
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: 8sj46kH/hMeCoDalL8plysda4KyXjyO80wer8DgjvoQ=
Subject key identifier: 92:5D:E6:B4:F6:42:42:5A:97:49:8D:77:32:E4:07:47:DD:42:5F:43
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019872CF3AE3B19ECE23D05BB2407D6C8694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 05D7
Signing time: Mon 04 Aug 2025 02:00:40 +0000
Manifest this update: Mon 04 Aug 2025 02:00:40 +0000
Manifest next update: Tue 05 Aug 2025 02:00:40 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: 0mE5i6C//6u1F4UiTMj7lSRzc0k3g5Aftb/SfSJvdeM=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3a:e3:b1:9e:ce:23:d0:5b:b2:40:7d:6c:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Aug 4 02:00:40 2025 GMT
Not After : Aug 5 02:00:40 2025 GMT
Subject: CN=925de6b4f642425a97498d7732e40747dd425f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:21:5f:22:c2:d4:5c:bb:c4:4d:43:b8:35:
37:50:6f:5c:9e:5c:32:49:69:20:18:a9:ff:2d:97:
a2:d4:a2:9f:5f:a3:9b:3b:28:d1:87:fc:90:96:e4:
b8:a8:5c:dc:23:5a:dc:94:20:06:11:02:b7:82:e5:
04:84:e4:d4:95:d4:06:ff:53:2d:a3:3c:13:02:12:
87:89:63:0b:ed:13:a3:35:6a:db:c8:b8:bc:e1:f7:
e8:83:e3:ed:2b:16:8b:f2:9d:90:ed:36:14:51:a0:
0e:5b:83:4c:88:49:1b:d2:75:93:7f:6c:65:30:91:
e1:31:c3:98:30:6b:c6:68:86:ea:6b:20:f2:ae:b1:
2a:e9:80:37:53:af:69:02:60:08:18:bd:99:ea:79:
2c:1d:50:22:4a:64:cd:42:c6:26:5e:3d:e5:c9:56:
2b:00:b5:d7:40:50:e1:33:85:ef:eb:7e:53:ab:d5:
de:2f:0b:47:d8:e5:17:44:9b:d5:cb:f6:bb:bf:19:
42:91:91:7b:3a:45:8e:ba:61:a4:87:bd:97:85:f7:
28:f1:a5:4d:47:77:8a:b3:e6:2d:c4:b3:af:23:ce:
05:02:92:ac:e6:52:95:98:6c:da:08:29:b7:d8:54:
28:d1:a5:90:57:3a:d0:86:e1:f0:0f:9c:b4:f4:a0:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:E6:B4:F6:42:42:5A:97:49:8D:77:32:E4:07:47:DD:42:5F:43
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:66:ac:cb:e5:c5:bd:6d:87:5b:c0:c9:fb:ee:f3:9b:25:75:
89:cd:6a:82:e9:91:2b:a1:58:49:4c:b6:00:82:fa:a8:66:30:
27:86:d1:a2:ed:b2:2f:7c:1c:09:35:92:cf:3d:31:69:f4:84:
c8:36:1d:8e:6c:ba:5a:ad:de:d7:69:1d:91:93:55:38:dd:96:
28:43:bc:30:96:a0:fe:6c:67:b9:9d:48:48:e2:3e:ae:d0:73:
55:e3:53:a4:28:f5:7c:44:ff:19:e9:6d:f6:63:1d:0d:9e:02:
d6:35:7a:a2:b1:4f:3c:80:ef:97:66:25:b5:b1:f3:c7:58:96:
b0:b5:eb:24:f1:83:78:08:c0:56:e0:c3:5d:28:58:f2:02:af:
e2:61:32:c5:49:aa:bd:1b:6b:82:f0:05:9e:bc:08:a4:22:ac:
97:9c:ff:84:3b:3c:d2:ca:f9:be:6f:74:fb:51:4c:2e:fc:c7:
64:eb:5f:52:5d:21:58:c1:a9:8d:94:6c:9c:1f:e9:5d:15:b5:
85:ca:3e:83:a1:32:16:27:5a:77:45:72:9f:7b:70:a9:55:52:
d8:a1:b4:24:20:3c:af:4c:f0:ba:67:69:f9:f6:00:b3:75:a6:
6d:52:8b:8a:45:87:4f:e9:25:7c:e0:eb:ba:d5:3e:07:03:33:
1a:69:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:00 2025 by rpki-client