Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: bSPARPXRxQcoaAnCvY+CBeBwVUoSKWj8+wwRioZH4hM=
Subject key identifier: D1:A9:C0:9B:1E:68:C5:99:C1:AE:00:B2:E5:F0:81:FE:5C:76:DB:6A
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019883575B7E93E9067E1FF44388103C0679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 07:03:16 +0000
Manifest this update: Thu 07 Aug 2025 07:03:16 +0000
Manifest next update: Fri 08 Aug 2025 07:03:16 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: LP/qPbjnWoFvxduzTqYE0Xf1UPAZjZtINdgokueAffo=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:5b:7e:93:e9:06:7e:1f:f4:43:88:10:3c:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Aug 7 07:03:16 2025 GMT
Not After : Aug 8 07:03:16 2025 GMT
Subject: CN=d1a9c09b1e68c599c1ae00b2e5f081fe5c76db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:1b:79:75:62:ca:1e:80:5d:78:54:54:c2:
f7:fd:86:14:42:f7:71:eb:4d:06:08:df:1c:39:c2:
f5:b1:f3:19:58:60:7f:d0:77:5f:10:c9:b8:23:b5:
35:70:67:a4:e1:fa:f7:2d:ea:51:eb:8c:5c:3e:65:
13:e4:28:3b:37:00:97:32:bb:d6:61:30:ea:aa:de:
e1:71:54:58:09:c8:e9:89:01:ff:65:3c:e2:ef:bc:
f9:c8:e1:0c:bd:0d:db:a2:dc:de:7f:8f:ad:92:7e:
53:83:b2:b4:1b:b5:72:84:d4:ed:e0:b8:07:b5:0b:
c1:45:1e:e1:46:c8:63:33:8e:33:91:54:dd:e1:2b:
96:3a:89:c6:43:23:61:85:f9:aa:84:69:c2:5a:2b:
ef:37:fa:98:e5:fe:7f:e2:42:91:b0:6f:78:e8:7a:
c7:c0:81:e5:75:a4:7e:81:34:37:b3:d3:e7:67:36:
22:ff:87:9d:70:b6:13:c8:71:75:66:67:e7:c1:ba:
26:b9:de:6b:14:fa:c5:5f:b3:7d:0c:41:f0:74:55:
28:bc:25:c8:13:86:7c:78:c4:05:57:1c:4b:a1:9b:
f9:35:05:4e:52:b6:c3:e0:47:dd:bc:12:c1:f0:3f:
13:cf:64:0a:3a:26:e1:2b:14:66:88:3e:db:df:0f:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:C0:9B:1E:68:C5:99:C1:AE:00:B2:E5:F0:81:FE:5C:76:DB:6A
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:07:62:57:f2:e1:99:90:7f:ec:28:42:de:41:c3:de:0c:46:
7e:01:ed:a2:a3:2d:fb:22:29:0a:2b:7b:ef:9f:48:63:d3:1e:
5e:c6:e5:9f:61:b9:ac:92:3c:6e:f8:39:ee:4f:c5:8a:2c:4c:
b1:1a:85:d6:1d:25:00:c2:96:05:8d:db:ba:9d:35:b7:7f:6b:
db:c0:e7:51:c8:a1:e7:c2:77:08:cf:3b:a4:f9:78:c4:ca:7a:
fe:dc:a5:48:15:2e:7c:df:a3:46:47:43:9c:2a:8a:c3:c1:ee:
b6:8d:7a:89:a5:e3:39:f7:60:2c:04:b8:e2:13:42:87:f2:cd:
25:6a:4c:27:21:f2:fb:e2:cf:8c:bc:2c:74:76:c2:05:17:db:
4d:75:52:74:5c:c2:40:08:6b:c0:23:34:1d:bb:b1:17:d1:bd:
bd:45:72:48:7c:76:c3:ed:09:89:70:b4:22:0d:e4:01:59:88:
d3:37:8d:20:9c:74:b3:68:cb:40:7c:31:82:5f:93:8a:e6:36:
2d:68:ca:03:b0:fe:46:e6:67:e6:09:e4:37:f6:18:a5:37:15:
69:fa:96:06:b2:c4:a4:d4:cf:57:89:f5:ab:86:c3:68:d5:a2:
5a:3b:50:46:ff:76:62:8b:96:3d:37:8d:8b:bd:be:82:6c:10:
26:70:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:54:07 2025 by rpki-client