Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: FsEfjgVEGcltqjB6SZDOTyDTEG67Ct+sKenVowB226w=
Subject key identifier: E9:AF:CF:7F:51:5A:A5:E1:2B:41:1B:0F:9D:79:A0:E8:F0:5A:40:DF
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 0198729839B2A1B543276D9C86FF8F289439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 01:00:35 +0000
Manifest this update: Mon 04 Aug 2025 01:00:35 +0000
Manifest next update: Tue 05 Aug 2025 01:00:35 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: YUvJOumlRDEu36G/rkEKZBvDGVR5hFpC58ytIlJRpSk=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:39:b2:a1:b5:43:27:6d:9c:86:ff:8f:28:94:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Aug 4 01:00:35 2025 GMT
Not After : Aug 5 01:00:35 2025 GMT
Subject: CN=e9afcf7f515aa5e12b411b0f9d79a0e8f05a40df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:97:e6:3a:ae:a9:31:df:8a:26:67:3e:93:
9c:b8:db:49:25:c1:b5:5b:25:aa:85:fe:31:d1:03:
5e:86:31:2a:f3:57:b2:5a:8d:9d:d1:ce:db:09:16:
c1:94:7c:9e:78:e1:88:f2:30:87:8b:56:bb:da:1e:
20:a5:91:5f:6c:42:76:4b:67:6a:90:30:64:f8:4c:
91:77:85:2f:e2:02:41:9e:6a:c9:bd:d6:bc:d2:d0:
c2:c0:12:2e:09:71:51:ab:ae:c0:f9:bd:09:98:db:
5e:e0:6d:2a:8a:b9:14:8f:31:f5:43:ff:65:9b:7e:
79:51:59:d3:fc:6d:c4:8a:70:c9:a8:1e:56:b0:c9:
dc:26:da:67:29:7f:4d:e1:10:dc:be:95:89:9f:cc:
4e:f5:9e:ba:d4:86:40:cd:ff:7a:4c:24:cf:7f:15:
3f:6c:eb:05:14:06:67:14:c8:4d:61:9a:33:c5:f2:
fb:f0:2c:ce:95:8b:ec:9c:87:40:c2:08:a8:cd:c0:
a7:29:bc:0d:2a:c8:9f:22:aa:ad:c5:d6:04:60:ae:
dc:00:6f:24:10:1c:1b:63:c6:9a:60:56:7d:87:8b:
02:7d:82:ac:57:36:1f:11:c6:df:87:6e:f9:2b:cf:
05:e1:5c:6e:c9:39:ff:1c:5b:6c:c5:19:78:b9:ef:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:CF:7F:51:5A:A5:E1:2B:41:1B:0F:9D:79:A0:E8:F0:5A:40:DF
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7d:23:2b:65:b6:53:32:cc:a1:85:79:71:b9:42:d4:87:10:
10:87:89:bb:90:11:a9:43:62:1a:e4:b4:d6:c0:3a:df:91:ec:
19:fa:10:0a:d5:38:2f:61:5b:07:4f:69:e9:a1:82:f0:58:b9:
37:52:d9:71:40:ba:c1:8a:a8:a4:b0:09:99:37:99:9f:02:c9:
c1:b1:0e:a2:76:c1:79:8a:3f:e9:00:e1:5f:e9:36:54:c8:bf:
ad:e3:86:09:de:f6:04:11:37:12:f2:3b:de:1e:7d:b7:2a:4d:
a7:42:56:97:2d:33:4b:08:4d:c8:cf:ef:69:bb:fe:a6:b1:d7:
a3:5b:d2:3e:33:76:af:6a:02:bf:ca:07:86:84:94:9d:6d:2e:
e4:9d:20:1b:30:a6:8e:55:d8:b7:34:63:00:3a:e8:2a:5d:1e:
07:b4:ac:ac:29:2b:d9:9e:f3:0c:2a:2b:8f:8c:f3:a2:10:8b:
4e:a2:40:44:6a:97:29:b8:4d:e5:e9:60:2e:9c:c5:48:72:48:
82:fe:36:16:7a:60:a5:24:c1:41:57:77:25:cc:6a:9c:ec:d1:
3f:e5:87:f5:48:18:d8:85:fb:3c:ca:19:a2:84:ec:e3:94:ec:
15:d8:b1:33:d5:e0:c7:f4:e6:09:ea:69:f1:b6:90:89:a4:56:
7e:4c:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:44 2025 by rpki-client