Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: 4xZHeaRChdMxfMD/xWEcoWSwsaMgSnmsZ5hOWgsbjlo=
Subject key identifier: CC:94:74:EC:93:DC:C3:66:D4:AC:BF:39:A2:20:C8:D0:0A:F0:3D:09
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0198D77365FFD106ADA84AA805DDC7D2EB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 03AD
Signing time: Sat 23 Aug 2025 15:02:00 +0000
Manifest this update: Sat 23 Aug 2025 15:02:00 +0000
Manifest next update: Sun 24 Aug 2025 15:02:00 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: V+7fb1RPg7iwZUbMDP4AwLDbnCUVZsG34gFVaDqKiOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:65:ff:d1:06:ad:a8:4a:a8:05:dd:c7:d2:eb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Aug 23 15:02:00 2025 GMT
Not After : Aug 24 15:02:00 2025 GMT
Subject: CN=cc9474ec93dcc366d4acbf39a220c8d00af03d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:4e:6f:9a:d1:2d:a3:fb:68:b5:24:28:8b:
71:f9:44:94:ee:cb:a5:af:8f:ea:07:f3:f1:99:4a:
de:07:61:d3:df:97:b8:51:e3:a8:a1:e0:f3:4d:af:
cb:e1:4b:88:4c:4f:0d:1d:c9:23:80:7e:ea:0a:8f:
7a:6a:c8:5a:1f:5e:db:a2:4b:5e:c0:42:62:36:3b:
74:d2:d3:6c:c8:9b:cf:c0:73:57:fc:bf:38:55:7a:
42:97:34:04:b7:4b:a3:1b:68:ed:8b:ac:dc:62:e2:
63:1f:f0:e5:8d:0b:95:22:c8:ce:0e:74:9c:9b:46:
f8:42:f7:89:42:d2:3d:2c:41:23:29:3b:8a:42:96:
3e:e9:a6:8d:f1:e8:1e:2a:e2:1e:7d:8c:a9:30:22:
e6:27:91:bb:72:24:5f:54:96:58:08:0f:87:ce:4b:
54:17:ab:62:ee:a3:f8:59:48:2d:b7:01:53:bc:fd:
ba:f0:7a:ca:3c:52:76:e8:ef:da:67:53:5e:76:0f:
68:4e:eb:94:f6:79:6c:bc:79:5c:97:a0:76:0d:45:
34:a6:e7:c8:ec:10:f4:98:8f:36:51:d3:8f:f7:dd:
08:39:44:3f:8c:16:59:cc:c5:1d:e3:7b:5c:86:b8:
c4:5f:9b:1e:74:26:77:47:54:7a:be:26:3b:df:86:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:74:EC:93:DC:C3:66:D4:AC:BF:39:A2:20:C8:D0:0A:F0:3D:09
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:8b:e1:da:b4:9e:a3:e7:bd:72:20:9b:69:9f:4c:78:1e:
23:42:c8:bb:a1:6f:42:d2:57:e8:19:85:7c:d7:75:76:21:c6:
50:4f:c0:d5:48:0e:56:0b:88:1b:20:c1:a3:01:e5:af:27:43:
a8:03:04:4d:9a:c8:a7:c3:fe:66:9f:4a:50:91:e0:72:fc:05:
60:fd:f9:1c:26:b2:88:70:a3:11:58:d5:ac:de:ec:8a:64:41:
80:3b:54:58:ec:7c:f2:87:a7:39:ee:e5:c9:8f:43:e4:45:df:
ef:2b:06:8e:53:07:d6:04:09:02:ac:c3:06:cf:87:d6:f2:5c:
3d:21:b3:8d:09:1f:c3:fb:84:08:22:0d:f3:39:99:1e:74:80:
22:d4:eb:d6:45:fc:07:e9:88:cc:e4:dd:ac:cf:b5:98:24:48:
9b:34:fa:b9:67:ca:a8:8f:8c:1c:a5:b4:66:33:2f:18:40:96:
71:b7:25:9f:58:32:78:ff:8f:c8:b3:dd:5c:a4:26:64:2d:0e:
77:3a:d1:91:8f:f1:f8:fe:d9:a8:51:1d:a6:99:bf:e5:6b:5c:
ef:e7:ec:70:31:65:8e:d7:c4:b2:34:30:7e:3f:f4:f6:58:7d:
16:1e:40:e2:2e:a9:56:99:25:7a:ad:8f:e9:de:38:8b:4a:99:
ef:41:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:15 2025 by rpki-client