Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File: x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier: 1tBUccKgDMNQEaLpBH3ejeZzQjBO+G8mJIxMlG9mu6I=
Subject key identifier: 9B:40:F1:BB:92:69:DB:9E:B9:9A:96:98:B6:92:FC:42:F0:43:72:6D
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 0198D4E03E617352A8DC46006111AE281660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number: 155F
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: DF+Kck0BLrCiFmBX+4mwFif1EhIwkzE6Ki5+/UJJLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3e:61:73:52:a8:dc:46:00:61:11:ae:28:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=9b40f1bb9269db9eb99a9698b692fc42f043726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:80:df:cc:07:d1:3e:15:be:34:2c:d5:aa:
20:2a:56:59:16:8a:76:3e:a1:da:49:35:b5:5e:e0:
d0:38:23:d6:03:29:81:44:91:f2:6c:8f:85:df:86:
ef:5e:cc:de:d1:b8:c6:b5:e6:a5:19:4b:a2:15:3a:
46:b1:5a:64:ac:5a:d0:34:b9:80:ce:cd:0a:61:23:
b4:8b:c7:7c:5d:23:b2:a8:7b:d2:f8:b2:06:68:03:
e2:af:a7:95:b6:00:3f:0a:d1:54:8a:7d:c5:63:47:
68:a4:17:c8:ab:81:e1:b0:ef:36:2e:36:1e:c7:7a:
7d:dd:21:5d:cc:f9:a5:16:1a:b3:53:47:e8:97:d2:
6f:49:a2:22:04:08:64:54:e8:ad:2f:a7:e8:87:e0:
aa:94:4b:8f:ce:2b:65:bb:c1:90:03:ad:36:ff:6f:
02:25:fd:48:97:39:c9:35:48:78:2d:a6:39:6a:e2:
ab:dd:7b:6c:c9:14:46:c8:d9:f0:a2:a3:df:3e:81:
50:f8:85:d4:be:c1:dd:e3:45:db:ce:8f:62:98:8c:
a8:4c:3f:54:dd:a4:bd:85:4e:9c:4d:e5:34:60:e1:
b6:0e:49:43:f8:78:04:89:4e:4c:12:c8:b2:a8:61:
c8:82:7c:f7:ff:3f:dc:94:0b:ba:64:0a:e3:e8:4d:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:F1:BB:92:69:DB:9E:B9:9A:96:98:B6:92:FC:42:F0:43:72:6D
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:9e:cb:7e:c9:18:9e:ea:10:d0:1b:7e:5a:80:d4:83:9c:
14:83:b2:79:aa:9a:91:00:01:44:34:1a:da:9a:ce:ea:74:6c:
08:1e:51:9c:bc:22:54:d8:46:9c:16:b9:93:90:f2:cb:23:a1:
65:b5:58:67:f4:39:60:ca:e0:a8:f2:35:a8:9d:7c:3e:b9:b5:
80:12:03:e4:45:98:7a:f4:8e:37:be:26:5b:77:06:98:eb:82:
59:d8:f1:46:b0:e7:71:48:e5:35:08:df:e1:58:8b:9e:e2:ae:
60:ba:bf:10:a3:69:0d:7c:ef:6d:a8:b3:5e:5e:1b:27:4b:28:
8c:04:06:a3:9c:0b:f9:05:f3:92:8c:dd:c2:23:00:15:89:ad:
5a:59:2c:41:26:f6:1a:b9:b5:6d:5c:51:f2:20:94:65:47:b0:
d8:45:35:c0:34:a8:61:9d:f6:6f:c8:68:cb:93:50:5c:ec:41:
10:fd:c8:a7:ba:38:4c:40:55:ce:d8:0b:c1:db:58:46:33:b7:
67:3e:e6:ea:a4:36:e2:60:82:29:ac:93:08:15:cd:4e:cf:bd:
cf:0e:11:9a:ef:ef:7a:19:25:ff:96:c5:92:79:4a:46:0d:45:
28:90:db:68:f6:2d:b9:6f:16:5d:6d:3e:7f:77:87:1c:3f:6e:
b8:57:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:56 2025 by rpki-client