
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: nlr8FIC2OZQ4tJDWleK7PHXrg12qVCOlZyz/2biKPW4=
Subject key identifier: 07:2A:B7:5A:85:C1:94:35:94:0C:E1:B2:F1:1D:DE:E2:40:1D:77:D5
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 019873742F4ED9029F6D739F126A83352EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1630
Signing time: Mon 04 Aug 2025 05:00:50 +0000
Manifest this update: Mon 04 Aug 2025 05:00:50 +0000
Manifest next update: Tue 05 Aug 2025 05:00:50 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: 7jTBlGSOzUArG5VVhBc9-xgZPdQ.roa (hash: yavmUXM6+em4MudJtfPugju27DvKZrSpZnOFW626fug=)
3: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
5: SDCjGiu7HlJmu92riiwnYJVUZkM.roa (hash: dRu22wu3jt3btScf5pPPepbiwZpCNe4LeyeAtOs7QoU=)
6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: hOSFBpuf66yNy+TBiNFnCMcTWTadpthB29eqRc3Jt/g=)
7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:2f:4e:d9:02:9f:6d:73:9f:12:6a:83:35:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Aug 4 05:00:50 2025 GMT
Not After : Aug 5 05:00:50 2025 GMT
Subject: CN=072ab75a85c19435940ce1b2f11ddee2401d77d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:a6:58:2b:71:a7:18:89:67:d8:47:c1:94:
74:fb:f2:0b:6f:3d:e7:52:ce:73:de:f9:9a:13:71:
ba:72:8a:a3:fb:3b:bf:c9:4a:6a:48:09:41:eb:48:
44:00:51:04:59:a8:2e:59:a7:38:06:7b:a3:d3:54:
a0:06:83:a2:43:66:79:b7:03:86:a6:64:5e:3b:26:
ee:f7:01:36:83:8f:22:5f:1d:c9:e5:bb:6f:fa:a6:
45:d4:72:08:19:f8:17:0b:50:f4:13:54:92:fa:2b:
a2:86:d0:81:ee:3f:d1:eb:31:8e:70:77:a3:c6:87:
d3:a3:c1:4a:6a:1f:86:81:2c:a1:1b:f4:db:25:b2:
65:8e:0e:c3:98:c2:a6:8d:08:a7:ac:79:e4:c4:08:
a6:9e:86:ac:08:af:3d:0e:2c:81:c5:1b:fd:79:33:
9c:4d:5c:4f:b8:01:85:6e:92:d8:be:ee:e1:de:d3:
c6:90:69:3b:f8:d5:d6:80:95:77:2f:60:5b:96:5f:
03:d7:9a:6e:87:b2:bd:8e:4b:3a:4e:b5:00:f6:86:
ab:93:6e:44:a0:65:af:52:ba:53:01:8e:78:1c:87:
14:bb:6e:62:2f:6b:dd:13:87:9b:43:b8:c2:9a:35:
27:de:a5:3a:16:b8:ca:d5:74:d4:cd:2b:35:f2:09:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:B7:5A:85:C1:94:35:94:0C:E1:B2:F1:1D:DE:E2:40:1D:77:D5
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:f8:33:a5:6e:b2:9e:81:87:d8:80:ab:98:1d:f9:39:89:
ed:51:69:71:1c:b3:a5:0b:77:29:20:27:8d:d0:71:ac:7e:ea:
c5:15:34:3a:f9:6b:40:b5:bb:54:83:b2:88:c1:1b:36:49:37:
fd:a3:84:23:06:51:eb:d6:b0:13:e9:5a:4e:2e:e5:4c:09:f3:
2b:da:b5:54:13:a5:49:4e:e1:21:22:9c:fd:f4:be:f2:89:e8:
3c:e2:4f:45:a9:7e:2c:32:60:f2:ed:38:33:24:b0:21:f4:03:
48:71:31:e0:c3:58:e3:ef:1f:e1:3e:38:86:91:8d:68:d5:24:
ab:6e:2c:6a:60:c9:f4:82:40:63:1d:ea:b9:70:fa:2c:8a:ac:
ac:8b:fa:bd:2e:81:be:6a:fd:70:6d:cd:66:f6:0a:5d:f3:fe:
ad:e5:57:11:5c:dd:bc:f1:6e:05:78:64:f1:a2:2e:6f:55:6a:
69:12:bb:b7:59:e8:28:aa:1c:88:1b:ee:4e:2b:2f:9b:84:eb:
bd:37:79:d1:ce:b7:35:81:5a:98:62:6d:b2:cc:fd:6e:c6:f7:
50:4e:1e:9c:8b:e3:be:44:1b:33:b5:2f:ba:06:20:33:cd:50:
85:ac:97:fb:3e:8c:81:f4:7e:55:ed:4f:4a:ec:aa:10:23:9e:
7e:d6:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:40 2025 by rpki-client