Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: 6RRVTIKguMNZtAEkEZgiPbCp0hqz37QSBbyGp6HsdEQ=
Subject key identifier: 46:31:B2:35:B7:0D:8B:01:A3:EF:AC:F9:17:36:8E:C0:0D:A0:D9:68
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 0198789B2E0350B5E72E04AB54029A6C3857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 15AA
Signing time: Tue 05 Aug 2025 05:01:32 +0000
Manifest this update: Tue 05 Aug 2025 05:01:32 +0000
Manifest next update: Wed 06 Aug 2025 05:01:32 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: 5W6dEm4Eyh1jSFWVitzoRWEBdvgDYVvaVgphGhqHcU8=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:9b:2e:03:50:b5:e7:2e:04:ab:54:02:9a:6c:38:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Aug 5 05:01:32 2025 GMT
Not After : Aug 6 05:01:32 2025 GMT
Subject: CN=4631b235b70d8b01a3efacf917368ec00da0d968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:31:d8:49:1d:51:58:d9:e7:d9:69:4f:c3:
28:ec:f7:8c:2b:07:25:73:96:ff:c2:bf:fe:4c:c2:
6e:3f:9e:bd:37:7d:79:8c:f8:b1:7e:c0:71:0b:a9:
0b:ec:d4:c6:f8:23:0a:30:19:ff:90:a0:58:44:7c:
a9:cd:00:9b:e3:c9:a2:94:10:3d:f9:be:26:fe:24:
52:9c:5c:99:6e:fc:fb:2b:3d:7c:9a:4a:bf:9a:43:
7d:59:99:57:fb:50:d1:01:bb:75:51:48:76:23:c7:
af:65:21:e5:bc:28:5c:52:e5:07:4e:d7:f3:e3:1f:
bf:c7:89:42:13:50:a9:7a:ea:49:1b:2d:b4:2f:4c:
aa:d4:20:3f:51:fd:46:24:2a:9a:60:37:8f:6e:e8:
62:9a:d9:79:8e:a2:2d:2d:f6:3a:44:5b:de:96:47:
95:b3:14:ac:c1:94:9a:0b:4a:dd:3d:ad:4e:39:bd:
5a:de:4d:d6:6b:a4:fd:ae:fd:c5:0f:5b:55:81:00:
d4:a2:a7:5f:1f:5c:b8:98:71:92:bf:52:72:e4:ab:
fb:1c:3f:50:b9:a5:42:11:c3:78:18:22:05:25:0a:
ed:7f:8f:33:f5:24:ed:21:2b:0a:2f:a8:3a:79:91:
16:40:70:bb:3e:6d:b4:a8:a2:8e:50:c7:d2:d8:a1:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:B2:35:B7:0D:8B:01:A3:EF:AC:F9:17:36:8E:C0:0D:A0:D9:68
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:86:b5:00:7c:49:f7:d4:4d:22:3a:19:4a:05:36:1d:63:56:
ac:92:0a:62:db:b8:d2:28:bd:a5:31:81:d2:e7:ea:66:27:48:
13:78:de:12:48:1c:d2:5d:46:49:09:fd:49:67:5d:e3:cf:20:
b8:11:78:e9:0f:71:79:2a:75:6e:34:03:35:02:ea:9d:14:05:
0a:2d:42:50:4f:f9:e0:00:bb:c1:c8:bd:aa:e9:9c:3f:f2:df:
f8:b9:00:4a:0a:d1:b0:5b:58:c6:57:be:41:0f:55:fa:a3:6e:
72:99:fc:4b:d4:83:f0:44:4d:a8:61:51:43:c1:4a:38:81:0a:
34:a8:b8:85:40:27:aa:72:85:fe:d8:09:00:7d:24:00:f9:8b:
e2:e0:b6:73:ce:fc:65:da:22:52:d0:9a:40:4e:e1:2b:ff:ed:
37:14:7e:a9:7b:70:34:6c:14:79:0e:30:b3:f9:2e:84:5a:b5:
95:6f:4e:93:db:ca:bd:dc:51:b7:a2:dd:ae:e9:e3:fb:2b:bb:
ea:9b:29:a9:39:3f:18:aa:b9:ab:3a:24:1a:92:05:ef:e9:19:
1c:0c:75:91:2e:fe:b9:07:33:e2:0f:4f:d4:33:e5:8d:00:b3:
c7:a4:2f:55:51:6f:8d:fe:fe:3a:9c:0b:b9:5b:60:fc:97:cc:
22:5c:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:11 2025 by rpki-client