Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: mOpQruWw1aBWyGjPqD2CqDgbz7k0lGdnaQJHRpqbsgU=
Subject key identifier: 29:9A:C1:56:D9:F1:08:1B:46:4D:5A:D5:2E:66:AF:A8:D6:FA:29:47
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0198D583B52BEC1498E655C6451B65C7E238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 15E6
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: dvX/yFG5Di0AAxe7CAst3Fgg4pQ/0WdQPev+l3HHYEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b5:2b:ec:14:98:e6:55:c6:45:1b:65:c7:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=299ac156d9f1081b464d5ad52e66afa8d6fa2947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:5c:2f:25:dd:54:d8:5a:3d:9d:0a:a4:df:
5d:43:b1:42:ee:fa:71:9b:c3:3f:e3:88:eb:53:8a:
1e:d9:ed:f2:68:a8:82:83:3d:5e:1c:54:2b:34:d9:
f6:b7:52:63:9a:b5:b7:c4:e4:c0:97:ad:32:07:9f:
47:ea:77:a9:e6:a7:10:7c:f2:d6:03:6f:b0:e6:ac:
38:15:e9:45:56:99:58:97:5f:86:f8:84:16:bc:25:
24:55:fe:19:c8:41:73:5d:3f:27:2c:b2:fb:00:0d:
05:dc:99:dd:ec:aa:da:66:9f:c9:28:0c:38:23:27:
d5:62:47:64:39:14:b9:1f:f7:d6:82:ff:07:c2:58:
ae:70:f6:fe:a9:61:18:9b:a2:cf:b4:d0:84:24:37:
0b:48:e5:d8:dc:50:cf:c3:48:25:df:ed:3c:62:20:
14:55:cb:7d:47:54:31:c2:c9:70:d5:81:66:a0:13:
20:16:7f:97:d8:97:78:bf:26:16:35:49:b1:f7:b7:
2e:83:92:f8:fc:d5:78:a6:45:6a:8d:d9:ca:2c:51:
67:e0:a1:32:b7:8e:e9:40:9d:88:92:e6:10:62:92:
e3:cd:40:0d:93:f4:99:49:ac:d4:4b:09:11:56:25:
04:81:57:f8:31:60:53:8b:2c:00:ec:df:d2:b7:8b:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:C1:56:D9:F1:08:1B:46:4D:5A:D5:2E:66:AF:A8:D6:FA:29:47
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:df:cb:87:c6:6b:ed:a0:cd:06:0f:2b:f3:ca:d1:70:b8:
a9:c1:e5:19:a4:02:e9:0b:5b:46:f6:61:8c:be:21:54:43:41:
91:f7:40:2b:e3:a2:22:f2:f5:4d:2e:b7:8a:f7:a6:0a:b3:61:
5f:7c:1c:2b:85:c2:fa:5b:39:0d:dc:27:6f:13:0c:f8:ab:90:
28:0e:cc:e5:88:a8:d4:6d:8b:04:62:b4:ce:c1:b9:52:98:89:
06:ce:0e:2f:f7:53:23:ee:95:5f:d6:ee:17:49:6d:7b:2e:d7:
b2:01:32:e2:5d:6d:6f:92:67:9f:0d:5b:96:b6:37:69:96:38:
de:8e:7f:8c:ea:7a:0c:e8:04:de:34:07:ea:09:c7:f5:98:02:
e6:1b:e2:82:f3:4c:67:51:fb:c7:2a:e2:78:87:4c:5e:4d:6e:
da:a9:32:89:08:50:3e:a3:7a:8d:02:90:8e:59:5d:e9:39:d8:
43:ca:7c:06:26:a2:72:31:f7:ec:0d:24:2f:6a:be:9a:b0:34:
8e:8c:53:10:30:d0:7f:3a:73:d4:fb:a6:1a:34:36:51:e2:d5:
db:5a:b0:af:e7:6f:f3:f5:65:ea:bc:e8:86:15:af:8e:33:a9:
ef:76:d8:13:6d:ba:22:4d:be:21:3a:3a:ce:36:6f:ad:c2:e8:
18:7d:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:21 2025 by rpki-client