Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: ZAwC8Ti1In8c2RLUIC/1DAPspLdO4yoVgveOSy1XfI0=
Subject key identifier: EB:B6:8D:66:AD:D5:B0:CE:8A:B2:11:F4:0B:AF:EA:CC:D5:12:5D:9F
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01988B0EA559DD04BD8B72A7A747FDB012AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 08ED
Signing time: Fri 08 Aug 2025 19:00:49 +0000
Manifest this update: Fri 08 Aug 2025 19:00:49 +0000
Manifest next update: Sat 09 Aug 2025 19:00:49 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: hIekepLlYjT6+y7pvwCSr0ZfmOHL/+BtkWhtcXwym3I=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:a5:59:dd:04:bd:8b:72:a7:a7:47:fd:b0:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Aug 8 19:00:49 2025 GMT
Not After : Aug 9 19:00:49 2025 GMT
Subject: CN=ebb68d66add5b0ce8ab211f40bafeaccd5125d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:80:a5:44:4a:f4:eb:53:de:db:f6:2a:b6:
a9:06:ba:40:26:dc:8b:a0:01:16:96:eb:77:32:17:
33:86:2d:19:52:1f:78:b6:d2:d6:23:98:ae:34:51:
a2:e9:c1:ce:73:41:03:b6:9b:49:d1:82:19:a4:37:
c5:ed:f2:2f:5a:71:3d:0b:9b:1c:cf:78:b6:0c:f2:
77:5b:30:5c:1c:73:3c:d5:cc:08:7d:e2:35:08:32:
b4:57:04:bf:5c:2d:4a:36:6a:25:10:18:3e:e9:8e:
a5:b2:b2:6e:3e:64:c1:47:27:cb:36:fd:3c:29:8d:
31:c4:0c:6c:6d:a3:61:55:e9:94:58:38:bc:c5:ab:
5b:d8:ba:e0:f3:ce:d6:ad:d9:e7:f0:d6:9a:05:e4:
fa:86:00:91:50:b6:1b:16:1e:90:52:d7:d8:db:61:
e1:f7:84:93:5f:5f:c0:7b:b7:06:e5:0b:53:1f:e1:
0a:ee:8c:e6:16:7d:48:ec:bd:7c:63:01:e4:fc:f9:
be:c7:72:71:70:90:3d:5d:c8:4b:ec:f8:0b:f5:71:
31:bf:a0:ab:93:e2:3e:fd:27:95:2f:91:db:f5:f5:
2c:9f:03:aa:34:d5:3f:44:20:8b:a5:4d:e3:6d:6b:
f1:68:27:d9:16:b9:48:f9:da:f7:e0:7d:45:ec:3b:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B6:8D:66:AD:D5:B0:CE:8A:B2:11:F4:0B:AF:EA:CC:D5:12:5D:9F
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:52:93:20:a5:9a:94:32:3e:21:56:a1:10:c6:af:65:70:ae:
28:e7:3d:d5:b7:f9:8d:8d:73:b7:5e:38:cf:0e:c2:aa:cc:e3:
ba:13:6d:f5:58:fd:d4:9b:71:86:5c:55:40:4b:5a:44:0e:96:
8a:fa:23:7a:24:c7:47:14:90:fc:5b:b7:7f:d7:de:71:99:f5:
fe:31:1a:d9:b7:4a:08:5b:79:1d:29:50:0e:1b:42:5b:e1:d2:
31:ab:f5:d3:15:e7:44:e5:fc:d3:22:8a:c4:22:96:7f:91:33:
4c:19:32:dd:76:3e:a5:66:ae:7a:6e:52:06:9c:43:95:4a:c8:
8d:cc:7c:fb:6c:17:36:74:e3:2d:6c:12:5d:a0:5c:e0:3c:15:
08:8c:ac:67:a6:c2:03:6f:12:ea:c2:b1:62:95:99:e2:1d:37:
63:e3:7c:c9:c2:5b:24:d9:eb:0e:de:66:03:89:05:ba:45:1d:
5f:6f:e4:07:a7:19:c8:6d:ee:ab:8f:40:0b:42:e8:2b:a1:c5:
96:07:88:d6:f9:2b:ae:01:c3:11:2d:5a:ed:5e:d8:39:aa:ce:
f4:00:e1:49:46:78:fd:ad:9e:80:9a:fc:a8:7a:02:f2:dd:76:
22:7c:83:47:3a:98:71:bf:4a:fd:9d:06:bf:c7:5c:a6:ba:41:
f3:0d:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:43 2025 by rpki-client