Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: GAwBXVqHuv9rYh6gd3OnUcoAZ+MvROSZl0olNYab3Xg=
Subject key identifier: E6:D3:C7:3B:33:45:18:74:28:1D:DB:00:84:16:F5:AC:FE:D9:98:0C
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 019888B2569A843B46CC0DD4122C672C5250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 1283
Signing time: Fri 08 Aug 2025 08:00:45 +0000
Manifest this update: Fri 08 Aug 2025 08:00:45 +0000
Manifest next update: Sat 09 Aug 2025 08:00:45 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: uct4hafYAMeRre8C+Hast3HitI2KOyXBXW/CUtNCVLE=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:56:9a:84:3b:46:cc:0d:d4:12:2c:67:2c:52:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Aug 8 08:00:45 2025 GMT
Not After : Aug 9 08:00:45 2025 GMT
Subject: CN=e6d3c73b33451874281ddb008416f5acfed9980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:89:3a:ed:57:33:8b:ef:63:3d:7a:cf:20:
89:07:01:c1:46:e1:cc:af:5b:67:82:4a:81:c0:1d:
85:ec:bd:43:34:ff:41:82:03:a6:c5:6a:8c:dc:27:
61:5e:66:d9:e2:a8:fd:3d:a4:cd:cc:14:e5:2c:59:
23:3b:55:49:25:ac:bc:7c:c9:50:cb:d9:60:8a:a6:
0e:75:9f:e7:89:0d:c9:0f:d0:76:8a:2b:c4:c8:dc:
10:e5:14:57:ac:eb:55:b9:63:c2:af:eb:3d:61:0e:
b0:60:41:17:83:d1:cc:72:f1:88:45:21:35:34:11:
6e:60:57:9f:6b:b9:b8:18:78:f9:0f:17:1d:1a:f6:
86:ee:69:ec:c5:15:2c:d6:ea:dc:b1:8f:a3:f2:83:
39:da:fd:b3:d0:42:16:eb:77:16:b4:0c:0a:ae:e0:
cc:20:ee:c7:29:57:85:00:e3:0e:12:41:7f:71:0d:
fe:20:d7:ca:81:67:46:c5:65:4c:d0:b7:fb:b9:49:
36:36:17:ef:88:2b:8b:b5:e0:38:52:74:85:26:d2:
ca:ab:c9:87:53:ca:b6:02:74:37:ad:cb:eb:bf:5a:
fb:a1:16:e8:bb:c3:ee:81:5a:b1:87:5f:48:07:00:
bd:c9:21:eb:50:a8:71:14:00:43:b5:c2:7f:77:34:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:C7:3B:33:45:18:74:28:1D:DB:00:84:16:F5:AC:FE:D9:98:0C
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:43:72:63:8a:d1:6a:af:03:5b:e1:75:74:ad:a9:1e:83:cd:
b9:99:08:ed:97:dc:7b:af:8f:fb:8a:45:52:99:e5:0a:a0:87:
19:92:20:77:90:46:00:5e:c5:f3:05:37:0f:7c:95:69:59:25:
cc:51:83:2c:72:9a:61:b2:71:ab:69:2d:2e:14:bb:c8:9f:15:
aa:94:53:0e:62:32:2b:40:83:0c:9e:88:9b:13:ca:77:a3:e1:
d0:5f:1a:d1:f7:9f:36:76:f3:4a:16:b1:13:d9:72:47:78:9c:
8a:5b:d0:62:54:fd:d0:8c:8d:97:ab:ee:a7:9e:19:e7:75:64:
c7:f4:b0:86:f4:af:44:be:d4:e6:ea:03:bc:6e:a5:82:2a:c9:
81:d0:cb:75:10:01:b6:2a:8b:2e:af:7e:6f:61:f3:75:e7:db:
f5:5b:df:44:1b:7b:09:e9:b5:68:30:3d:57:cc:e2:ff:45:d7:
8a:2a:2f:10:cf:65:3e:4c:4f:b0:b2:7a:21:fa:89:a7:68:97:
5b:8a:e1:c5:fe:5f:d7:cf:e8:d4:51:16:03:fe:62:8a:01:06:
39:53:ea:8a:96:e6:15:71:3a:f0:71:a4:da:61:5c:0a:33:1e:
53:07:a0:aa:a2:ea:81:86:d6:be:ea:73:e8:65:31:0f:34:38:
82:a6:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:59:20 2025 by rpki-client