Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: nzScOBfbi+lyhfGGh7+LaVSMdhbAwrMe/azvq8nt5yk=
Subject key identifier: FE:CF:F5:26:12:13:9B:AE:69:45:0E:29:AF:31:1D:5B:98:83:A0:7C
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0198D4DFD8B96DFA8B56375F0FFF6CAEDC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 138C
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: ixc9JrjcJhIS/cHsA4BeITivzwWyr6npzXuwrs5ABg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d8:b9:6d:fa:8b:56:37:5f:0f:ff:6c:ae:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=fecff52612139bae69450e29af311d5b9883a07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:bc:1e:24:9e:8e:a6:4c:c6:83:a5:66:28:
17:14:14:64:03:d7:21:cc:12:f7:42:6d:63:42:8a:
84:7e:f5:05:4d:51:16:c7:12:1b:e9:4a:eb:ee:04:
b4:8f:09:20:88:ff:66:a4:73:c2:61:2c:00:37:dd:
52:f3:ef:5e:2c:00:d5:6f:f7:7e:47:48:5b:22:4b:
2e:84:3d:6c:37:f4:72:36:04:91:7a:aa:fb:84:76:
ed:53:3e:55:93:4a:da:58:93:7a:83:8a:85:04:57:
7d:b8:15:25:3f:88:ad:49:66:cb:70:2b:90:53:5a:
bc:43:72:7f:5b:98:b0:ba:cf:0d:f9:ee:0d:17:bf:
ae:7e:32:c9:17:e1:18:d2:15:d7:49:54:e6:1c:83:
92:52:b0:58:07:e7:6b:8c:6c:8a:30:df:88:3c:3f:
d2:e7:a3:ed:cc:86:81:7e:c9:e2:cc:c7:c1:bf:c2:
a2:0d:9c:0e:10:1f:bc:23:a2:bf:6d:52:75:ce:64:
bd:42:45:48:3c:cd:8d:41:57:66:8d:ea:26:f6:32:
7b:13:51:a2:91:63:91:62:a7:c8:5a:a3:89:93:5f:
6c:23:58:9e:61:60:ac:8d:dd:ef:06:06:6f:90:aa:
1f:25:6d:61:3c:c1:8f:7d:ef:24:f1:cd:7b:a2:13:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:F5:26:12:13:9B:AE:69:45:0E:29:AF:31:1D:5B:98:83:A0:7C
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5a:06:10:41:9d:6f:d2:15:38:6b:f2:a5:48:04:b0:09:92:
d2:5c:0b:2a:f5:3a:e6:df:15:68:42:4f:0b:23:4e:d3:c3:eb:
d9:7c:70:83:3b:c4:8a:87:8f:35:19:1a:e1:a7:6d:f0:ff:27:
e9:b2:de:51:1e:67:2c:0e:5f:5a:f9:99:b3:a2:a3:4d:c2:1e:
58:57:a1:ed:b1:e0:1a:cf:4d:e3:77:e2:a3:ef:f1:b7:d6:a6:
91:f0:b8:90:08:b1:35:1e:3d:45:7f:9f:93:81:f0:3d:84:82:
84:b4:3a:e0:c0:87:c0:d4:d9:19:4d:a7:45:f5:49:15:84:3a:
2f:fa:c4:15:2b:9e:38:ee:a4:75:03:3b:b1:fe:4d:ef:7b:68:
48:a9:97:e7:ff:28:fb:e4:5c:b4:51:a3:ed:16:ce:d0:97:de:
14:b0:11:5e:7b:a8:e8:a7:83:75:a1:f4:50:46:94:55:ce:d6:
34:cf:eb:48:09:b5:35:ff:4a:67:93:f8:94:6f:ff:c2:91:0a:
1f:cb:f1:0d:26:47:b6:b4:0e:c5:b6:2b:61:98:ac:98:15:91:
39:9f:4f:24:30:ca:93:21:58:c1:e1:0f:29:6a:29:7d:1d:5c:
1d:c0:bf:bb:7f:6a:dc:4a:7d:1b:ab:f1:87:dc:d7:7e:29:d4:
29:c8:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:02 2025 by rpki-client