Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: 4s3q8hrjhhMJQZt37UGhVK5ctSsUkAkMKmgp9cUQEpw=
Subject key identifier: 11:63:FA:FA:B1:8C:A9:52:29:2E:16:BF:62:F1:35:90:AC:1E:ED:CE
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 0198D6CD24117FF7D7731A402723D66A8D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: esKn/O0qH1HCSIdYWUMqOa0pjQCKTP0QgR26rRErVZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:24:11:7f:f7:d7:73:1a:40:27:23:d6:6a:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=1163fafab18ca952292e16bf62f13590ac1eedce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:a6:df:14:9c:46:ef:86:84:3a:ea:52:76:
36:6c:07:4f:6f:48:e5:e8:75:4c:5e:d4:04:8e:1c:
6f:c1:47:86:f3:74:c0:08:43:29:5a:8b:b6:cf:ee:
5d:6d:03:cb:40:e1:52:c1:1b:68:e8:06:f9:06:48:
a9:fc:28:84:09:e0:b8:f4:e0:57:3b:85:64:e2:71:
40:bc:06:6f:a7:32:3b:3d:14:81:ec:6e:84:e1:67:
76:3c:ff:e2:13:85:54:90:5f:b1:8e:72:b9:46:47:
bd:51:8f:93:53:19:c4:d6:21:bb:e7:92:aa:04:a2:
c6:09:7a:32:84:c8:cd:88:0a:33:38:44:b2:fb:12:
53:7d:02:38:9f:7a:75:3a:cf:63:dd:4f:0c:6f:58:
8e:c0:83:87:76:54:b7:ea:2a:73:0f:5c:f7:7f:ff:
5d:a7:2e:6c:a6:40:3f:a6:bc:ff:5a:c5:0e:69:17:
54:c2:45:68:9d:cf:ff:dd:3e:23:df:3b:85:a7:94:
f9:d4:bf:33:ff:ec:4b:88:7c:29:81:32:78:e7:e1:
21:79:0f:01:34:4b:ea:0c:91:16:60:e7:3e:70:f7:
f2:9b:e7:44:2b:4a:0e:06:a3:43:d7:cd:fa:48:7e:
9d:e1:cd:9d:21:a1:13:71:9a:45:96:29:92:f3:3f:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:FA:FA:B1:8C:A9:52:29:2E:16:BF:62:F1:35:90:AC:1E:ED:CE
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:26:ee:2c:09:ea:29:db:d5:67:0f:af:02:30:28:a8:38:
fc:d8:8c:8a:2d:22:21:8a:b0:96:5a:38:3e:16:8d:ec:b2:c5:
44:de:e2:fa:4f:1e:5a:98:66:1e:5a:d3:67:20:50:ac:fb:42:
b4:1c:5e:be:3e:e6:db:e9:de:8e:72:90:d9:04:30:cd:f0:8b:
1f:42:1d:8c:f2:1e:38:85:76:51:59:53:9c:ec:95:81:2d:fe:
d8:70:b8:a1:ea:15:f4:6f:38:1a:41:46:52:f7:f0:75:30:88:
a3:af:15:13:bf:fd:12:5e:75:c0:c3:ae:3f:f0:27:2b:b1:3e:
61:cf:c2:d6:24:97:1e:6b:b6:a2:dd:e2:e4:ae:06:38:6e:e3:
6e:aa:36:21:c7:47:1a:9c:66:ae:63:8f:33:a5:c2:e0:90:36:
bf:b6:04:35:09:a4:ca:f5:8a:c7:45:1f:15:5f:0d:00:45:7d:
04:7f:8b:c7:37:9c:97:e7:bf:be:54:3c:3b:6a:71:4e:69:32:
c9:bf:77:8e:d0:46:d8:3c:8f:d3:0b:93:89:0d:fc:40:62:4c:
4e:36:c6:68:4f:bc:8e:e6:e9:7a:0d:2f:e8:5f:3e:62:5f:33:
4f:a8:0c:c7:b5:4d:0d:64:a7:02:f4:2b:cc:85:e6:fe:87:19:
04:df:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:05 2025 by rpki-client