Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: h8E8N3KRSUuQaM3znbLNU2Ot5/ZE3lu7EJ3yG8JUvn0=
Subject key identifier: C0:34:48:91:ED:29:3D:20:B5:A7:0B:6A:24:C2:B9:96:20:C7:0A:2B
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019891EC3C92862F8D672FE7DE521B0FB8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 03:00:34 +0000
Manifest this update: Sun 10 Aug 2025 03:00:34 +0000
Manifest next update: Mon 11 Aug 2025 03:00:34 +0000
Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: Jvsu745EA2cC3Pf7tr+Sc6JUnZPsTwuCNpavis5VmcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:3c:92:86:2f:8d:67:2f:e7:de:52:1b:0f:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Aug 10 03:00:34 2025 GMT
Not After : Aug 11 03:00:34 2025 GMT
Subject: CN=c0344891ed293d20b5a70b6a24c2b99620c70a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:94:7f:4e:38:39:f5:97:a1:5f:c3:9e:05:
97:dc:3d:b2:30:5c:07:f5:24:fb:db:6a:4a:34:59:
cf:b3:6b:b1:e2:46:9c:bc:42:3a:10:bc:9a:24:56:
6b:13:ec:5c:79:c0:b8:98:c2:52:a3:b9:5c:f0:51:
27:32:02:12:fe:2a:3d:50:67:05:e6:63:7a:b7:59:
8e:09:ac:07:25:db:c7:f9:3c:03:0e:ce:9a:74:dc:
24:80:bb:1b:9f:a5:77:fb:cb:68:45:f7:2c:ff:92:
45:30:77:37:94:fd:d0:26:b7:41:49:34:04:1a:97:
29:39:d6:1d:c5:00:10:0c:25:c1:2c:bd:c7:17:1a:
e0:70:4a:0e:de:59:f5:f1:f2:e5:a7:38:60:5e:76:
06:36:ac:3d:5b:5b:62:e5:3a:68:f3:7d:6d:a4:a4:
3d:16:e2:aa:a4:73:98:aa:98:5e:84:f9:87:df:66:
27:c5:87:8f:de:27:7c:8a:44:c5:b3:5f:86:0e:5d:
db:a6:46:b1:34:b7:01:70:46:0a:69:9c:97:02:60:
e2:67:df:9a:a3:cc:e2:8d:e1:1f:39:f5:4f:27:7c:
e6:42:c3:fa:43:ac:c2:c5:70:1b:b2:92:d7:7e:94:
ed:4d:59:f1:d6:61:37:b1:78:ca:8a:fc:66:1c:f0:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:34:48:91:ED:29:3D:20:B5:A7:0B:6A:24:C2:B9:96:20:C7:0A:2B
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:58:17:43:70:20:39:3b:71:88:3d:f4:21:46:63:28:9a:56:
d8:5e:ac:4c:a3:c4:30:ef:90:20:4b:51:17:2e:ba:fc:97:ae:
e7:c2:0f:03:05:68:1e:8d:34:bf:ab:a0:04:3f:64:9f:55:7d:
3c:da:0f:c6:25:e1:b4:0e:89:84:7e:cb:a2:dc:30:c1:8b:a9:
20:b3:d6:2c:41:6b:de:9a:05:23:7b:7f:d7:fa:b7:71:a1:86:
3d:24:b9:29:7a:14:67:43:77:54:f3:8e:90:ce:7a:2d:92:df:
d2:48:5a:e4:94:5f:dd:6a:d0:65:fe:2d:2b:5d:72:65:d7:c4:
c5:6d:dd:ea:95:ba:82:5c:65:ea:7a:89:16:95:8f:ce:88:5c:
ac:55:11:a5:4e:a6:f4:58:da:af:76:27:71:c8:83:ec:6a:e9:
52:d2:93:80:0d:66:67:95:cb:9b:e0:93:52:fe:cd:5b:9a:fa:
ad:1a:f1:ab:4e:71:ff:67:3b:f0:43:d8:62:eb:b3:40:02:83:
88:90:49:df:ad:df:f4:30:a4:f0:ac:64:94:96:7e:1b:d4:41:
b0:cc:ad:c9:85:bc:76:02:47:7e:b6:ea:f9:8b:80:40:f0:28:
82:5d:6c:e3:d1:8f:b2:c2:79:52:66:df:77:41:6c:85:a1:0a:
52:1b:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:16 2025 by rpki-client