Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: uNzqP73RsR8LkkbZmsdKhmsdbUxP8YbH7Yak6KosbkY=
Subject key identifier: AD:E6:5B:4C:D5:F6:50:92:9F:3F:BC:FE:A7:2E:34:71:73:C9:7F:46
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 0198D4726A0CE0E82E499C4EF92DFF6D1F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 1383
Signing time: Sat 23 Aug 2025 01:02:04 +0000
Manifest this update: Sat 23 Aug 2025 01:02:04 +0000
Manifest next update: Sun 24 Aug 2025 01:02:04 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: bLRNr4UdnjEhqPVk1F9r2/1Z1tt7rUe+0+V8xH3tOmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6a:0c:e0:e8:2e:49:9c:4e:f9:2d:ff:6d:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Aug 23 01:02:04 2025 GMT
Not After : Aug 24 01:02:04 2025 GMT
Subject: CN=ade65b4cd5f650929f3fbcfea72e347173c97f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:d5:f6:f2:b3:49:55:e2:13:c8:bc:33:fe:
5e:bb:7b:2a:d3:96:ed:f7:d7:91:79:fa:b0:0f:c3:
5e:3b:b8:c0:86:92:55:04:78:03:0d:82:f8:e8:e1:
db:46:b7:de:08:be:f1:2b:4a:ca:47:63:c3:a4:5b:
39:db:a6:89:69:21:4c:ac:83:ac:f0:44:85:07:d5:
92:9f:f6:15:61:8f:c0:0c:3d:a9:0e:7a:c0:31:8e:
f7:c4:56:61:34:52:d3:bf:a2:ac:8c:8a:24:a1:a3:
12:6c:05:70:7a:fd:69:1e:d2:59:d1:aa:e9:1f:0c:
ca:52:21:f5:fe:9b:04:8a:06:4b:36:9f:60:01:09:
88:6c:bf:8a:fa:a2:f0:7c:3d:37:a6:b5:66:10:fe:
ac:fc:3b:ed:65:0b:d8:3a:d7:8f:e8:a2:b2:af:2c:
eb:83:24:97:9d:a1:82:b9:8b:87:a4:a6:d2:7f:bc:
fe:2d:2e:64:c2:12:de:9c:2d:58:ba:4a:c8:ab:fd:
ff:8a:2a:9c:86:5c:1e:a0:13:dc:53:3d:29:de:cf:
50:d4:71:93:7b:0a:9b:8a:b2:6b:a6:f3:6b:e0:5d:
fa:46:bc:b6:71:ff:c1:38:40:af:fc:e5:17:0d:21:
4f:3b:d6:61:34:b1:be:f1:bc:d2:5c:47:5f:1f:c3:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E6:5B:4C:D5:F6:50:92:9F:3F:BC:FE:A7:2E:34:71:73:C9:7F:46
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ed:e5:80:91:47:e5:53:e2:a0:d9:41:a2:5a:05:6e:0d:4d:
1e:c8:ff:c1:23:18:18:15:b8:90:47:60:44:32:51:ef:5c:c3:
8f:8f:cc:42:e5:10:01:3b:1c:64:7a:b7:5a:c9:54:f8:f9:9c:
14:df:07:55:ba:dd:27:f8:63:ca:b2:16:cb:fe:f3:fc:7d:dc:
b0:f8:83:7a:76:5d:d2:73:a7:bb:73:d3:1d:40:57:8f:9d:73:
84:36:4c:5d:11:2f:03:9c:cf:ce:33:ae:c5:ad:7f:8c:e0:c2:
58:bb:62:b9:3b:e4:ca:6d:b7:d0:d9:2a:19:75:7e:94:28:7a:
cd:31:3b:08:5a:33:26:da:56:a7:74:5a:67:00:7f:c4:99:10:
c0:ce:95:18:eb:a5:43:7a:d0:23:45:18:47:43:78:01:f6:d3:
5e:4c:9b:79:7b:57:c8:ef:a1:06:4a:02:c4:63:bf:08:be:79:
bd:64:02:a3:98:9c:37:e2:ef:34:ed:98:30:b9:81:03:fb:92:
53:1a:18:eb:67:68:50:cc:2d:a0:47:33:9c:36:26:4d:34:6f:
0f:dc:4f:90:1d:68:62:67:4c:e0:8f:65:07:f2:b0:60:c0:69:
ae:13:23:6f:80:ff:5b:87:87:c1:58:84:9a:08:36:7f:5e:ff:
81:96:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:09 2025 by rpki-client