Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: BHaIkUlpKvSZVddWNvuBjLhmjS1aWvNLtnawcUvbPUE=
Subject key identifier: 0F:CB:92:9C:88:A0:51:6C:72:F0:E3:41:7B:92:F7:BE:59:CB:E3:39
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0197C1241267E6E5ADCF7C877ECB7FE1DDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 09C8
Signing time: Mon 30 Jun 2025 14:00:56 +0000
Manifest this update: Mon 30 Jun 2025 14:00:56 +0000
Manifest next update: Tue 01 Jul 2025 14:00:56 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: EOmZVAKA7lQvrlIX6v76LH10EZIdc0Rc8+GboEUpxFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:12:67:e6:e5:ad:cf:7c:87:7e:cb:7f:e1:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Jun 30 14:00:56 2025 GMT
Not After : Jul 1 14:00:56 2025 GMT
Subject: CN=0fcb929c88a0516c72f0e3417b92f7be59cbe339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:0a:29:7c:3a:ec:b1:f8:29:7f:7f:80:e2:
d2:fb:d3:62:c6:2d:ee:26:d1:4b:62:47:30:b8:d6:
6b:2b:3d:28:ca:b6:d0:02:27:99:c5:7c:88:7a:a8:
06:02:ee:5b:2c:f9:07:e7:e8:d9:2c:1c:dd:8d:96:
eb:3f:dd:56:b2:ea:38:96:97:45:ac:52:af:52:ae:
09:fc:21:2e:11:40:25:80:79:d1:cb:af:25:93:38:
29:52:52:83:04:ac:9b:53:11:e2:d1:9a:59:98:99:
36:aa:ea:38:d1:f6:59:2a:d4:a8:31:44:fe:be:1e:
a6:59:7a:39:9b:b5:43:90:bc:91:02:9d:a1:e0:40:
c9:a0:2b:49:c2:2d:d0:b8:a6:3a:18:4a:4c:30:93:
ce:69:11:e7:c3:8c:16:6e:6b:2f:44:d2:74:9a:a5:
30:7c:84:29:0c:b0:98:ed:30:6e:9c:44:a7:e1:a1:
c4:8a:63:9b:78:7f:f5:92:23:53:40:79:59:04:c2:
c5:1b:e8:9b:d3:dc:ea:88:e0:00:6b:91:4d:be:35:
68:4f:15:5b:a9:df:80:36:3a:cb:5a:ce:b3:3c:af:
77:42:07:fb:f9:53:52:7f:88:95:63:8e:fb:f4:ce:
c8:0a:3f:a3:3c:db:85:62:36:74:1e:9b:c9:ba:16:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:92:9C:88:A0:51:6C:72:F0:E3:41:7B:92:F7:BE:59:CB:E3:39
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0b:42:15:02:44:40:b6:e7:eb:4b:fc:aa:4e:6f:7d:e0:c2:
46:e1:f6:54:99:ef:60:dd:28:99:21:a5:04:7b:e5:17:54:68:
32:20:3d:f0:8e:5b:df:6b:2e:61:b4:93:ca:d2:56:b9:ea:91:
26:3e:19:82:28:0b:4e:76:96:0b:f2:be:e9:91:71:80:70:cf:
ad:1c:fb:2c:fa:72:b1:53:ea:40:26:05:5e:6f:ec:af:e5:b6:
f7:51:40:52:96:cf:89:cb:1e:19:c5:95:02:bc:7d:63:15:b9:
b2:08:1a:f3:dd:54:32:f6:04:28:df:db:89:82:b9:12:17:f7:
7c:b1:13:31:4f:9b:86:02:43:02:ea:34:76:85:76:8b:79:a5:
cb:a7:c3:9c:df:32:58:e1:6f:6a:01:ec:72:2c:26:cb:b7:f7:
01:7f:68:b1:18:02:31:a3:17:ab:5b:a1:f0:37:0e:4d:15:1e:
70:0b:3e:2d:d0:28:46:26:0e:bd:8a:48:82:63:bd:be:69:da:
a3:cf:c6:03:cc:0a:14:dd:0a:85:9c:c6:9d:b7:e9:1f:4d:b5:
f9:68:bc:89:cb:02:b8:b7:29:bd:3f:ff:c8:3e:24:a6:39:92:
4d:45:3c:83:d3:f9:04:86:5a:50:0b:6f:fe:d8:21:a6:44:93:
67:59:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:59:30 2025 by rpki-client