Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: xxZ9AjHIXtatk3DO9tpmgOVABn5ePRoHRChYBQTqu+w=
Subject key identifier: A9:CA:6E:C9:49:EC:AB:CA:43:48:9C:7B:48:17:CB:96:74:11:04:F5
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 0197BB58C37B569DF9B4FD0C846B522C06AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 0723
Signing time: Sun 29 Jun 2025 11:00:45 +0000
Manifest this update: Sun 29 Jun 2025 11:00:45 +0000
Manifest next update: Mon 30 Jun 2025 11:00:45 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: RcPoKXn1KQQ/FFGt/zPnkcOgTY/4HliITWKHrXtqg98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:c3:7b:56:9d:f9:b4:fd:0c:84:6b:52:2c:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Jun 29 11:00:45 2025 GMT
Not After : Jun 30 11:00:45 2025 GMT
Subject: CN=a9ca6ec949ecabca43489c7b4817cb96741104f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:0e:93:fd:a9:39:8c:9b:32:83:a6:32:09:
3b:09:60:1e:e6:d2:17:32:86:bd:95:a4:db:99:8c:
7f:fd:69:c7:46:0b:03:2a:e8:99:0f:b8:2b:30:12:
24:88:1e:2a:53:5c:6b:18:b0:e2:96:33:7b:a5:62:
ef:1d:0e:59:5a:25:68:20:db:44:51:fd:42:ab:cf:
43:45:ad:fb:94:2b:7e:3d:51:e3:13:2b:48:20:b0:
aa:36:68:6d:33:80:40:8e:b7:0a:2c:63:e5:04:1b:
da:bb:c1:52:e9:66:b4:e1:4b:be:88:71:7d:e9:0e:
7a:73:d9:d2:9f:75:3b:78:58:b1:e5:08:d5:8c:1e:
e4:46:ee:21:3f:59:e7:b1:e2:96:ac:f7:49:7c:74:
4b:8c:8f:53:39:9f:c1:a1:5a:ab:38:24:c7:f7:38:
b1:d7:e3:23:d5:35:90:ca:f4:40:28:76:47:f5:c2:
a9:71:a7:9b:da:4e:55:de:ce:3f:7c:5b:d7:1d:93:
ea:33:61:55:a2:b6:8d:5d:b0:1e:1f:27:0e:52:e3:
0f:88:85:b1:f4:01:8a:4f:f1:8b:d6:fa:5f:39:16:
a6:74:d9:e5:6f:77:cd:48:1f:7f:e3:c0:57:5d:00:
2b:53:96:eb:f6:d6:d9:de:da:3c:b0:09:80:fe:27:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:6E:C9:49:EC:AB:CA:43:48:9C:7B:48:17:CB:96:74:11:04:F5
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:01:32:c5:c3:04:5f:0f:ec:32:6b:18:c2:cd:3a:61:72:71:
78:f5:79:c8:d7:32:ca:9c:62:5e:6b:a6:8d:92:7f:0f:3a:39:
2b:d4:37:4f:c2:06:83:91:b9:d9:14:d8:a4:aa:27:45:05:b7:
1e:e7:c5:cb:02:06:e9:3f:14:52:c6:3b:47:35:5e:8e:45:0f:
f1:56:c7:89:95:18:22:73:55:d8:06:c8:8a:f2:ce:a0:db:fe:
f6:63:69:e5:25:13:4c:c3:b3:97:93:58:14:0f:8f:bf:9e:f1:
e8:aa:cf:26:28:0a:0e:a7:ca:ea:fa:15:5d:0a:59:ac:21:8c:
62:40:a7:e7:85:bd:37:2d:17:8f:db:d5:7a:53:9c:d3:5f:7a:
0f:45:13:f9:22:28:b7:1e:0a:89:f8:c1:34:89:e2:1d:8f:28:
cc:aa:57:8d:a4:85:0d:95:e2:f8:1d:a0:8f:e4:2a:3a:97:81:
3a:4d:3c:3c:70:7b:ef:0b:3c:b4:1c:a1:df:82:fe:74:6a:8b:
6a:bc:ee:22:51:8e:3b:56:09:0d:ab:1b:ee:29:34:4c:8e:6f:
32:93:ed:18:b8:5e:b7:99:ac:ad:bb:02:6a:f2:a7:51:00:ca:
a1:42:87:18:07:42:19:d7:5e:bc:e7:3d:9d:bf:af:42:30:8e:
5d:2c:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:26 2025 by rpki-client