Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: ggN+2HVUqwS4MdT9g4gygn25fxc/HTrj4ZtwrnW7E4c=
Subject key identifier: 67:CA:2E:0A:5A:49:49:7B:91:7E:C8:77:C2:E8:55:55:03:31:F9:36
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 0198D73AFDB6F763BD9C840F34706E66DEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 07B6
Signing time: Sat 23 Aug 2025 14:00:24 +0000
Manifest this update: Sat 23 Aug 2025 14:00:24 +0000
Manifest next update: Sun 24 Aug 2025 14:00:24 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: zVIHcbSDtgRja4/zNhnZDYRSWARiXZFy5o6HHHj+aVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:fd:b6:f7:63:bd:9c:84:0f:34:70:6e:66:de:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Aug 23 14:00:24 2025 GMT
Not After : Aug 24 14:00:24 2025 GMT
Subject: CN=67ca2e0a5a49497b917ec877c2e855550331f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:f8:0d:d1:fc:8e:22:59:29:e4:42:aa:b2:
d8:8a:c6:fa:54:30:6f:ec:e3:17:2b:79:b0:91:6e:
82:c5:23:ca:49:6c:d0:1a:1d:64:01:80:06:a0:c0:
f8:22:5d:d1:74:b3:fe:25:26:fd:39:78:98:f0:f0:
fc:1e:97:64:7e:71:2d:be:96:9e:14:ad:82:b8:b5:
88:ea:c0:4f:b5:1b:d1:2c:54:11:df:c3:08:89:68:
e6:30:e7:ec:84:6e:88:3a:7f:07:34:b8:90:0a:a3:
52:4b:2a:cd:3d:29:9f:05:45:91:86:64:f0:82:e0:
06:84:f7:fc:ab:b8:ba:e5:77:0e:98:c4:ab:b9:d9:
7a:1d:76:8c:d7:e3:43:3f:95:af:d0:f3:5f:ae:76:
43:56:b0:ea:d7:cc:95:1b:cc:8e:fd:10:9e:67:38:
d3:4a:80:7e:8e:a1:fb:8f:e7:b8:b9:69:74:b9:ca:
24:34:c6:28:76:c7:85:9d:1e:29:ec:b5:c6:9b:2b:
38:de:cc:fe:cd:cf:97:73:b9:eb:5f:97:95:23:f8:
70:dc:ed:5e:ec:64:59:28:6a:d1:a6:83:b1:b9:91:
77:f1:80:18:f7:97:af:66:4b:c6:24:e6:5a:0b:62:
4d:b3:0e:b5:43:d6:70:13:b3:74:b9:3b:c4:78:3b:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:2E:0A:5A:49:49:7B:91:7E:C8:77:C2:E8:55:55:03:31:F9:36
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ad:23:8e:0f:f4:43:06:f9:c6:21:7c:4e:02:e7:48:61:14:
35:2b:91:8a:25:ec:96:81:34:da:64:e5:57:9c:bc:80:61:9d:
d4:aa:66:8f:08:42:85:2c:23:93:55:66:17:99:47:82:84:be:
bf:09:cc:2b:46:02:5d:f5:9d:b3:ff:43:ff:6b:33:ea:06:67:
b4:f6:cd:82:49:f2:c7:ff:6b:94:44:82:19:40:41:28:94:38:
f1:e8:ff:86:de:ea:b1:f0:9a:f3:7f:46:d5:4f:41:cc:d3:4e:
8b:02:55:b6:6f:27:d9:99:34:8c:65:29:33:62:30:2f:89:b8:
7f:cd:6c:61:71:0a:df:a6:2e:7f:78:14:00:1c:01:a9:45:b8:
51:74:fe:a9:72:62:74:f1:a0:d7:93:f9:92:7f:a0:93:9d:7a:
8c:32:bc:1d:e9:fe:ca:90:75:08:85:2c:4a:8d:c4:f4:70:71:
cd:bf:12:2a:6e:66:bb:0b:c0:e5:de:c2:c8:42:95:b5:71:51:
36:a5:89:38:0f:82:23:d2:10:85:ca:43:8b:6c:2b:d8:af:08:
5a:3e:a7:4b:af:e6:7e:6b:a6:86:c4:84:7e:33:57:d9:10:73:
38:c4:ce:8c:f5:8a:d9:65:1e:bd:38:c2:9f:43:37:c1:27:4a:
8a:04:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:23 2025 by rpki-client