Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: UtooHFjIm5/yYXEevnHlwf1slKL7+SNXA054BTnr+58=
Subject key identifier: B5:C1:F0:ED:91:9D:19:BB:CC:8A:1D:29:C1:64:E7:40:AF:2F:73:70
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 0198868D96B5C6E02BFB90F2CF356AD39786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1329
Signing time: Thu 07 Aug 2025 22:01:22 +0000
Manifest this update: Thu 07 Aug 2025 22:01:22 +0000
Manifest next update: Fri 08 Aug 2025 22:01:22 +0000
Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=)
2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=)
3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: DvanVYEEQWt6mGC69u+8xlQDfP6QB3Avi342HIL4QY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:96:b5:c6:e0:2b:fb:90:f2:cf:35:6a:d3:97:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Aug 7 22:01:22 2025 GMT
Not After : Aug 8 22:01:22 2025 GMT
Subject: CN=b5c1f0ed919d19bbcc8a1d29c164e740af2f7370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:e7:c5:2b:a9:58:dc:68:66:33:9f:34:95:
bf:00:42:23:c9:ff:ec:67:f0:87:12:2d:3c:69:4b:
3f:2d:1f:d6:79:56:0b:f5:86:a3:48:4e:90:d0:03:
1f:6e:97:d1:bf:1e:03:37:1f:85:bf:46:46:3a:b4:
1f:2b:c8:af:89:db:fb:ab:83:ad:56:cf:1a:c2:ff:
4e:5e:da:b7:9b:e7:e2:8a:c7:40:9c:80:4c:9f:1f:
72:68:66:e7:71:08:d6:67:ee:3a:37:80:64:ad:76:
ad:b7:f4:5d:33:41:e4:3f:6f:f3:00:93:f6:fd:e7:
ae:c0:26:30:47:01:39:3c:ee:89:99:ed:f4:06:53:
35:5e:66:2f:c0:e2:8a:66:c5:79:74:59:ec:ec:95:
76:b2:4e:77:28:12:da:8a:57:87:5c:77:2e:fe:cb:
c4:7f:2d:2d:ba:59:05:06:bd:71:3e:88:42:0e:17:
d0:d4:6c:33:e8:ce:93:b6:71:48:1c:a4:f5:2b:02:
6d:e1:1e:51:c4:01:51:ee:89:dc:59:d6:52:37:4b:
03:4d:36:53:8c:a5:50:b5:06:0a:63:b3:a5:43:72:
69:92:50:ec:65:84:ef:77:cd:9c:f2:d2:c8:9d:bd:
2e:ee:03:d9:52:47:81:d1:28:d1:cc:89:25:c2:99:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:F0:ED:91:9D:19:BB:CC:8A:1D:29:C1:64:E7:40:AF:2F:73:70
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:b1:18:e1:6e:6d:6e:1d:6f:33:e8:31:a2:3b:b7:1a:5a:
36:c9:6d:8f:00:1d:1e:9f:fd:f3:e0:e7:bc:fd:dc:d4:e4:f1:
a2:a3:b5:a8:37:fd:65:fe:be:d6:e6:bb:fe:2b:d3:54:31:cb:
7d:93:2d:93:bb:df:50:14:bf:f2:ca:15:5a:fa:8c:eb:df:74:
5c:89:d6:1b:c6:a9:93:59:c4:f9:96:53:90:5b:94:68:7b:da:
66:f6:97:8e:76:a2:48:01:c7:f2:bd:4c:3a:5e:20:92:be:3f:
bd:25:ce:50:13:c2:50:90:de:55:ea:04:02:b7:72:7f:eb:35:
da:fe:73:79:f1:c1:78:39:80:47:c0:92:7f:16:67:4d:66:37:
56:73:f9:8b:81:cf:84:06:08:79:2c:49:f2:c8:11:45:f5:a2:
95:cc:0c:5f:66:11:7b:38:b3:09:ae:f6:f1:90:90:26:88:14:
cf:47:fb:2a:e2:34:2f:d3:0b:d7:9d:0e:0c:04:ff:00:73:02:
8e:11:d7:c7:91:85:2e:7b:61:dc:05:bb:d7:b5:35:f1:a6:42:
1f:b1:0b:f4:01:17:05:d7:88:86:59:34:88:ba:65:2e:8e:7e:
ec:12:52:08:04:5c:50:b6:7a:78:eb:85:17:14:90:b9:81:f5:
56:3e:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:14 2025 by rpki-client