Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier: Kh6TsPkHT9PR9x3RiKW7bLmYvh3MUZ0cdgjBl6Y504w=
Subject key identifier: F2:55:E0:36:40:38:31:A6:B2:35:12:DE:A1:96:FE:86:E7:04:D2:67
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial: 0198D515AEC68C092E4F76EBBC8669C285D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number: 0204
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=)
2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: XLqjrHcm5EaV9sFwZPlXgCelCbspA8ewTREFeh5xX0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ae:c6:8c:09:2e:4f:76:eb:bc:86:69:c2:85:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=f255e036403831a6b23512dea196fe86e704d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:ab:fc:ea:40:fa:0a:02:6a:3a:be:79:69:
bf:ce:b5:70:b4:da:8e:d7:ad:fc:96:df:12:5c:12:
50:48:b0:67:e4:4d:6b:01:9b:14:c5:9e:62:e6:fc:
ec:b1:5c:fc:8b:92:3b:7a:66:de:39:3e:5a:c8:de:
c1:d2:1c:8e:75:20:9f:00:df:57:34:c6:52:75:74:
c3:83:18:d3:40:2b:2f:94:82:77:6a:e0:bb:52:f5:
a6:fd:07:57:e1:b6:21:6f:18:98:33:b7:fb:53:41:
b3:5b:3b:2f:f7:a9:0f:d5:84:18:74:f6:b2:a0:fc:
02:0e:10:3d:5b:4d:f9:95:0d:2a:73:03:e5:0a:e8:
e6:86:03:9d:24:e7:ee:87:af:39:4f:cb:e0:2a:0f:
ba:f3:44:2a:62:ed:fe:98:8b:42:4f:c3:9b:83:43:
aa:ff:37:10:bc:7c:52:d4:dc:85:48:ee:50:9c:11:
9c:ec:f1:4b:a8:6c:fc:75:15:be:f0:69:06:86:89:
f9:df:d2:a8:b3:ee:d8:1f:78:71:0e:fa:57:d1:0d:
26:14:68:93:4b:37:fe:16:f0:22:59:35:6d:b1:e4:
3e:90:7e:8b:ae:4d:20:f3:f6:16:4e:41:d7:3d:34:
65:fa:cb:d7:59:e4:b0:78:aa:cf:01:18:c6:63:21:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:E0:36:40:38:31:A6:B2:35:12:DE:A1:96:FE:86:E7:04:D2:67
X509v3 Authority Key Identifier:
keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:eb:b6:21:e8:fb:02:d8:8a:2d:19:a8:8e:f2:00:b4:66:
03:c4:f0:96:5a:1e:44:4f:74:fe:91:a5:84:8c:fb:be:44:f0:
3b:dc:56:52:e3:aa:21:7b:d7:de:0d:15:08:2f:dd:d2:32:4f:
c2:2e:46:da:8e:bc:23:c7:87:fa:a0:b9:c6:03:4e:29:d8:29:
46:04:77:ab:78:37:c8:e6:a3:2a:e2:b7:a6:94:47:17:e1:8e:
2d:c2:de:8f:22:57:8a:d8:1d:b4:95:f4:28:ea:69:23:8b:7d:
f2:65:d2:fa:f9:d8:56:ce:3d:66:78:d3:c6:90:59:ef:81:38:
b4:84:55:50:0d:c7:c4:0f:4c:e8:70:10:c2:a5:3e:4f:45:a1:
b6:67:30:79:0a:b6:a2:52:6c:1f:01:43:cd:0e:77:35:7c:2d:
db:d3:72:c9:6e:14:c9:e0:e6:43:07:44:fe:33:c2:f3:b3:54:
db:17:21:79:39:91:8d:99:53:27:01:7a:e2:7c:0b:9e:4e:54:
d3:13:fd:c2:f5:41:b9:76:0c:a8:d3:10:b8:c7:68:85:97:9b:
5c:f6:f4:91:40:bb:ad:c8:e7:68:2c:1e:78:39:1e:e7:91:8e:
0d:8d:92:36:82:8b:b4:82:ab:c0:3c:5d:a5:86:34:00:b8:c0:
41:32:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:55 2025 by rpki-client