Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: Rg+Lf2/+HRcoSXXI3borIxUtvFnzbmOkEH+NNyMBeH4=
Subject key identifier: F2:42:71:19:6B:87:50:45:47:13:AF:75:D9:9D:FC:BF:50:AA:B2:6D
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 01989749B423F4DCCB5361D0015FFBD07782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0DEA
Signing time: Mon 11 Aug 2025 04:00:46 +0000
Manifest this update: Mon 11 Aug 2025 04:00:46 +0000
Manifest next update: Tue 12 Aug 2025 04:00:46 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: +bBru5CZ3sGhvV0Yer9rujLc4zkDz3+XnZJKNpqQH/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:b4:23:f4:dc:cb:53:61:d0:01:5f:fb:d0:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Aug 11 04:00:46 2025 GMT
Not After : Aug 12 04:00:46 2025 GMT
Subject: CN=f24271196b8750454713af75d99dfcbf50aab26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ad:af:30:56:5f:3b:96:7c:e9:2a:fd:e5:50:
2d:67:b0:39:6b:e9:df:0a:d6:dc:db:02:73:32:dc:
05:1c:a4:0f:e1:3e:d0:0a:c0:89:5c:8d:ab:1d:73:
e1:15:c0:57:63:fa:81:1c:89:aa:4b:1c:04:df:22:
e5:63:23:42:b1:4a:9c:30:ba:8c:c7:10:90:a3:96:
de:49:d4:51:f6:09:f5:ce:54:4d:c3:46:75:6b:0d:
f1:60:20:f1:c3:16:cb:77:67:a3:6a:70:29:77:f6:
49:fa:24:70:08:05:ef:3c:7b:81:3a:5f:41:0e:fa:
f1:33:f6:b6:3a:13:2c:2f:6c:93:00:06:9b:59:e9:
c3:c0:f2:65:ed:b2:ef:68:98:31:e7:f0:b9:4c:d1:
1c:9e:d8:b0:5e:4d:ff:7b:07:dd:e5:2d:e2:41:53:
1c:d9:48:3e:af:86:6c:22:1f:92:b0:eb:79:0a:c2:
04:a9:09:d8:26:cb:08:8b:8d:67:ce:c2:e7:38:65:
d0:71:7d:a5:dc:8e:a8:7e:03:a6:3a:85:b2:4f:e6:
2c:43:de:d2:6f:f0:52:c8:86:b5:e1:e7:73:90:7d:
67:78:c6:fa:53:5c:04:7f:3d:a4:ad:b8:00:af:36:
fb:4f:94:7f:15:fd:5e:87:15:f8:5d:79:a0:e7:e4:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:71:19:6B:87:50:45:47:13:AF:75:D9:9D:FC:BF:50:AA:B2:6D
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:a9:c1:c5:98:86:ac:22:fc:ce:cb:82:b6:ec:b1:04:4f:
7c:68:9e:f0:86:32:fd:d8:00:04:76:66:25:3f:95:39:f0:d9:
70:91:bd:c2:3b:85:de:e5:61:a4:b4:f7:dd:4f:68:a5:11:f4:
20:88:11:1d:0e:c9:91:dd:1f:df:06:eb:f8:af:d8:01:8f:21:
48:d6:73:f6:25:a8:72:fa:0d:9b:15:14:9d:18:da:54:cd:f0:
de:89:09:92:8e:25:44:8c:ab:8c:ea:0f:32:85:da:70:15:bc:
19:a3:4b:e0:cd:b5:08:42:65:e1:37:b2:bf:d1:eb:0e:c2:e1:
a9:38:72:72:94:9e:eb:8d:4d:b3:dd:c1:c8:98:e3:3b:08:50:
41:c6:18:26:cf:90:e5:af:38:c7:59:83:3d:fe:5f:23:5c:17:
f8:f0:2e:a1:6d:53:0d:7a:42:66:32:72:1e:38:27:e5:5f:40:
ec:66:15:fc:de:52:be:b1:c4:bc:80:d0:84:d9:6f:6d:cf:75:
6f:0e:57:c4:92:09:73:d9:8d:ae:9a:bd:ee:7c:44:dc:d8:a3:
c7:fc:be:bd:0d:c4:18:81:02:6e:18:49:2a:50:13:94:7c:22:
e7:25:03:28:76:d2:30:45:36:11:02:56:42:2a:b7:86:88:ac:
a2:3e:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:00:37 2025 by rpki-client