Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: 0ncEl+W9nwFdy2sAx5km/j4et0/17vQOj+hMdx2m8b4=
Subject key identifier: C6:41:43:DF:65:8F:C2:9F:AB:A4:8B:14:06:CB:2D:53:0A:CA:D4:CA
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0198884479F23F454652EF0E593A7926C3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 06:00:45 +0000
Manifest this update: Fri 08 Aug 2025 06:00:45 +0000
Manifest next update: Sat 09 Aug 2025 06:00:45 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: Nr8H4oZSdlRUVBugwF1ZhFhuHfbbjq9p3zgqnlRxN1o=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:79:f2:3f:45:46:52:ef:0e:59:3a:79:26:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Aug 8 06:00:45 2025 GMT
Not After : Aug 9 06:00:45 2025 GMT
Subject: CN=c64143df658fc29faba48b1406cb2d530acad4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:2e:3f:8f:65:80:a8:8b:2a:79:d1:43:cf:
7a:42:57:ae:00:49:9a:cf:57:0f:95:05:f2:3c:16:
9c:bc:22:46:f9:c7:11:46:3e:25:79:97:07:4a:a5:
d3:ca:c1:85:fa:4a:56:c6:bd:c2:bb:2c:cf:cf:e9:
7c:5f:82:f9:02:41:c7:00:64:09:ad:d2:39:7b:a2:
a2:22:92:ee:e6:a2:1b:26:59:4b:88:7f:46:fe:67:
51:cf:d6:31:45:77:39:5e:c3:a4:6c:ff:b8:a9:8e:
8d:d1:d1:d9:b9:25:2e:d5:e1:24:b0:99:f3:e9:1f:
fc:b6:03:ed:6e:29:e1:fc:02:a1:a4:c3:56:fc:7d:
3c:34:0e:88:c3:01:ea:68:a6:dc:9d:7f:4f:c0:5b:
73:e0:50:c9:a4:dd:fa:b5:a6:d7:b1:13:53:3e:5d:
25:ff:13:5c:f4:5b:e9:04:e7:90:cb:a8:d7:11:a4:
7a:3f:c1:28:04:6e:e0:f2:28:49:5b:69:19:23:74:
b1:a8:7a:b3:d4:42:32:98:45:af:e1:6b:14:a7:7a:
0c:d9:14:30:d7:2c:3f:81:36:19:5a:3d:8a:ef:d8:
1c:f5:7a:31:62:4d:90:cd:03:37:8f:f9:16:40:f9:
7d:8d:08:07:78:cf:f7:7a:1e:0c:d3:1c:8c:dc:c6:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:43:DF:65:8F:C2:9F:AB:A4:8B:14:06:CB:2D:53:0A:CA:D4:CA
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:67:d7:4a:2e:9b:d2:44:a1:29:79:08:0e:db:5d:99:12:e8:
6c:c5:53:3e:1f:9f:e5:3c:87:81:62:8c:a2:c2:39:93:01:2d:
64:80:16:37:df:34:8b:f3:42:8b:e4:74:9f:d9:b3:85:57:e0:
a9:2c:d3:8f:08:c6:74:9d:d8:92:c4:5e:26:b5:c4:b0:f3:7e:
71:c5:56:ed:bc:18:76:26:a4:46:22:ff:5f:20:78:1b:b8:26:
a6:59:03:95:3b:b5:53:54:b1:4a:83:26:09:b3:a7:e9:47:1e:
96:a1:a5:94:84:f5:79:cf:cc:6b:c6:ba:7d:34:18:31:cd:3b:
f5:09:af:a3:a0:88:7e:81:52:5c:80:d5:96:2c:4d:5e:45:56:
2b:45:0f:b3:a8:20:2f:a2:bb:89:3b:59:93:78:f7:71:68:59:
ce:21:7e:ce:37:1e:f9:67:19:5f:f0:a5:9b:f8:d8:0c:fb:49:
28:b4:dc:c8:40:53:58:da:ee:45:8c:57:8f:c9:4b:fc:4f:8d:
d4:4b:7d:57:1a:d5:9a:07:e5:db:97:1f:1c:26:a0:49:bd:d0:
f7:5a:5a:f1:0d:13:13:c3:3c:d5:20:45:94:9c:47:0a:43:04:
b8:6b:61:f5:20:b2:15:06:db:f9:6a:a5:35:34:bc:31:97:c8:
d4:a3:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:14:34 2025 by rpki-client