Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: iJIjOcl3Scv4DWBQedYxdpmnmu2AXzdJkXv2k+VVjlU=
Subject key identifier: A7:D4:F3:6C:25:72:E8:07:50:6E:14:6A:2B:3E:6B:12:4C:F8:A3:F0
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 01987DC0AEACC8C31E603005363D269895A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0DD2
Signing time: Wed 06 Aug 2025 05:00:36 +0000
Manifest this update: Wed 06 Aug 2025 05:00:36 +0000
Manifest next update: Thu 07 Aug 2025 05:00:36 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: L29NkomK//SYYzmbs1BfMkCckHUDrdaZ+vlcyfwluNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:ae:ac:c8:c3:1e:60:30:05:36:3d:26:98:95:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Aug 6 05:00:36 2025 GMT
Not After : Aug 7 05:00:36 2025 GMT
Subject: CN=a7d4f36c2572e807506e146a2b3e6b124cf8a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:c6:a9:e9:8e:55:cb:c9:e6:4f:fd:62:6c:
26:b6:cb:e8:20:8c:14:93:ee:23:30:15:2f:ee:c7:
be:78:28:ed:dc:b0:0c:11:1e:8c:ba:c7:b4:0e:42:
a6:1e:83:07:76:ff:6f:52:92:72:04:cb:5c:09:55:
6d:14:d6:0b:f7:a3:31:b5:3d:00:2a:ac:27:de:30:
fe:9f:74:d6:07:a3:4e:7d:79:bb:7e:fa:e2:8c:37:
7f:56:38:40:83:18:71:cf:7f:50:51:7d:c4:ee:d8:
cc:da:bf:24:05:54:47:f1:8b:c9:b7:54:75:78:97:
53:5a:5b:6d:f1:c0:72:2b:47:42:1f:2b:0b:10:da:
81:6c:b1:19:e1:2a:8a:97:66:f9:45:22:2a:48:1c:
45:59:06:4f:15:6d:da:7d:22:75:b0:6f:43:67:05:
e1:03:50:76:a3:3a:55:b1:f6:91:29:8d:fd:d0:87:
96:7f:b3:bc:3d:c2:46:4f:db:bf:df:fe:ea:65:e0:
d8:3d:d1:e4:1a:0c:22:99:70:41:b8:da:fe:1a:bd:
24:23:4d:ee:3c:29:07:31:15:b7:2b:01:e8:3f:d3:
5c:35:53:14:0a:6f:62:63:24:f9:a7:cd:aa:df:f0:
39:90:c2:47:a1:99:29:82:2a:98:40:86:24:65:62:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:F3:6C:25:72:E8:07:50:6E:14:6A:2B:3E:6B:12:4C:F8:A3:F0
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8f:d0:fd:69:bf:68:c1:d8:c5:7c:42:66:aa:8f:3f:cb:ea:
da:a9:59:fe:79:a1:67:25:d1:f6:3c:ed:77:52:f1:39:79:91:
87:55:9b:2a:34:59:a1:0b:0d:6e:6d:b4:5b:fa:dc:a8:6f:ad:
6f:6d:5e:67:1b:80:d7:4b:9b:d7:cf:5a:a8:5a:15:c9:3a:8b:
75:2c:aa:54:93:3d:3d:dc:6b:23:49:ea:55:25:e7:54:be:10:
9b:55:e1:7a:45:38:03:bf:40:37:28:f7:74:5d:f2:13:27:51:
00:ed:be:cd:11:b6:bb:b2:35:c9:c9:de:bc:20:32:00:53:3e:
ec:53:84:39:9c:9e:cf:65:76:b2:dc:a1:a9:37:fc:52:f6:df:
e3:d3:46:c7:62:32:ac:23:fc:f4:c8:9d:6f:ea:7a:06:11:0b:
ee:72:6f:0b:cb:ac:fc:5d:d0:1d:29:58:e5:24:76:d6:9c:4d:
aa:c6:b0:68:e8:59:6c:df:42:01:75:c1:0a:64:05:f9:fe:12:
42:7b:71:a9:11:17:82:7d:82:00:a4:36:c9:78:a8:80:dc:e5:
74:d7:ee:e3:85:81:17:f7:f0:3a:87:3a:01:30:e1:1e:93:43:
5c:48:a4:64:36:68:4a:1a:30:06:b2:cf:f7:64:d0:ac:3e:6b:
80:37:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:15:30 2025 by rpki-client