Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: Yhpmb7Oh3YVnI7s7e86HOk5TUk9GjBXh1bT3C+C/dk8=
Subject key identifier: B1:C9:FE:17:C0:E8:C0:8A:B7:C0:68:B7:B7:54:F6:25:86:E5:26:6A
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0198733D0C20E9A4D5F5A99AF4A20549CAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 152A
Signing time: Mon 04 Aug 2025 04:00:37 +0000
Manifest this update: Mon 04 Aug 2025 04:00:37 +0000
Manifest next update: Tue 05 Aug 2025 04:00:37 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: meKpO7RyLRsKf/DLGvKgXYwhhxx1IVl8ugSy8K4a874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:0c:20:e9:a4:d5:f5:a9:9a:f4:a2:05:49:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Aug 4 04:00:37 2025 GMT
Not After : Aug 5 04:00:37 2025 GMT
Subject: CN=b1c9fe17c0e8c08ab7c068b7b754f62586e5266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:26:d2:1e:48:d5:0d:e6:f5:04:ec:70:99:
50:bf:02:a6:9e:09:29:e1:de:7f:23:2d:de:d5:23:
0b:bd:8e:6a:f6:9a:f0:a9:78:9f:c9:37:75:a9:80:
78:ca:d4:5b:67:62:ea:f3:cc:8f:91:73:22:05:50:
2c:28:83:37:7b:f4:74:81:ca:2b:82:f9:0c:bb:4f:
2e:5a:78:05:0c:11:0a:c2:e8:4e:9e:26:1a:b3:ab:
5e:32:76:2d:38:d4:82:07:77:26:11:bf:43:60:b3:
09:32:79:e0:79:4e:d9:e9:d8:6b:fe:78:27:25:ac:
50:2e:25:8e:53:4f:61:4c:86:38:35:59:4c:a4:19:
6f:aa:24:b1:51:0f:b1:6d:7f:6d:cc:79:32:08:50:
15:12:fd:c0:19:51:39:d1:5a:68:f5:1b:d0:72:d5:
c8:fb:29:c5:8d:1c:22:16:c7:3c:44:d6:7f:bf:15:
80:6c:b4:3e:f7:0f:96:52:05:9b:78:37:2a:bc:3f:
d7:48:31:2f:5c:36:66:be:b2:c3:39:b2:42:71:50:
e5:bd:65:05:e8:14:6c:ab:45:89:ff:a5:4e:14:3e:
69:c3:63:2f:37:e9:4d:5f:c6:6e:ce:34:ed:2c:ed:
a3:fc:a4:d3:e2:3d:04:70:65:1f:26:4b:38:4b:47:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:FE:17:C0:E8:C0:8A:B7:C0:68:B7:B7:54:F6:25:86:E5:26:6A
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:31:7e:ed:fd:c5:1b:a5:e8:71:58:f5:b7:d8:34:20:65:3e:
e3:34:5f:e0:3a:6f:bf:fb:8b:7a:25:5d:c1:82:cd:bb:7b:fa:
01:49:ad:20:28:76:b1:05:ce:a3:6e:13:b5:01:1e:94:de:e0:
2d:84:7b:ea:09:50:32:d2:5c:9e:a6:54:40:09:ca:d4:5e:68:
dc:ba:99:0a:47:e3:be:14:5a:5a:e7:41:e7:2d:15:b2:18:f3:
f6:b3:15:0f:9d:f3:81:f8:d3:d6:b2:75:9d:ea:3b:07:73:ac:
b2:64:27:48:20:bb:32:f5:0c:24:5c:da:f1:c9:cf:a6:25:62:
88:e0:9c:18:9d:7b:dc:3e:ff:36:64:cd:cb:d8:ec:22:2d:81:
bc:9a:c8:e5:9a:fb:4a:88:0e:c2:4a:5d:47:5e:c0:3c:ed:8f:
5a:3f:26:24:3e:70:55:24:bf:3b:4a:72:2a:97:40:13:86:a0:
03:e7:79:79:80:fd:98:2f:e4:68:8d:53:6c:23:a4:0c:56:4f:
88:e5:c4:fd:0d:45:e2:f2:3f:b5:69:bb:2b:48:6e:34:90:8f:
55:de:7f:fb:4e:aa:cd:37:28:b0:f2:16:77:fb:5c:b1:8b:7b:
6a:e0:e6:1e:78:47:08:08:d1:c8:a1:38:d4:35:f7:f2:29:53:
bb:36:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:03 2025 by rpki-client