Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: sqZr3plQgOtOjoFVONPis4b2J7tMcfgXLNQdhfGGOWQ=
Subject key identifier: AC:0C:76:0B:81:BD:19:86:6E:5B:31:EC:D2:6E:10:E9:B8:6D:97:B9
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 0197C68145F13787B57203F7DB1EB577A900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 15:00:50 +0000
Manifest this update: Tue 01 Jul 2025 15:00:50 +0000
Manifest next update: Wed 02 Jul 2025 15:00:50 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: hOsayS2nsm8iaktsmGkiFZ7biQIpWiEAgfMrO2+hGRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:45:f1:37:87:b5:72:03:f7:db:1e:b5:77:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Jul 1 15:00:50 2025 GMT
Not After : Jul 2 15:00:50 2025 GMT
Subject: CN=ac0c760b81bd19866e5b31ecd26e10e9b86d97b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:93:80:27:4c:6a:f1:34:ad:e5:49:22:d3:
2f:f5:2a:db:76:cd:57:58:cf:5c:d3:09:e1:be:28:
14:81:34:53:b8:89:f7:69:43:9d:53:9f:3c:71:2b:
73:f5:85:ab:fb:9e:76:e2:8d:52:a9:d1:f9:8c:ef:
e7:40:11:4a:e6:4f:61:9c:fd:ae:64:44:87:55:1d:
bf:f7:b2:09:36:fe:15:43:ba:7d:2d:8d:64:68:d1:
02:13:04:dc:6a:e6:46:1e:ec:0d:c9:61:80:24:5a:
4c:93:83:c2:9a:79:91:ab:b2:db:94:db:1f:65:51:
67:fb:bd:c2:fe:cf:e2:0d:65:fe:a3:d8:11:e4:0b:
22:72:7c:51:9a:b1:3e:49:01:f1:e2:37:0c:c6:83:
36:5f:8c:05:a6:b1:f8:60:eb:8f:92:d7:46:5a:ae:
9e:d6:4e:d4:ec:87:b7:73:af:a4:0a:2b:9d:b5:7a:
f0:d9:2b:dd:1f:3d:20:f1:59:8d:dd:08:72:d1:7b:
56:a6:cc:ae:02:0a:f3:15:a3:22:a1:6a:90:44:9c:
b1:4f:6c:19:22:d3:3e:75:58:4f:e7:d6:36:ef:8f:
9e:25:75:aa:53:12:4c:3e:6b:54:9e:76:18:cc:a7:
5b:3b:b6:55:77:8c:d7:4c:e0:22:f8:6b:88:ab:0c:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:76:0B:81:BD:19:86:6E:5B:31:EC:D2:6E:10:E9:B8:6D:97:B9
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:a1:9e:65:77:95:38:51:24:06:f6:59:ef:f9:b4:6c:cd:
bb:34:67:e1:74:73:86:1f:70:78:10:8b:99:ec:ff:63:af:20:
1d:5f:12:47:81:d2:a6:b3:d5:bb:3e:09:6b:6e:a7:27:4f:5a:
6d:e1:6c:b7:3f:0e:f0:f8:3d:a0:ba:0e:c1:97:66:33:ed:b4:
97:21:1f:7a:b3:38:68:44:12:ae:ab:b8:af:c8:b2:cc:b6:04:
d3:56:a5:af:58:a6:2d:2b:92:91:09:53:15:aa:91:ce:24:24:
7d:b6:9d:f3:1a:84:38:6d:63:f0:3d:30:1e:de:b8:5a:8f:64:
19:ef:f8:b0:d1:28:dd:d3:42:1f:60:61:95:28:6a:08:4b:96:
b1:44:59:7c:cf:f4:48:5d:4a:08:de:3e:20:05:13:e7:3b:b4:
33:88:bf:8a:95:96:e6:8b:76:b7:9f:b6:da:95:72:97:a7:82:
0f:eb:0e:4a:f8:c7:28:ad:5e:2d:8c:14:2c:02:84:da:52:5c:
a7:f7:e2:c0:47:53:07:30:d7:a3:40:10:a7:54:40:8b:f7:31:
a4:f7:c5:14:50:fc:86:42:ae:1c:ef:87:17:94:84:37:dd:72:
e2:8c:4c:43:2b:54:c9:08:79:ed:f6:a8:d2:74:49:07:31:e8:
00:85:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:49:42 2025 by rpki-client