Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: vu2WzKKIDvr3s159gcTYW8J3kPQADbvbzteV7O08/fc=
Subject key identifier: 6E:C9:33:A4:0D:2B:7E:F3:E3:5D:FA:F1:AD:00:9F:2E:15:FD:8A:32
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 019878D1B3C55B161C21F1890BC183D57BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 06:01:05 +0000
Manifest this update: Tue 05 Aug 2025 06:01:05 +0000
Manifest next update: Wed 06 Aug 2025 06:01:05 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: 01eaeOgsZfdm5faV0F4mXFt0QLvhV8iLvfLQONp53lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:d1:b3:c5:5b:16:1c:21:f1:89:0b:c1:83:d5:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Aug 5 06:01:05 2025 GMT
Not After : Aug 6 06:01:05 2025 GMT
Subject: CN=6ec933a40d2b7ef3e35dfaf1ad009f2e15fd8a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:59:16:77:19:80:e9:3d:ec:83:38:de:8b:
ed:fb:a6:5a:d3:e2:fb:c7:6c:2c:e2:74:8b:a3:fe:
57:3e:75:d7:aa:93:ad:56:df:d7:83:14:ce:bd:2f:
d7:61:39:72:0b:b8:24:fb:05:f4:95:d2:ba:fe:7f:
d1:09:62:a1:11:b5:71:9e:76:ec:19:8c:e8:33:ee:
c8:5f:de:35:c4:f8:89:eb:a4:f3:98:52:09:03:69:
27:ee:95:27:12:e4:fb:a8:9a:6e:d3:36:54:b9:6b:
51:9f:46:ad:37:be:bc:bf:09:f8:09:b8:a7:dd:ed:
bd:92:9a:9a:45:36:8b:1b:d2:7c:40:74:37:87:09:
9e:5f:d3:26:ae:fc:c1:e8:d6:af:1e:51:2c:1e:64:
1f:1c:cc:43:a0:6e:16:bd:23:ef:77:a4:84:51:11:
44:e5:84:06:b8:ff:a7:33:45:4e:d7:ce:74:ae:60:
ed:9f:2f:a8:fd:0a:5c:22:1f:c4:a6:39:39:78:d5:
9a:ed:f4:ef:97:74:37:8d:ae:41:7e:c9:d8:aa:e5:
ea:eb:c9:eb:52:53:9f:75:1b:dc:41:b0:68:87:e5:
26:d7:09:b1:28:f8:d5:11:82:4a:fe:77:65:c5:41:
6a:20:f0:c4:5a:13:7b:c8:88:e2:55:a5:0a:5d:81:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:33:A4:0D:2B:7E:F3:E3:5D:FA:F1:AD:00:9F:2E:15:FD:8A:32
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:31:6c:8b:26:08:3f:b2:27:75:9e:bb:51:41:07:66:e0:
60:8e:52:7d:6a:69:9b:02:cf:5c:9e:91:96:3f:62:85:59:09:
09:41:da:39:31:5e:3a:c2:ac:7d:e5:6a:d5:67:f5:a7:97:51:
d6:13:3d:de:70:f4:c6:9a:a4:e4:be:00:35:5d:b7:2a:3c:51:
5f:0c:4c:a5:7a:5f:08:98:78:2d:bb:16:5d:61:03:c6:f4:87:
93:3d:5b:98:45:f0:ff:c8:4c:c6:1f:38:49:e7:f1:91:4b:49:
6a:a0:be:b7:f8:6a:ef:f2:de:be:43:51:90:c0:9b:a0:5e:9f:
b1:09:1c:e3:7d:7f:84:af:20:2e:f6:70:48:1a:9c:2a:c4:df:
03:8a:b7:38:f8:2a:41:db:4a:0e:5c:64:92:68:a7:da:37:f4:
53:e7:ac:35:9c:56:4c:86:5f:d5:66:22:1c:72:07:4b:b4:aa:
3b:51:f1:a8:3a:eb:bc:9f:00:a1:8f:ab:b4:4a:35:af:42:f9:
fa:cb:44:ba:41:4a:81:27:5b:4f:57:00:90:e0:db:d3:37:a6:
80:e2:1c:8a:50:d5:ad:69:a6:97:36:15:56:a4:8f:71:eb:54:
26:fe:44:84:76:4d:cf:14:36:2f:c2:3b:25:22:a3:a9:b9:d9:
80:8d:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:06 2025 by rpki-client