Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: jMBYhrT/JsS7/C7e4NnYmuDohxXCoZ3vOTXusDzye4A=
Subject key identifier: 03:69:A8:B4:15:23:4C:73:E4:49:E9:22:8D:E3:A3:1B:FF:54:E3:B2
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0198D5BBA68C770626F70D0085CAB57320F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
7: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: a5a+qTkG4owXQ4X6Z3BSGdf2a7F4ohGrAO5eevdEkc0=)
8: xAgFfQaKEowdS70V9zbgoKMLSaw.roa (hash: hfLCxfCTfbaf8X5vKcrUM1lSCKQfVXa2EeKuQXwH66I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a6:8c:77:06:26:f7:0d:00:85:ca:b5:73:20:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=0369a8b415234c73e449e9228de3a31bff54e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:0b:47:7f:7f:0f:9b:6b:77:0e:1b:c2:79:
c8:18:8e:1c:85:dd:5f:05:b7:62:bc:64:40:4e:51:
eb:80:1b:1b:61:3c:3f:e0:59:29:b7:79:e1:4f:53:
ed:7b:e7:37:96:63:32:c0:5f:d4:59:9d:69:21:8f:
96:22:32:7c:48:ac:29:1d:d7:9b:a8:cc:9f:d1:e7:
3a:74:c2:8c:29:73:aa:c0:a2:a2:95:6b:45:6c:f9:
42:6d:93:eb:d2:da:ef:35:42:4c:f7:f3:16:ed:82:
fc:c0:83:6c:f5:97:48:0b:7a:b2:df:d6:96:ce:a0:
b8:0a:e4:69:9b:bb:ea:a7:df:dc:17:95:5a:c7:8c:
1f:e0:6e:91:60:b5:50:ca:08:29:6b:ca:3c:53:43:
03:04:9d:7a:26:d2:d8:f8:6d:ee:66:18:69:51:da:
3a:d0:19:10:87:a4:23:84:1b:3b:61:93:b7:3b:1c:
f3:ee:57:7a:a2:f8:6f:1b:c1:6f:6e:89:50:8e:ec:
8b:18:e6:7b:b1:e1:c7:6e:01:58:1b:cb:95:35:8c:
34:e7:41:91:34:73:95:96:cb:7d:8d:ca:cb:a8:ff:
c9:9b:7c:29:e7:e2:56:d4:fc:9a:0e:2f:b6:dc:eb:
80:b7:e3:21:00:03:fe:8a:a1:3b:b1:37:39:11:5a:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:A8:B4:15:23:4C:73:E4:49:E9:22:8D:E3:A3:1B:FF:54:E3:B2
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:14:7a:b6:da:d6:9b:23:1d:89:f9:04:ea:06:78:d6:0f:43:
52:ff:fd:9b:a9:1c:e6:f6:11:88:e9:b7:ad:6e:48:bd:21:2c:
e2:cc:98:6d:59:b0:76:7d:c1:f9:b2:f2:2e:10:30:f0:bf:c4:
3b:6b:59:d5:b2:25:3c:34:4b:53:73:69:44:21:2f:f8:20:57:
c7:57:3a:00:4c:5d:39:e6:c8:93:51:ed:8f:f5:d3:85:72:03:
8a:32:c2:b5:c5:3e:fa:cb:42:ae:fa:90:1b:f1:57:da:2a:31:
20:0a:23:3a:32:23:15:c6:f2:6d:08:58:6a:b8:2b:87:3d:5f:
2d:01:19:e3:08:f4:0b:ee:8f:77:05:b6:fb:6f:ff:74:68:0e:
c2:7f:b7:ce:07:dc:12:83:04:0e:76:55:32:42:a9:51:fb:25:
7a:11:f2:ae:8c:fd:26:bb:e6:6f:d8:ff:02:be:82:83:fb:7d:
d6:1b:b6:3e:47:7e:a0:a8:1f:34:7c:cc:e5:53:03:ae:9e:41:
fd:d9:ce:8d:b9:ca:f0:ad:f5:ac:fc:c0:51:92:90:fb:41:df:
af:19:c7:32:7c:42:b2:e0:1f:75:bc:eb:18:9f:1b:bc:2a:ee:
25:ad:5f:ad:2e:d0:44:3b:ec:4f:99:65:83:57:c5:71:9d:9a:
96:5d:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:08 2025 by rpki-client