Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: 8OlSzpS2kmhXwPtwA1DW2MKbc2MLiQltpCNxiDEZx1U=
Subject key identifier: 2A:39:86:B2:33:25:8B:36:13:68:E5:0E:30:E0:FC:59:DB:C0:EE:7B
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 0198D583B4B47CAA23816EF3A09FFA4C3AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 07CC
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: 2UQu7ubkn2oMWSDRfhR0NQx0wZMtomt+tmsO1jH4Xk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b4:b4:7c:aa:23:81:6e:f3:a0:9f:fa:4c:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=2a3986b233258b361368e50e30e0fc59dbc0ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:b3:cb:55:32:99:ba:ba:9e:a3:49:78:e6:
34:e3:de:8b:f3:cf:d9:c8:a4:ae:00:ff:a3:de:8e:
90:da:bb:85:9f:b6:32:33:d3:1d:d5:17:be:04:82:
cd:1d:67:13:b5:bf:d0:c8:79:c6:92:a3:80:ce:cd:
3b:cc:d3:a0:13:4f:75:a4:78:23:41:2f:ee:ba:1f:
a1:22:f7:2e:3e:a5:47:cd:54:e7:9c:a9:e9:37:0e:
de:fa:76:72:63:e1:12:72:28:f6:a7:5e:9d:b6:04:
d3:1a:c5:08:e4:89:89:5d:5f:cd:d8:93:78:3c:c7:
68:fd:9f:80:6e:7f:35:8d:7a:9d:3c:08:83:de:b2:
69:ff:82:1f:a3:c8:00:51:28:a1:4d:68:6c:38:a1:
cd:5d:3b:fe:11:9d:3c:44:e6:8f:7d:ed:24:50:fc:
8b:f8:25:44:9d:c7:a6:b7:1b:c3:5d:19:37:c0:5a:
ab:54:3c:bb:1e:4d:14:b8:b2:d7:ba:c4:44:dc:9e:
72:fe:68:12:cd:1a:d6:ee:59:37:1f:36:39:bd:b5:
4c:ea:c5:6d:cb:c6:05:55:b4:55:14:9e:93:40:9c:
c5:02:46:c1:0a:b7:11:4c:47:b9:93:b4:ac:b6:7b:
a2:f1:83:c9:99:5f:c9:be:d8:c9:9a:39:38:4f:95:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:86:B2:33:25:8B:36:13:68:E5:0E:30:E0:FC:59:DB:C0:EE:7B
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:23:73:5d:3a:bb:48:3e:56:fc:0e:15:76:91:9b:fe:60:
3a:1f:24:b8:33:58:5b:43:df:31:f8:9e:db:a7:29:d6:0f:04:
ca:e2:ad:bf:3d:5b:c8:81:45:2f:8f:a5:5a:16:b3:26:fc:ac:
52:38:29:07:44:e8:c3:16:70:3d:9b:31:35:bb:de:7b:8e:ad:
8c:82:fe:3d:0a:c6:1e:d2:a7:44:ff:d0:70:db:1d:7a:d9:87:
4a:d9:81:2c:75:7d:1b:c9:08:fc:30:d0:73:28:bb:20:0f:15:
f6:f0:79:4b:2a:74:54:d8:78:09:5c:3e:99:1b:03:9f:b5:36:
53:80:c0:ac:d0:4e:55:90:00:e0:1e:7e:62:c9:02:5e:ad:39:
c9:3a:19:d2:7e:a8:a4:3e:00:66:ae:9f:51:b8:bd:aa:f0:27:
a0:ff:4e:72:ac:94:46:17:a0:9b:87:c7:01:d9:5d:82:43:54:
94:b5:b7:c4:13:1a:25:a2:7b:3f:26:95:4b:32:06:fe:ba:fc:
65:37:cc:07:2d:98:19:c7:57:2b:09:3e:a8:34:6f:16:57:6d:
88:60:ef:2f:0e:d8:cc:8c:98:4c:5d:62:4c:58:36:9a:8b:6d:
59:7a:53:07:41:24:90:b2:ef:51:7c:4e:9e:c7:64:a8:88:0d:
ac:c6:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:44 2025 by rpki-client