Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: MJMKEUKd9b9zXLP4Vx+W/4UyVi4X16u4MEAvD4/f6PE=
Subject key identifier: FA:7E:E2:E7:48:45:A8:07:83:40:7A:2B:62:6C:E1:75:2F:11:7F:C9
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0198906B9AF67F5B95EA977F0C8EB5492A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 20:00:27 +0000
Manifest this update: Sat 09 Aug 2025 20:00:27 +0000
Manifest next update: Sun 10 Aug 2025 20:00:27 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: zdAyGKyfVS773od9KeCknahB/iAQQMOxufoc7YUGTJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:9a:f6:7f:5b:95:ea:97:7f:0c:8e:b5:49:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Aug 9 20:00:27 2025 GMT
Not After : Aug 10 20:00:27 2025 GMT
Subject: CN=fa7ee2e74845a80783407a2b626ce1752f117fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:82:7d:0f:f7:b1:09:14:ca:f4:bd:0a:92:
43:34:76:5b:96:86:0b:71:b1:2b:51:73:ff:25:1f:
c2:69:66:97:2b:60:2d:22:6c:fd:6e:b6:96:3c:25:
78:4b:ba:49:2b:69:ee:46:59:ca:e1:0c:28:47:ac:
4e:58:fb:ed:84:e3:86:6e:9e:05:d8:fc:6c:53:ba:
14:1f:71:8e:cb:43:ef:73:4f:25:cb:90:a6:9e:e1:
76:1e:37:10:00:28:a8:13:dd:dd:67:7b:d6:3a:3a:
9f:21:b1:75:7d:18:f5:ba:e0:b0:fc:39:1e:14:e1:
bf:ef:ac:ea:76:00:b8:19:89:e7:ee:42:e1:2f:f7:
93:61:7b:2b:e4:0a:70:f0:ec:94:7a:9c:ba:d8:a8:
0f:8c:e9:90:ca:ff:c3:df:92:84:0a:0b:1d:38:43:
59:56:0f:27:41:2e:77:8c:e6:ce:5d:6a:1e:00:b9:
87:ee:aa:07:93:bf:0e:2f:6b:12:45:bf:6c:91:3b:
b3:c9:81:ca:71:33:3d:fb:d3:b5:b1:5b:42:18:84:
dc:a6:7b:c7:5f:c5:40:f4:6c:2b:41:a2:6f:f3:f9:
f5:28:da:7f:fc:3c:4b:53:89:dc:79:5e:9f:a9:f9:
05:17:6a:40:42:06:ae:52:e7:2b:9f:e2:df:98:07:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:E2:E7:48:45:A8:07:83:40:7A:2B:62:6C:E1:75:2F:11:7F:C9
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9a:33:f7:c0:91:7b:70:e6:84:43:1f:06:ed:d1:37:bd:13:
73:ee:5e:c1:60:9a:0f:3e:3e:f2:1f:4e:ae:fe:fe:d1:5f:a5:
0e:db:49:c3:67:45:85:9d:1a:8a:bc:e1:50:58:54:b9:a4:ef:
5e:d1:1e:f8:97:bf:51:24:b5:67:79:3e:34:0e:fa:22:0a:f6:
7e:d2:3e:8e:96:ef:c7:97:fa:22:70:7c:3a:09:56:ec:14:91:
83:a6:7b:ed:8d:ef:67:3c:95:68:c1:09:46:c7:82:af:52:81:
d3:d8:9e:c2:ed:81:19:ad:39:62:5a:1e:c3:41:43:65:eb:0d:
b1:a1:0d:61:02:07:69:e8:4b:0f:31:0a:8b:06:da:2f:2f:cf:
e3:11:5e:c8:5e:ad:58:4a:44:05:78:da:4c:76:44:44:23:10:
b7:f8:ff:37:a7:ef:ec:18:7c:73:c9:f4:c5:08:64:97:5b:27:
48:38:d2:1a:21:e5:ac:62:9e:ff:74:6a:bb:b0:b7:03:72:cd:
d2:0c:28:9c:34:d7:59:0a:86:55:34:56:7b:8a:32:35:35:3f:
33:bc:1f:19:c2:4d:00:83:59:1d:eb:77:a0:30:f1:d6:b6:bc:
d5:f3:63:71:5e:39:12:a7:e0:04:e7:06:c2:a9:dc:22:32:4b:
ed:b7:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:14:01 2025 by rpki-client