Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: n+AMeI7/ln7tV1NtWbAhH6OfNAE6Mvsd/+ek+Z3bLxI=
Subject key identifier: 97:B8:E8:E7:EC:B0:3F:24:44:05:CE:BE:91:DB:4A:28:75:A3:02:FC
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019881D528B0DABB33BD8F39DA688880ADD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0D3D
Signing time: Thu 07 Aug 2025 00:01:27 +0000
Manifest this update: Thu 07 Aug 2025 00:01:27 +0000
Manifest next update: Fri 08 Aug 2025 00:01:27 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: XiTqGRH4Aob//MF6eY8S62PbApu1C4SBwTzLqQqQ5iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:28:b0:da:bb:33:bd:8f:39:da:68:88:80:ad:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Aug 7 00:01:27 2025 GMT
Not After : Aug 8 00:01:27 2025 GMT
Subject: CN=97b8e8e7ecb03f244405cebe91db4a2875a302fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:c8:c1:7a:27:ee:f6:f2:03:c3:d2:fa:ab:
e9:3e:33:94:57:4a:75:74:8f:66:b9:24:07:05:f7:
1c:e2:b7:7f:1d:eb:03:2c:a4:f2:e9:1b:c2:30:e9:
b8:2d:fd:77:19:ae:0f:10:2d:81:ad:9d:8c:3d:06:
a6:c5:8d:72:69:4a:7b:ea:74:82:26:01:d8:fe:4c:
16:19:46:e2:c5:d0:2e:1c:3a:97:ce:00:ec:1b:60:
83:78:01:92:83:13:2b:32:11:1d:76:03:27:6f:71:
65:f1:63:eb:a3:01:1d:e2:66:62:ff:ba:ab:b3:18:
4f:06:93:34:5d:26:ad:3d:c6:e8:9b:c6:91:ef:88:
a6:c7:9e:9d:94:41:80:95:84:ec:d2:95:87:bd:df:
55:da:4f:ab:a2:87:84:b8:b9:4d:82:72:41:c6:87:
30:61:cb:25:96:cd:e8:c4:00:ef:12:e2:e0:d6:ec:
8b:2d:9a:1e:8c:22:b1:82:c3:ef:e5:f5:21:23:b3:
ea:97:5c:b6:5e:76:65:33:6e:45:d4:9e:04:c2:21:
a5:90:0e:e0:bc:6f:9e:63:fe:f2:0b:7d:65:42:b6:
f6:a3:94:00:b1:89:6c:e9:4b:da:d8:95:ad:95:a9:
ed:e7:3f:cb:77:db:ca:c8:08:34:83:c5:24:1f:fd:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:E8:E7:EC:B0:3F:24:44:05:CE:BE:91:DB:4A:28:75:A3:02:FC
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:d6:c9:a1:56:3b:cf:28:5f:94:c9:4d:52:69:64:4c:7b:
d0:fa:64:b6:05:9b:db:c6:21:f0:ef:31:f4:a4:cb:18:85:e9:
6a:7e:0b:41:a1:73:fa:89:0e:f6:54:01:af:4e:d5:01:75:6e:
88:70:08:e4:69:96:23:2d:f8:67:db:67:0d:6e:0e:ae:92:10:
a7:f0:90:09:23:b7:65:9d:b1:e1:00:25:2a:c5:14:92:dd:a0:
9c:c6:52:a5:1e:b4:8f:c7:48:25:5b:41:58:d0:1c:71:ec:26:
1a:d7:d9:ed:d2:ea:c2:64:f4:0a:49:ef:b2:07:03:73:a5:46:
8b:19:2f:cf:81:f6:35:33:6f:a3:7c:06:a4:72:ad:58:f2:72:
e4:d8:64:49:83:4b:c2:23:ac:92:9e:f3:29:ec:6b:00:07:86:
02:f9:e4:73:0e:1e:fb:77:c7:f0:18:f4:96:c2:64:e0:b4:2c:
aa:e4:a4:16:25:6c:a4:08:c3:c3:d3:90:ef:9c:af:3a:dd:62:
b0:93:95:52:66:8e:4a:0c:b0:b2:02:99:76:33:a3:f3:54:38:
ec:cd:5d:1b:51:e8:89:4e:ed:c5:7d:87:ff:4d:6a:5c:06:48:
a2:6e:b8:bd:28:c1:11:69:3c:fe:2c:20:2b:0b:5e:df:71:43:
c4:f3:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:54 2025 by rpki-client