Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: OUG9ITjb2UxIwXGGWB3kPVLjbIoyo53FyRYhb9S5Ock=
Subject key identifier: C6:B6:9C:39:08:AC:D7:E1:1D:FE:6A:0A:2F:8B:DE:5E:AA:00:E8:98
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 0198737404A86FAD6E8B9E8CF1DD4C8252B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 0DD3
Signing time: Mon 04 Aug 2025 05:00:39 +0000
Manifest this update: Mon 04 Aug 2025 05:00:39 +0000
Manifest next update: Tue 05 Aug 2025 05:00:39 +0000
Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: UgphyNPtlqXuuBk9kHVgK44rkIG53m2hOWURAeF0Tdc=)
4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=)
5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:04:a8:6f:ad:6e:8b:9e:8c:f1:dd:4c:82:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Aug 4 05:00:39 2025 GMT
Not After : Aug 5 05:00:39 2025 GMT
Subject: CN=c6b69c3908acd7e11dfe6a0a2f8bde5eaa00e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:c8:d8:ba:b8:60:75:28:eb:8f:8c:15:0a:
fd:c7:cb:69:da:dd:ae:10:eb:b6:00:41:fd:c4:8b:
93:af:f9:5a:4c:29:89:36:f3:32:e2:14:46:19:21:
8e:4c:0c:db:e0:13:5e:57:77:3b:bc:e3:cd:1d:2e:
d7:a5:d0:6d:a8:4f:10:52:0a:7f:f9:81:c7:dd:03:
26:da:32:67:0f:95:a0:cb:02:b1:a3:ff:9e:ca:9a:
4b:08:18:9b:3a:2b:c0:f7:3a:99:e5:16:1d:6d:ef:
39:1e:90:0f:b0:9a:25:de:97:4a:5f:8b:42:97:74:
23:15:4e:4a:49:84:55:a3:02:c1:05:e8:be:27:97:
0f:79:58:96:82:85:5c:c9:5d:d4:a1:1f:43:e8:ed:
9a:e6:a8:9b:da:d6:06:96:82:28:f6:9b:d5:97:29:
cb:69:be:32:c0:bd:78:61:6c:22:7c:6a:ab:0b:2f:
63:27:5d:98:3e:2d:92:d0:10:5d:fb:31:e0:11:e1:
2d:c8:92:65:65:c5:49:73:a0:9a:d2:73:6b:91:79:
21:91:f2:69:99:9a:67:f3:6c:63:e6:e7:ba:cd:34:
f9:8e:88:4d:85:99:bc:a6:2e:24:60:6c:bf:ef:b1:
35:8e:39:51:a0:22:42:d9:be:19:8c:7b:a4:89:18:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:9C:39:08:AC:D7:E1:1D:FE:6A:0A:2F:8B:DE:5E:AA:00:E8:98
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:65:28:1d:46:91:99:6a:7b:01:dc:ee:7c:f4:dc:dc:f6:
82:cf:8e:fb:32:65:37:55:2c:e1:4d:a9:1c:73:3a:6e:ed:1b:
d1:fe:d1:01:80:b6:da:ac:cf:59:d1:4f:6a:6f:88:7c:95:f8:
fb:5a:79:4b:5d:28:13:71:7a:b5:5c:2a:b7:69:6a:73:2d:d2:
a1:6b:95:b8:a9:91:46:6e:0f:98:15:4d:1c:75:8c:bd:b1:df:
ef:85:41:1a:9b:87:d7:14:b4:e7:69:b4:52:e7:9b:9a:cd:47:
53:5d:0a:25:7a:8e:d3:39:ac:5f:b6:f1:ca:5c:e7:8b:f9:8b:
e4:9b:c7:35:d8:ce:14:bc:36:b6:40:7f:2b:44:3c:6f:4c:95:
da:aa:ea:1f:4f:21:3a:de:4c:a6:2a:74:27:75:2e:44:10:2a:
28:ee:55:82:e1:7a:57:c7:86:55:81:13:dc:69:31:0f:dd:59:
68:f2:9a:cc:96:f5:1a:c7:c6:b6:19:8f:fd:83:7a:04:37:c5:
b4:e2:90:2a:a6:ec:ba:d9:7a:98:5a:cf:11:c3:9d:3f:3a:b4:
9f:e2:87:4b:34:ed:a5:7d:4f:e0:29:ff:84:f4:c6:44:20:42:
6a:b0:b7:31:46:e4:76:cd:9b:6e:df:5a:81:74:eb:3b:93:4d:
e9:0f:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:36 2025 by rpki-client