:d4:9e:d2:
eb:a4:35:8d:74:6c:dd:9a:70:c0:36:b2:30:13:c7:
d7:37:8d:53:be:e0:d1:d3:79:28:dd:b0:40:fe:d1:
b1:9f:88:a3:76:b7:3a:4c:25:aa:24:bc:9d:01:45:
54:fb:c8:d0:9d:19:2f:b5:c1:02:51:30:3f:6e:7b:
fe:32:62:fc:b4:ba:55:6b:69:d6:74:a8:ac:d3:9c:
90:d4:d4:28:67:30:b2:76:2d:88:f1:e1:e6:b3:0f:
9a:9c:3e:db:82:10:16:d7:a4:ff:8c:50:77:a3:70:
df:6d:e9:6b:5b:63:9f:56:a7:90:61:29:3e:ba:31:
1b:ea:fc:6d:78:b5:13:1c:ba:66:6c:4f:c6:92:6a:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:C1:BB:75:4F:3B:57:5C:37:B0:B0:64:25:66:3A:F4:21:FB:C6
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:06:3c:99:0a:ad:9e:eb:b6:47:ee:f5:82:94:56:1c:75:
d1:55:32:14:88:51:b5:42:d6:5e:0f:1f:74:7c:b9:92:50:72:
25:59:b8:15:9e:80:98:35:39:cb:f3:af:12:35:24:9d:bc:42:
b3:13:77:a5:40:56:91:db:5f:f1:4b:7a:1a:68:ef:c5:54:70:
cb:0b:0a:6f:70:95:68:50:04:bb:68:3c:f9:1c:ed:b1:cc:42:
73:87:5d:d2:2a:64:6a:90:49:8b:3b:f7:30:bf:75:33:f2:3d:
c7:fb:b0:f9:04:7a:b2:54:95:ea:c5:da:e4:62:16:dd:93:92:
45:b0:89:98:3b:b1:0c:c9:c4:d3:57:2e:44:19:dd:54:de:73:
92:2f:11:aa:50:10:34:d5:f1:44:09:30:31:98:06:af:5d:7e:
08:cd:66:41:df:ba:46:45:2a:e1:99:6f:f2:be:d3:1b:ff:ad:
d7:e1:73:e1:e2:d7:f2:f5:54:a8:ac:b6:8b:a9:48:e1:67:50:
68:cb:d5:ef:aa:a7:b3:a1:10:5f:21:9e:8a:19:38:47:72:f2:
7e:a6:fc:0b:34:d2:c0:04:13:85:69:42:49:bc:2e:5c:94:98:
46:5a:f8:cf:06:b5:33:67:09:2a:92:d2:15:a6:30:24:e0:c4:
b4:63:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:10:38 2025 by rpki-client