Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: EMAPVo2LfA/hi6G4pblw/QjLMkz6QZakvVu3hg3A4AU=
Subject key identifier: 65:09:68:80:06:36:1F:C9:0D:E6:31:78:A0:C4:4F:C9:35:7D:CC:06
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 0198D4A7E6A615018CFC8B6C00D41D5A9529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0A34
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: 1myZhKFx+aZJgT5LdQphC3bZyVE9oC55KnXDKy6rzF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e6:a6:15:01:8c:fc:8b:6c:00:d4:1d:5a:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=6509688006361fc90de63178a0c44fc9357dcc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:cd:21:8f:3e:2e:4b:48:a1:dd:59:f7:bb:
4e:c2:bf:6e:e8:7f:74:02:f9:52:5e:a8:65:4b:5e:
c7:1e:37:7a:7d:2f:98:7d:cc:af:57:b2:21:36:26:
f0:a8:bc:67:94:34:77:08:34:20:17:8a:8f:5e:23:
75:56:d7:ee:6d:a9:3d:ae:3c:f9:fa:fa:b9:3d:7f:
3a:a9:98:60:38:a0:64:c3:b6:50:62:af:53:78:b6:
1b:1a:b5:15:cb:85:d1:c2:6e:07:1d:63:a1:cd:b8:
5d:d2:90:dc:8c:2e:94:da:e6:13:ea:1c:33:09:05:
72:51:9d:b8:0d:18:74:7e:f1:1e:5a:d8:34:48:1d:
6f:4d:1a:19:02:e1:60:b6:c2:03:0f:94:4a:f1:dc:
65:86:98:b7:13:11:69:ad:7b:2b:63:1e:77:08:f1:
68:11:dc:5e:2f:bb:2e:5c:a7:59:38:af:ef:66:1e:
01:58:fa:a5:9f:63:fa:f0:f1:53:94:01:db:14:bc:
9b:db:f6:fa:ca:83:eb:81:3b:bc:7b:14:c6:e0:c5:
2d:7b:73:c1:63:e8:de:c0:4f:21:b1:b9:5e:21:2d:
c1:2e:e8:8b:4a:1a:88:60:cd:cd:23:e9:22:cf:38:
6f:86:0f:a1:ad:9c:59:04:67:e1:fe:34:2c:ae:bc:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:68:80:06:36:1F:C9:0D:E6:31:78:A0:C4:4F:C9:35:7D:CC:06
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8e:ff:e9:d2:5e:19:97:f6:7a:f0:71:4f:a2:9f:65:53:4c:
78:d7:9a:36:47:23:6f:80:4d:f5:5b:95:aa:e8:73:ec:99:6d:
8b:8c:6f:0c:34:ab:f8:af:41:f1:b3:1e:e8:a8:13:6f:99:20:
67:f0:0c:1d:3d:4c:eb:60:40:47:c3:86:79:80:da:57:c5:98:
83:47:2d:6f:ab:0d:eb:83:4d:e6:ed:af:e3:da:f2:53:b1:05:
86:65:5e:76:19:04:d2:75:0b:f5:e9:f8:49:8e:c4:e4:d3:84:
cd:a1:1d:9b:6a:91:8b:9c:d8:32:ce:83:04:61:72:0a:45:93:
a5:e3:71:30:56:9b:b2:ef:a6:4e:d7:9f:90:35:5f:57:0b:00:
74:a0:b3:71:2a:45:7e:61:ca:a3:3a:0e:e9:a9:7d:81:56:bd:
45:f2:c2:09:e5:d3:2f:8f:11:da:00:fa:a1:df:d6:37:49:11:
c7:ce:3d:2d:c8:da:6c:66:15:7d:cb:31:6c:bf:14:e4:7c:bf:
06:be:60:dd:e5:3d:7b:4c:32:2a:e9:21:21:7b:bb:40:ed:29:
0e:7f:cc:39:20:3c:0d:8b:3c:e9:ad:54:22:e5:b6:c1:17:a2:
29:8b:c9:b2:d8:6b:27:f1:46:29:6a:05:59:d9:a6:69:7c:9a:
db:38:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:50 2025 by rpki-client