Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: SpHJx/sn/noSG8/m1sXPpvFbiYtz39MnCnUHVedeKJI=
Subject key identifier: 15:14:56:8F:91:D5:13:53:88:01:0B:15:36:CC:19:2D:1B:EB:8E:ED
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 0198D65FA85B272FED262293BB20734DC3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 15AC
Signing time: Sat 23 Aug 2025 10:00:49 +0000
Manifest this update: Sat 23 Aug 2025 10:00:49 +0000
Manifest next update: Sun 24 Aug 2025 10:00:49 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: Eaza/1OZ3M83KFc+AErCo2DXXge/vha9JHBUhvIrXUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a8:5b:27:2f:ed:26:22:93:bb:20:73:4d:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Aug 23 10:00:49 2025 GMT
Not After : Aug 24 10:00:49 2025 GMT
Subject: CN=1514568f91d5135388010b1536cc192d1beb8eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:ca:24:37:42:c1:00:85:58:15:a5:85:7e:
69:de:e6:89:4b:cf:da:ec:96:9b:9e:db:22:a4:a3:
49:b5:a1:ab:39:ac:ef:8c:b5:10:ab:c2:c6:b3:ae:
65:48:f6:4f:33:4c:b0:65:85:c8:24:98:ac:79:90:
66:b1:45:e7:41:8e:a0:79:9d:a3:5d:38:ce:81:e5:
fd:df:99:2b:00:db:b2:50:32:3d:7f:1c:45:72:ef:
bc:5f:27:db:dc:9c:2d:e1:86:1b:00:f5:3d:21:aa:
5e:4d:96:98:10:c5:2a:08:18:b6:6c:7a:cd:53:14:
04:2e:47:0a:54:e0:9f:94:f0:8a:9d:78:62:ee:7e:
e6:c1:1d:a7:78:50:0f:f4:c8:03:82:e2:a6:59:39:
09:5f:09:6b:f5:3f:07:31:5c:ff:09:56:c9:2a:73:
c6:57:f5:2f:0e:c6:54:58:3d:ad:6c:94:20:5b:eb:
80:bb:2b:2a:0a:19:58:22:74:3b:c9:cf:f0:f1:c9:
ab:d2:ec:0e:fc:1c:fa:6a:c6:1d:f5:f6:f1:df:6f:
d0:75:b0:bb:7a:db:4c:a7:64:f2:75:fe:da:ce:bf:
c5:f6:05:d1:4d:85:ad:22:ba:a5:57:38:2d:43:e3:
10:51:84:61:82:c5:e3:8e:3d:c3:1a:18:04:d5:2f:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:56:8F:91:D5:13:53:88:01:0B:15:36:CC:19:2D:1B:EB:8E:ED
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:66:60:b5:eb:d4:8a:25:8e:bc:fc:c7:f1:eb:e5:53:8e:
3e:7e:ce:c9:25:7e:6e:04:f0:1d:44:ce:0f:ca:85:a0:1e:e5:
d5:19:24:e7:6c:5b:0e:0f:12:9f:f2:f7:e3:3d:3d:10:87:a0:
6f:2a:de:30:df:7c:bd:cf:6a:93:47:e3:59:be:8d:14:98:17:
7b:40:66:fc:65:3b:62:29:f7:41:13:eb:e8:61:3d:cf:ea:0c:
f5:05:e3:be:cd:1d:a1:21:a0:e4:b3:b4:e4:d2:09:09:61:67:
92:1f:04:d1:13:39:6e:33:b1:9f:ce:5c:bc:95:15:a0:0c:c9:
2f:1f:0c:78:f2:95:25:70:3f:6f:81:24:fc:ec:e7:7f:cf:1b:
e9:66:b2:57:c2:44:9c:62:e1:d2:5e:21:87:53:24:2d:f6:f0:
fc:af:9d:07:bd:50:42:a0:66:c9:2a:8b:ac:dd:89:e9:bf:1a:
b9:08:73:6c:18:a2:25:43:d5:7c:86:6a:25:8b:a3:a8:07:b5:
b1:10:03:bc:5f:41:a3:3b:3a:b4:87:ce:31:91:a6:b3:34:9a:
aa:1a:15:4f:c7:46:dc:7e:c6:f8:58:9e:f2:d0:b0:b8:86:2b:
21:4c:4d:d8:1a:6d:fe:55:57:91:c3:42:a4:70:98:3a:e5:d1:
69:e6:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:51 2025 by rpki-client