Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: EholGBgw1ON6tCaXC9ulqsOJFejoX14jcDkQkdGJL00=
Subject key identifier: 86:24:D2:9A:0C:F5:B7:92:5A:49:D5:AE:E3:BB:8E:31:F3:80:4C:02
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 01989712A4BFA280924D6BC499397CC36E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0A67
Signing time: Mon 11 Aug 2025 03:00:38 +0000
Manifest this update: Mon 11 Aug 2025 03:00:38 +0000
Manifest next update: Tue 12 Aug 2025 03:00:38 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: NWY/sCG/8GUWVTijNtyw2c9XzYLnYS2PObudk0KMF4g=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a4:bf:a2:80:92:4d:6b:c4:99:39:7c:c3:6e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Aug 11 03:00:38 2025 GMT
Not After : Aug 12 03:00:38 2025 GMT
Subject: CN=8624d29a0cf5b7925a49d5aee3bb8e31f3804c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:b7:42:d3:68:1f:21:34:45:8e:80:b8:3c:
0a:3b:ff:c5:81:87:a3:c7:90:bd:f0:d5:be:0c:f9:
9b:25:e1:4e:5c:84:e8:3e:2a:2a:94:9a:3b:87:7d:
d1:92:00:bc:89:a7:93:d9:a4:ec:36:b6:03:56:e8:
77:e5:22:d3:14:31:b0:61:a5:25:13:09:1d:52:4c:
bf:f5:9d:be:5e:7e:55:1c:fc:26:0d:06:0e:98:98:
a8:f4:18:75:af:ea:15:42:05:36:68:3f:07:30:d3:
21:1d:55:bc:de:48:58:9d:91:a9:96:7b:a8:08:eb:
81:20:64:32:43:38:11:f6:ee:a6:dd:7a:fc:f0:65:
7e:23:6c:84:ad:1a:62:7b:c5:c2:7d:65:45:cf:f6:
0d:35:b1:88:59:a5:11:1f:b9:c7:35:55:97:f4:ec:
3b:97:0d:68:27:2c:b9:c5:9a:09:44:f5:a3:70:24:
4e:54:67:ad:d4:0a:5d:e0:c9:47:e7:c3:88:00:68:
5f:af:21:00:f0:02:aa:4b:fc:cd:21:5a:c7:76:32:
7c:74:b9:8d:da:8c:ba:ea:af:85:a7:21:f0:bb:ae:
9c:80:0b:41:a8:8e:e8:87:a5:61:b6:30:85:8f:5f:
81:d3:97:96:0f:00:39:33:7d:43:ca:ff:84:61:56:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:24:D2:9A:0C:F5:B7:92:5A:49:D5:AE:E3:BB:8E:31:F3:80:4C:02
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:ed:6f:bd:b5:c9:8e:b6:d3:c4:e5:af:06:88:ec:e7:c8:
9f:54:44:d4:be:a1:33:6e:cb:34:ed:68:fb:e7:d8:d4:4e:3c:
e2:ca:44:f4:f4:da:b7:67:8a:4e:22:eb:19:00:4c:ae:4a:62:
46:87:1d:e0:d6:7f:a3:08:62:83:8c:ed:17:fd:91:b8:8d:63:
32:96:90:6b:b5:8b:8e:42:4a:e4:08:8e:86:00:2c:cc:15:ac:
14:60:ab:25:76:6d:45:35:8f:65:f4:ff:61:75:26:09:76:c6:
32:35:60:17:8b:93:f6:e1:64:8b:9a:07:98:b6:be:29:8b:49:
45:71:76:d1:51:29:b5:61:b0:01:9a:7d:fa:79:45:e5:2a:e0:
2c:52:b9:46:93:21:87:4e:d8:46:d8:0e:f4:20:16:4c:6a:5b:
35:54:b6:74:ff:f2:bb:2a:ed:fc:e3:24:08:14:50:a7:6f:73:
27:ac:2d:b1:be:35:69:e9:a6:77:45:1a:f7:a4:0a:fe:0a:09:
bb:28:a5:9f:20:ee:3b:9a:36:9d:84:1a:ab:6b:46:0c:93:47:
6d:79:b7:dd:06:82:37:93:31:ff:c1:10:46:3d:b1:a5:12:3b:
32:85:7c:5e:85:ba:15:b9:35:0f:bf:90:3b:d8:cd:91:4c:78:
d2:de:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:48 2025 by rpki-client