Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: 4KuI8kUzVKACGqsDYcznCmgWSXnL2mNOQyhd5tIgjUo=
Subject key identifier: 9F:43:DE:51:F1:48:AB:E7:7B:13:05:BD:85:3F:C7:CD:6B:AF:E0:99
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0198D705CED506E8A0F37467B22737FF4A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 13:02:18 +0000
Manifest this update: Sat 23 Aug 2025 13:02:18 +0000
Manifest next update: Sun 24 Aug 2025 13:02:18 +0000
Files and hashes: 1: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (hash: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: urK9cNTBAsMIOK9JnOHqxMxNWtWE0NO6211gDKAYn+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ce:d5:06:e8:a0:f3:74:67:b2:27:37:ff:4a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Aug 23 13:02:18 2025 GMT
Not After : Aug 24 13:02:18 2025 GMT
Subject: CN=9f43de51f148abe77b1305bd853fc7cd6bafe099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:aa:1b:0e:f4:b2:de:46:ad:43:f6:ab:a0:
73:af:cb:d3:6a:c6:6a:dc:ee:cf:d0:4c:ed:fe:5b:
99:2c:e1:ff:9b:07:de:98:cc:4a:d5:b0:27:41:96:
6a:95:16:9e:08:2e:19:b9:c2:5a:ef:3e:6c:53:56:
90:02:65:4a:4d:fb:a6:95:92:a4:7c:ee:0b:de:d7:
3f:85:2d:85:2c:87:4d:71:23:e0:7e:ed:93:7b:41:
52:ef:f3:21:73:36:fb:78:9d:56:36:8b:39:69:7c:
90:fe:d7:ed:19:88:b1:15:e1:f7:e2:58:79:b7:14:
e6:b7:a9:cd:c6:39:04:b6:ae:7f:d0:18:e4:3a:d4:
36:fc:d6:0a:f7:2b:7a:7a:9a:ae:36:9b:24:94:90:
24:24:68:df:7e:25:3c:85:07:9b:1a:1c:d0:7a:dd:
bd:2a:27:6f:d2:ca:4e:b6:46:0f:8e:b5:a7:a2:1a:
ee:91:bd:2f:d0:89:ec:b5:b9:71:69:02:4e:c5:ac:
e7:64:40:98:11:af:da:f1:57:64:98:c1:6c:8b:64:
a8:88:b7:0e:38:ec:f9:02:fc:fa:a4:d0:b1:35:75:
34:92:44:ee:a3:fe:fe:f4:1f:4d:0f:2d:1a:27:95:
2f:ce:55:94:af:20:e2:6d:0f:fe:52:fe:46:20:7b:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:DE:51:F1:48:AB:E7:7B:13:05:BD:85:3F:C7:CD:6B:AF:E0:99
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fc:3d:6d:4a:7c:ba:cb:2d:aa:21:ba:59:87:42:b8:0b:12:
bd:5a:ab:07:be:b3:8f:39:2f:30:65:30:5c:79:7c:1b:25:a7:
52:53:c7:26:cc:8c:64:25:1d:f8:23:0f:7f:ea:0c:4d:80:69:
c2:6b:2a:cf:53:ca:5b:19:42:15:67:b7:06:d5:ef:50:c6:90:
87:3e:28:85:fe:7d:66:9a:c7:c8:56:25:bc:c3:fc:5b:b5:3e:
e9:86:3d:85:5e:1d:d2:f1:08:f0:5d:7b:31:25:52:f6:1a:bb:
34:67:36:0d:ce:a1:74:a9:51:ba:b6:70:73:0b:f5:8e:3f:85:
22:ba:89:ec:9a:30:97:28:e1:2f:a1:16:22:ad:60:b1:15:f2:
e9:66:c5:02:94:0e:44:f6:54:1c:1e:9c:44:33:55:da:6a:de:
7f:f9:cc:98:b7:83:d1:19:7e:82:63:92:b6:d6:3e:ee:3c:20:
35:7d:7f:32:3e:05:c4:e7:3b:e6:63:a9:5a:0f:70:a0:35:95:
ed:57:bf:f8:4e:b8:f8:32:7a:66:2a:c6:77:ba:24:42:d4:a8:
45:6a:34:d6:f3:b0:b6:4b:10:9c:5f:98:d6:fd:49:30:4d:4e:
53:20:49:8e:be:d2:0b:24:01:b0:8b:17:c6:90:e7:88:51:b2:
20:0e:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:49 2025 by rpki-client