Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: txbK6ctNSvRHDySZ03c+GT6vAns3GvZft05/xIhviX0=
Subject key identifier: A7:AC:2E:73:04:3C:CB:8D:0A:E6:7E:B5:22:FB:21:EE:D4:64:CC:1B
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 01988D6B2401308D0312027F63E1AF47EAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 0122
Signing time: Sat 09 Aug 2025 06:01:05 +0000
Manifest this update: Sat 09 Aug 2025 06:01:05 +0000
Manifest next update: Sun 10 Aug 2025 06:01:05 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: Fw1G9+tRIzoc3UEBhx1YDLLXVLU8GpNbHKYe3c+sBwk=)
2: Zwspllzg46eGGBAmk75fKGUNIMs.roa (hash: SP7acjr2fc/Seb508pgEvQAcmNKQjk7dz5FLGa5z8Eg=)
3: lWrjnOhkdLngH_rNw8_j4YqaRQo.roa (hash: K4bxS+l7j2oByKFzgDdI5RTjLvC4BrOSJXUtlpmQdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:24:01:30:8d:03:12:02:7f:63:e1:af:47:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Aug 9 06:01:05 2025 GMT
Not After : Aug 10 06:01:05 2025 GMT
Subject: CN=a7ac2e73043ccb8d0ae67eb522fb21eed464cc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:74:7d:fa:29:24:d7:e1:22:4b:de:2d:f0:
b4:4a:ef:28:5f:98:4a:96:57:32:bd:9d:ef:39:54:
1b:ab:20:8d:3e:37:3a:84:5d:ae:22:68:29:4e:9b:
7d:7c:97:5f:5f:eb:55:1e:33:89:dd:33:17:40:54:
74:ab:a3:aa:48:ac:14:8a:0a:ce:50:e0:7a:ec:13:
81:94:95:72:a8:46:21:2d:d0:bd:63:0e:92:9a:1b:
0a:f4:0c:f3:6b:3b:74:b2:61:23:cf:c2:95:1f:4e:
2c:ec:0a:1b:e6:f8:a8:34:09:fe:db:c2:a1:51:92:
8e:53:05:c9:87:88:c4:89:c5:5a:45:c5:dc:76:6c:
09:0d:a1:78:0d:c8:f7:78:9e:cc:71:13:40:be:64:
65:e8:ef:f5:ef:0c:d3:8e:d5:83:85:a3:45:c0:a0:
8a:63:94:63:6b:3e:94:2a:1e:23:53:2f:f0:57:de:
04:86:a7:37:54:fe:25:3f:b5:ce:0a:5d:df:2d:cf:
e1:0e:ae:eb:7f:42:77:9c:95:04:13:32:d7:bd:10:
a5:25:16:9a:3d:9f:46:ad:ef:4f:0d:3e:40:06:e4:
73:3a:ed:d0:3d:02:aa:78:13:1e:49:5b:c3:77:d7:
87:e1:7a:bf:5c:6f:a1:46:1b:e4:c2:20:61:34:75:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AC:2E:73:04:3C:CB:8D:0A:E6:7E:B5:22:FB:21:EE:D4:64:CC:1B
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:bf:1e:d4:7f:34:74:21:22:39:41:b9:ab:f1:7b:39:b2:
08:ec:ec:5e:02:95:0e:44:74:1b:16:eb:68:0d:ed:d5:3c:6f:
4f:70:46:78:cc:cc:6f:9f:87:b5:b4:df:00:17:9f:fe:4e:7b:
ef:d5:61:51:2e:bf:e2:b5:52:7e:bf:59:a0:df:c7:30:41:be:
84:f6:e5:5f:12:3b:cc:e0:82:c9:7e:19:56:d7:8f:05:5b:7e:
0a:2a:73:66:ae:72:ac:07:53:38:62:b3:c2:c4:76:08:60:18:
d7:bc:6e:a7:3d:84:ba:a0:bf:6a:b9:0c:db:4e:ec:2b:ed:9d:
9f:be:7b:ee:20:a9:3c:ef:ac:9a:10:8b:64:f1:9d:7f:dc:d0:
1a:c2:0b:a6:6b:51:13:f4:81:94:72:87:e1:69:8b:70:01:ea:
8a:ab:37:ee:7a:d1:da:ce:6c:56:e9:a8:f0:75:d8:fa:6b:0e:
e9:d4:a6:35:f6:9e:ef:ec:ba:8a:12:95:c5:91:d3:75:bf:b2:
d5:45:4a:f8:19:5d:ca:a9:60:e7:e8:94:7a:55:96:50:72:a4:
72:f3:58:a9:3d:d2:39:36:07:35:58:3b:a8:ca:74:8c:3f:2c:
8e:45:8a:43:ea:23:74:87:8c:82:ce:a1:2a:f6:ae:84:94:7c:
61:bd:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:31 2025 by rpki-client