Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier: 1DLVe6nZ7vyaXvujczYIHZN8mgT7wFTdaISMANOlmQk=
Subject key identifier: 9A:8A:A5:23:47:8D:F7:93:A7:82:3E:C9:7E:51:3C:B1:27:24:F9:40
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019874503295F9A796E60D937FE373FE5D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number: 0786
Signing time: Mon 04 Aug 2025 09:01:09 +0000
Manifest this update: Mon 04 Aug 2025 09:01:09 +0000
Manifest next update: Tue 05 Aug 2025 09:01:09 +0000
Files and hashes: 1: _QBZZm_j6pkBqG7ULTSKSuYA6m4.roa (hash: J+NZ6+xHvgyZBnOnyLbSKcqDP+9z+FmiBI8TDK00aCo=)
2: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=)
3: jpN0hvuTgqmocPyed3qkYPDHQdk.roa (hash: k+R6t5Hzmk9H5O7QG4Q3cEOcrN/jFXUPR3aXqZ2Jg1U=)
4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=)
5: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: TafzrJk4iAVKlCxLwX97pELBCoJ743D6XKwZ4IufkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:32:95:f9:a7:96:e6:0d:93:7f:e3:73:fe:5d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Aug 4 09:01:09 2025 GMT
Not After : Aug 5 09:01:09 2025 GMT
Subject: CN=9a8aa523478df793a7823ec97e513cb12724f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:e0:94:04:0b:e3:37:31:97:b2:4d:70:d7:
e9:95:32:31:a3:46:7c:89:80:d7:4f:4c:cf:5a:40:
1b:a5:99:b2:bb:7e:ce:10:70:48:e0:f2:d6:f6:87:
cd:db:53:da:24:d3:3f:d8:07:e8:73:63:07:98:9e:
5f:22:3f:2a:0e:69:1b:90:5b:a4:48:12:9b:d5:6d:
e5:26:3c:94:b3:f7:be:7a:e9:9e:74:8c:5c:b0:9b:
e6:0f:c9:0f:29:de:c1:24:69:9c:f4:d4:47:4c:20:
9d:89:1d:d9:c3:b1:f7:84:16:3b:24:b5:dc:94:7b:
51:d2:a9:83:c2:41:1e:5d:e8:35:7f:e1:4f:81:a2:
7f:29:77:8d:e5:a9:db:a1:ad:5d:e8:aa:72:01:48:
0a:a8:f9:81:41:6e:aa:bf:9f:79:82:65:39:86:d6:
07:56:2e:06:4c:1d:2c:d5:b8:e5:af:fc:6a:95:e8:
e4:14:43:3f:00:12:48:02:bc:54:47:46:af:3b:31:
11:23:04:21:77:40:fe:4d:a8:5d:7e:15:03:94:47:
f7:45:c4:be:8f:5e:ea:55:d5:f0:1a:1a:84:21:20:
a3:5f:75:7c:17:a8:8e:45:1b:e4:a0:13:d8:0a:14:
3d:82:6b:7c:18:7b:19:d3:ff:7b:1f:50:d7:91:b7:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:A5:23:47:8D:F7:93:A7:82:3E:C9:7E:51:3C:B1:27:24:F9:40
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:55:3f:54:0c:72:b2:96:42:92:82:c6:e5:37:5f:5e:18:
46:ed:90:ac:cf:e3:7b:67:b0:f1:5e:44:ef:08:ea:37:35:e3:
cc:ec:55:2c:08:57:9a:e4:0e:3e:a9:64:dd:60:3e:b5:12:53:
70:f3:ad:ad:0b:9f:9f:20:8b:38:87:f4:39:6b:1d:cb:bc:49:
79:48:8a:18:c9:06:64:35:ef:1c:cd:3c:79:52:7f:48:bc:ec:
22:03:09:66:3f:03:56:ce:7e:12:85:40:4f:62:d4:ec:82:f2:
cf:0e:2d:4e:33:f2:2c:1a:e9:d3:67:47:05:67:8b:0f:63:4d:
85:44:35:a2:51:7b:83:78:f1:93:84:5d:58:10:01:3a:4d:30:
02:3f:9e:68:9f:7b:e4:e6:8e:d6:77:9f:9a:77:eb:e5:d7:bf:
96:13:3b:83:10:3b:13:23:e5:ed:c6:43:1e:f7:62:66:bf:80:
7e:63:4c:31:9a:14:4c:fd:f0:b0:af:a5:d5:13:6d:9f:1c:14:
63:3a:a2:97:58:5d:9b:ec:6e:c9:28:90:89:87:44:5f:c7:d3:
53:ec:a8:82:3e:8b:c9:77:e1:2d:f4:6c:5c:be:18:20:0e:02:
aa:a8:79:1f:41:e8:16:2e:c1:50:10:88:83:4e:4b:e0:9a:a6:
60:7a:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:41 2025 by rpki-client