Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: 3NtSlVydwEix0GeJQG71qAOH+5A2ZXDw0bROFGO31uo=
Subject key identifier: F7:46:CC:62:D2:ED:37:EF:FE:92:04:C3:FE:2C:DA:DB:5B:2A:57:C6
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 01988655DC73A3F7617F64DFD154B9CF9969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0556
Signing time: Thu 07 Aug 2025 21:00:30 +0000
Manifest this update: Thu 07 Aug 2025 21:00:30 +0000
Manifest next update: Fri 08 Aug 2025 21:00:30 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: M8fT2K8N9HkvjlhiAr9V+MFiLwi2z66St2tFS3Fb/4w=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:55:dc:73:a3:f7:61:7f:64:df:d1:54:b9:cf:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Aug 7 21:00:30 2025 GMT
Not After : Aug 8 21:00:30 2025 GMT
Subject: CN=f746cc62d2ed37effe9204c3fe2cdadb5b2a57c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:17:3b:70:2e:79:6c:4e:e5:2a:56:4f:02:
ef:88:e7:73:16:8e:cb:0d:e7:72:c4:d9:e9:a4:4c:
59:0c:9b:d1:5a:f0:ee:b6:ec:85:55:38:50:d5:56:
91:b3:c9:bb:fe:91:0a:e7:c1:e6:df:81:5e:73:08:
ca:00:83:54:25:20:e1:3f:31:92:b9:96:17:99:f4:
28:eb:b4:86:0e:34:ac:40:7f:22:ac:ec:78:cf:a7:
4d:ac:04:7e:11:2d:83:99:ee:cd:18:49:d0:6c:93:
6e:5f:b2:e3:df:d3:9e:cd:0f:1d:5a:9b:a3:f4:c9:
34:92:4c:50:e5:24:b7:b0:e8:fc:7d:8b:14:24:b9:
79:8e:fa:73:42:7a:4d:83:e9:7c:eb:8b:c5:87:3b:
57:93:92:85:26:7a:65:66:88:ac:a8:41:80:4e:fa:
71:18:c9:cc:72:39:be:55:53:72:3e:60:12:ec:cd:
ed:e6:49:7a:74:61:2e:b0:1c:b5:5d:d7:26:df:22:
fb:af:79:f3:d9:41:af:91:95:b4:42:a6:d1:19:80:
72:91:19:b8:f0:5f:ea:f8:75:5b:0d:bf:3a:a6:00:
ca:3a:3b:36:1a:1f:d8:60:dc:35:6b:26:c5:5d:62:
70:2d:a4:d9:aa:ca:d6:36:72:d3:38:7a:fe:c8:e1:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:46:CC:62:D2:ED:37:EF:FE:92:04:C3:FE:2C:DA:DB:5B:2A:57:C6
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:8a:9c:06:8e:ee:1f:84:fd:24:6a:59:c9:89:75:e6:84:
7c:50:64:d2:69:c2:19:45:7c:ca:46:72:a3:3d:3a:d8:bc:2f:
55:87:f1:ae:97:84:87:49:13:2c:de:fb:19:b3:3d:2b:06:5f:
79:01:33:28:f8:16:90:36:0d:7a:5e:36:ed:9b:f2:7e:d9:c5:
2c:5c:73:06:ea:43:9a:42:76:d1:ca:1b:60:58:04:17:a2:b5:
1d:40:3e:b5:91:a5:ec:84:86:af:8a:2d:50:b0:14:e4:e0:2f:
4d:d8:29:47:8e:2f:cb:dc:6e:0f:23:2c:0f:fb:67:78:e6:de:
f1:5c:49:03:ec:1d:e4:d9:03:82:c7:cf:a5:7b:75:1d:29:9a:
ab:d2:0f:d7:ba:d0:b9:99:51:77:50:94:71:19:d2:a5:38:b9:
60:ce:b3:8f:79:f1:be:e6:03:9e:b7:36:39:4a:1e:8f:52:9c:
9f:4b:b0:ed:34:e1:2d:66:71:3d:c5:dd:ce:60:33:69:63:78:
78:71:ab:3b:e5:21:ad:52:78:b7:ec:b4:f7:b8:79:81:39:31:
7d:31:ee:cd:78:be:3d:b7:8e:0e:ea:bc:ca:c8:87:cd:b6:4d:
c1:b9:57:bb:44:be:ff:b0:9c:9e:ad:00:68:6c:e2:6b:d4:1f:
18:9e:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:49 2025 by rpki-client