Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: 1sBVC96hLYQJNgC90sWFzDFV59Cm76XGqjHxPyOynh8=
Subject key identifier: FE:B3:EE:E8:CD:58:9A:CD:35:9D:68:48:40:E3:37:B8:CD:C3:E5:50
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0197B9A1BCC1CA1E990E54FD1B4EEC9897B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1553
Signing time: Sun 29 Jun 2025 03:01:13 +0000
Manifest this update: Sun 29 Jun 2025 03:01:13 +0000
Manifest next update: Mon 30 Jun 2025 03:01:13 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: EQredaE/ktTAZfGjmAbEpdt05HovWjfWAqYQx/D74UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:bc:c1:ca:1e:99:0e:54:fd:1b:4e:ec:98:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jun 29 03:01:13 2025 GMT
Not After : Jun 30 03:01:13 2025 GMT
Subject: CN=feb3eee8cd589acd359d684840e337b8cdc3e550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:fa:d7:8e:98:ec:b9:68:c2:d7:ce:91:37:
32:e4:b4:55:7a:c4:46:ed:31:a8:f4:e6:81:15:43:
9b:b7:8e:02:e5:04:0a:be:09:ff:ec:17:66:55:e8:
62:ed:3f:ac:9c:37:7b:63:06:52:ff:88:ef:b6:bd:
ec:9d:aa:05:5f:3d:05:2b:28:06:97:a1:96:c1:1d:
50:92:90:bc:e4:bf:a7:d8:ea:28:53:75:cc:7d:17:
0a:4f:42:bb:15:93:8a:7e:88:ca:90:2a:77:d4:46:
cf:7b:bc:54:be:8e:ec:3f:02:41:db:27:81:21:c2:
e1:4c:3c:fa:be:af:57:a8:6e:09:2c:07:60:5b:8c:
1a:44:41:8e:2e:be:b0:03:d2:f9:c9:8f:49:53:78:
26:6a:70:b6:ac:0c:5f:0d:e4:6c:45:83:c9:7f:a1:
72:e4:71:be:fe:b8:5a:e6:a8:56:cf:2b:67:c7:8d:
6c:88:30:7e:26:32:3c:55:c4:83:6b:08:1d:fc:4a:
ae:12:94:9b:d7:24:f5:f8:a9:35:25:68:a4:e6:f7:
e7:6a:7a:14:33:52:91:c1:fd:ab:da:85:06:7e:7f:
6c:a8:6d:92:d4:a3:9e:19:c9:c8:d9:62:80:d6:3d:
9b:83:5b:ea:7e:3a:42:ea:45:c3:67:50:c2:0f:7e:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:EE:E8:CD:58:9A:CD:35:9D:68:48:40:E3:37:B8:CD:C3:E5:50
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:c3:36:0f:54:c4:aa:9d:47:e9:f1:a6:59:1c:c2:d9:ba:
0e:ae:50:86:fb:27:81:58:21:be:5e:da:c3:9a:29:36:eb:25:
3b:57:dc:61:e9:63:f3:cc:b2:23:92:a3:ba:40:bd:e3:c5:77:
46:81:c1:c7:67:dd:5d:c4:01:79:62:ab:64:b2:4c:93:31:3d:
67:7d:ba:6e:e5:d4:8d:d4:f0:92:37:b0:f5:fd:aa:f5:51:a9:
2b:2b:0e:97:c0:b2:f1:5a:b2:41:69:56:e6:81:38:a5:f6:57:
cb:46:b5:ab:34:eb:28:ee:f4:e1:21:6a:72:ad:a7:15:73:98:
e3:06:62:4a:51:a5:ec:d9:44:23:a4:cd:ea:fa:95:cd:95:64:
f3:29:0b:03:97:a7:32:f7:ad:da:e7:c5:e0:64:a6:8e:bf:6e:
69:3d:03:1a:83:f4:b7:99:bb:6c:eb:be:99:26:4b:9e:31:fa:
85:cf:95:c9:c3:45:ad:d1:0a:d5:f4:1c:06:b8:f2:e1:44:6b:
7a:92:43:ea:66:c0:1d:c4:17:d3:c5:80:14:7d:0f:a2:b2:e4:
1b:c1:e6:00:8c:7c:10:31:4a:d3:f6:97:ae:36:50:f4:a8:31:
c1:29:e8:30:1d:cf:66:75:3b:e3:70:41:9a:d5:fa:f3:aa:ce:
06:4b:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:03 2025 by rpki-client