
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: OxDupMsTYqz/Fw3H4jgFZe5SarxIHVaCkLoTPz/DxT8=
Subject key identifier: 03:82:66:1B:B6:40:A5:99:35:A6:C9:C7:B7:94:5F:7E:4B:93:42:AE
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01988BEA90AE91821C41A4959A0C75F71ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 23:01:02 +0000
Manifest this update: Fri 08 Aug 2025 23:01:02 +0000
Manifest next update: Sat 09 Aug 2025 23:01:02 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: FHsHc4dj2qXM/iZLCKRIsi4Tf7sh86XGYD6ycn0Jhu0=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:90:ae:91:82:1c:41:a4:95:9a:0c:75:f7:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Aug 8 23:01:02 2025 GMT
Not After : Aug 9 23:01:02 2025 GMT
Subject: CN=0382661bb640a59935a6c9c7b7945f7e4b9342ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:e8:65:e3:96:8d:7d:33:a1:4b:76:a9:e0:
9a:59:32:1e:ea:7a:71:c4:1d:08:a3:6e:75:55:7b:
c9:63:e7:69:8f:3b:14:02:f9:d0:fb:2f:36:48:67:
5a:02:93:af:f7:47:c1:28:1c:60:9b:66:fc:78:dd:
ee:f6:5a:af:9c:89:c3:59:5c:c5:a8:73:a3:db:4d:
19:ee:27:69:78:3e:ae:32:0f:a4:a3:b1:4c:c3:d9:
a9:64:b7:99:0d:3a:7c:cc:e3:20:89:86:37:80:d2:
99:aa:76:d2:63:aa:e1:43:71:35:44:51:6a:35:42:
b5:91:1a:52:2d:fb:3a:53:35:f4:dc:83:7c:09:77:
3b:71:6c:81:33:7d:59:62:a5:a4:a5:4a:ec:db:f0:
58:90:27:71:41:25:4d:42:b2:27:96:09:7a:5d:6c:
e2:88:27:37:be:83:df:4b:29:35:c9:b9:23:e2:d5:
49:03:a5:9e:ff:8b:b5:a5:95:e3:e3:de:e3:50:27:
ad:a5:58:76:a3:30:fc:f0:2e:78:0f:e2:0e:ad:e0:
68:90:7f:7a:e2:61:24:d8:a9:03:3c:23:2a:04:35:
e1:2e:e4:5b:f3:91:f9:6a:87:30:2a:ee:ff:3f:fb:
9a:3b:a7:b8:1c:53:c0:c3:96:f1:c4:9d:cc:b5:70:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:82:66:1B:B6:40:A5:99:35:A6:C9:C7:B7:94:5F:7E:4B:93:42:AE
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:ac:ea:99:26:4e:ba:57:f3:5c:d6:75:f6:d7:1f:ed:83:
27:bd:fc:04:c7:53:c3:73:fc:8a:e4:bf:6e:90:7f:ee:51:cb:
57:9b:34:69:5f:39:5e:e9:16:01:b3:1c:f7:fa:4c:88:43:8d:
28:ed:75:03:d8:3b:69:8d:6b:93:c2:c2:33:bb:75:80:47:98:
30:5c:45:05:8a:e7:3b:51:6e:ac:5d:dd:9d:77:ca:8c:7d:82:
6a:4b:97:8b:c4:67:fd:75:36:0e:60:e6:c4:6b:32:e8:6a:51:
93:d9:85:f5:80:24:c7:6d:27:be:fb:36:66:be:2c:3f:38:8f:
03:73:73:61:17:26:52:94:9a:3a:3b:48:76:52:e1:8c:24:b2:
66:0a:eb:4f:2d:88:5b:d2:21:b5:17:80:74:08:64:24:24:ff:
9d:a6:d4:e8:f3:4b:d4:b1:34:85:7f:37:fa:4a:52:12:15:57:
ed:b5:1b:d3:30:fa:21:ee:bc:01:9f:ac:73:10:cb:77:7e:77:
eb:f8:42:b9:d3:2a:1c:56:48:5e:35:f1:46:a9:17:a1:11:61:
54:11:77:57:85:4d:d4:60:da:ff:c5:3c:0d:42:33:0c:61:31:
1d:8e:7d:3f:df:fc:43:29:c1:60:7f:b7:dd:37:42:77:69:40:
fa:04:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:38 2025 by rpki-client