Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: b4HXK5XJTVF41FTWiDKMrnJnp0tAyi8nnXs866PVyA0=
Subject key identifier: 0E:6F:E9:39:41:9A:41:7C:27:56:59:E8:B0:C5:59:C6:C4:ED:4D:FE
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 01987261E2350B3ED9BAB6134F4CE7F9CC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0632
Signing time: Mon 04 Aug 2025 00:01:14 +0000
Manifest this update: Mon 04 Aug 2025 00:01:14 +0000
Manifest next update: Tue 05 Aug 2025 00:01:14 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: sHHR43KCp+ybpTo+71L4AIrDVCPAtb/cImsrHSJepAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:e2:35:0b:3e:d9:ba:b6:13:4f:4c:e7:f9:cc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Aug 4 00:01:14 2025 GMT
Not After : Aug 5 00:01:14 2025 GMT
Subject: CN=0e6fe939419a417c275659e8b0c559c6c4ed4dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:5b:0a:d3:c5:b9:74:3e:c5:2e:ae:2a:f1:
da:ed:73:1e:1e:42:8a:e0:91:c3:15:db:bc:32:b4:
83:0a:de:18:a4:e9:45:9e:1b:07:77:e9:a7:2f:7f:
e5:02:f2:9b:3f:a3:89:09:21:9d:14:f0:cc:bb:2b:
d0:9b:03:38:7a:85:54:2f:44:24:63:29:a0:43:be:
70:e9:8c:bd:42:26:f8:8c:2c:6d:0c:e9:dc:5b:64:
ba:cb:fa:7b:4f:18:28:a1:90:1e:cf:0a:f9:25:29:
0d:87:6c:3f:ab:8a:02:ab:32:31:79:9a:1a:6a:de:
e7:87:56:3a:b5:02:dc:95:cc:15:69:8c:a3:70:7e:
fc:7c:e2:bc:25:a2:a2:0c:6b:07:e5:5c:65:ef:b7:
a0:de:18:16:e9:a7:ad:01:60:92:0a:b9:fd:92:e0:
98:b0:5a:7d:89:1f:df:bc:10:14:b1:44:ef:64:6f:
cf:72:fd:21:d0:61:ee:d3:76:3a:64:14:ed:50:82:
64:09:d1:27:ed:1f:a7:c7:6a:c0:dc:9e:81:dd:ae:
6d:66:8a:61:78:3d:3e:77:e4:ea:fe:67:f0:9c:0f:
6a:29:cf:83:19:15:23:2f:ff:ea:65:81:cc:31:df:
61:24:c9:9e:d9:e7:2b:b4:4b:f6:b6:c8:b5:64:78:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:E9:39:41:9A:41:7C:27:56:59:E8:B0:C5:59:C6:C4:ED:4D:FE
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ca:78:42:8d:28:ce:8b:e1:6f:9b:12:c0:3c:f9:48:21:fc:
52:ba:bb:e3:45:32:a2:43:a1:50:1a:0b:9d:70:7d:9a:c1:89:
9a:f4:70:cc:ef:26:e5:dd:ad:c5:e0:6a:7a:42:87:4e:0c:0c:
ad:e9:34:11:79:9d:ca:0c:d1:fc:16:ba:b7:2b:ee:92:f9:7a:
72:6e:62:a7:df:6e:3e:f8:2b:17:69:63:1b:80:a5:36:82:ef:
28:b1:fd:4e:3c:74:1b:6d:c9:91:42:be:ed:ad:49:41:f3:92:
64:09:b6:c1:c2:9a:c5:34:bf:d6:72:be:bc:13:ec:71:ee:ed:
b0:89:68:44:ad:d4:8b:04:82:ae:2c:76:e4:9c:99:8d:a9:fe:
65:8e:ea:4c:59:52:04:75:43:d5:99:e3:72:20:09:53:86:c5:
c0:82:59:16:53:34:b3:71:da:db:53:28:80:98:2a:e9:d8:a5:
ce:65:bc:9b:db:bd:14:0c:36:1e:32:1f:ac:dc:1a:15:f8:94:
48:db:29:cc:5c:81:b2:90:f5:d4:cf:14:9e:61:76:43:87:fe:
7f:66:d5:41:81:0a:62:47:60:fe:57:b1:06:2a:e2:59:c8:2f:
33:c3:4f:d5:b9:d9:79:22:56:1a:c9:8d:04:59:0a:97:a1:32:
91:36:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:16 2025 by rpki-client