Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: KBNRokwjCB9nu22y2SdLykLoY3L9ZD91/Hwm1xc4gYw=
Subject key identifier: 42:15:C4:21:9E:08:06:02:0B:4B:FD:19:F9:00:58:17:67:29:F2:59
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01987B9C48EED506732F16F37CFC79B211C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 19:01:36 +0000
Manifest this update: Tue 05 Aug 2025 19:01:36 +0000
Manifest next update: Wed 06 Aug 2025 19:01:36 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: tyAp+LSEHNWjn09Pfyrlbl5xwQPmd6zMZ7lfolYpyLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:48:ee:d5:06:73:2f:16:f3:7c:fc:79:b2:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Aug 5 19:01:36 2025 GMT
Not After : Aug 6 19:01:36 2025 GMT
Subject: CN=4215c4219e0806020b4bfd19f90058176729f259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:de:13:1e:84:65:eb:d1:09:27:eb:a7:40:
f2:fa:9f:7a:c1:1c:c7:85:50:4a:e2:5f:40:87:f3:
e0:dc:e5:dd:60:9e:dc:7d:42:0f:7e:68:55:48:76:
32:97:e0:42:70:74:66:8b:2c:7a:43:3b:03:e1:7a:
f2:29:06:5a:d7:c6:be:e9:aa:63:91:bd:78:d4:1b:
00:15:a6:95:39:e6:87:52:30:c0:48:8b:ac:6d:d0:
ef:e0:a0:38:14:89:8b:8a:2e:c8:c6:92:a4:4c:39:
04:b2:c5:1f:17:0e:dc:dd:29:22:ce:cd:04:65:f4:
05:d5:e6:d0:dd:1f:5d:9b:57:d1:3e:da:20:1a:92:
bc:4a:af:26:99:51:26:bf:4b:af:ce:78:83:70:06:
72:68:ff:02:cb:d3:81:15:ab:e8:5b:15:a4:ef:7f:
c5:29:7a:ed:23:0f:b9:44:c2:f7:fa:0a:a5:00:62:
98:15:b6:d2:b3:3d:38:52:5c:7c:52:af:92:f2:07:
46:21:bb:ba:2c:e0:02:06:1d:2b:49:ab:61:a9:b3:
d7:e2:ca:0c:9b:69:21:c4:13:00:46:0b:bf:9f:23:
76:00:98:2b:2a:5a:d3:46:2c:6f:95:24:e8:75:2d:
e9:59:b3:f5:9d:97:88:6d:ca:f7:d0:cc:01:62:72:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:C4:21:9E:08:06:02:0B:4B:FD:19:F9:00:58:17:67:29:F2:59
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:0a:55:70:38:5e:51:ca:22:a4:7a:da:71:1f:eb:30:aa:
23:ae:9a:60:31:79:dd:22:89:1a:0d:e3:22:7d:9c:6d:cd:c7:
dc:2f:0b:16:f2:81:c5:b8:9d:97:00:32:3d:bc:8b:d0:ff:72:
1b:b1:a2:8f:f6:40:7d:6f:6a:8b:6b:b7:45:68:5b:97:9e:2f:
e2:f2:7e:33:4d:97:3c:38:4f:8a:93:34:1b:dd:61:0e:73:c6:
9e:8d:8b:ea:ee:10:03:b1:c1:18:bc:64:d1:ec:51:31:da:9e:
f6:58:31:74:b0:32:9a:61:76:c1:04:7b:d1:a0:3c:43:b6:e2:
d1:83:33:1e:46:bc:68:59:ed:6d:9d:98:9a:2c:12:d8:73:2a:
d9:f1:42:1c:f4:24:fd:20:3c:fc:b4:14:c4:9e:1f:2e:fe:bf:
f1:4f:e3:c5:b5:32:af:4c:9c:bf:bb:1e:24:d7:3e:f8:75:89:
cd:48:9c:cd:82:6f:d0:78:b7:e7:d0:32:b5:93:5a:15:f1:d2:
81:3b:93:bd:91:30:04:bb:62:c3:78:ee:63:ee:55:ad:74:96:
c6:d9:1f:94:06:6f:ae:07:0a:a5:e5:c5:fb:d3:2b:8d:3c:92:
9a:4d:30:a8:73:89:9b:76:32:d5:5e:87:e2:52:71:3b:c6:4b:
d6:19:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:44 2025 by rpki-client