Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: cNfKsUHwJx5fsgwbiSlhTPews/PNegIvyPGJbrqiwyY=
Subject key identifier: 23:E3:92:66:4E:D3:BA:42:98:3A:2F:42:50:2D:BE:27:61:8D:93:07
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0198820BFE5732FA68213F5F1447FB99132E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0DEB
Signing time: Thu 07 Aug 2025 01:01:20 +0000
Manifest this update: Thu 07 Aug 2025 01:01:20 +0000
Manifest next update: Fri 08 Aug 2025 01:01:20 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 2JVDX8eKpxXL1Jve/+tta5ddH/G82YOMnHdtEt6+jpo=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:fe:57:32:fa:68:21:3f:5f:14:47:fb:99:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Aug 7 01:01:20 2025 GMT
Not After : Aug 8 01:01:20 2025 GMT
Subject: CN=23e392664ed3ba42983a2f42502dbe27618d9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:61:43:f3:c6:76:69:2c:62:e9:86:50:85:
fe:e8:f5:55:c0:c3:a2:72:73:13:c9:ee:31:48:75:
9f:a2:30:ef:39:f3:ce:96:b7:01:27:bb:8e:45:b8:
aa:83:2c:bc:4e:4c:81:ba:11:91:49:e5:42:83:79:
59:59:f7:e9:ce:cd:bf:b1:8b:85:87:6b:cb:e7:34:
80:00:fd:e0:9b:8b:85:70:08:65:7a:eb:1a:4a:03:
89:6d:b7:eb:d3:3f:b4:92:87:8e:c9:50:22:60:53:
ee:11:b5:37:19:aa:45:41:a2:b7:e3:b7:83:e4:a1:
fe:c0:a8:32:f8:3c:52:6f:86:b5:8b:75:76:73:65:
5f:2d:00:b3:8d:2e:c5:05:12:da:1f:5a:89:ee:af:
bb:b2:b1:69:8d:57:c0:55:b9:63:66:7a:16:61:8a:
9c:c9:f7:54:58:e9:bd:db:c8:99:fc:a2:ad:da:21:
06:12:e1:e2:59:70:0b:a0:e5:c8:02:08:cd:ac:6a:
d5:10:67:c0:ae:ee:0a:13:0d:6c:8a:14:2b:3c:1f:
47:9b:98:33:28:ae:a4:6d:e5:da:b9:ef:8c:d9:6c:
9c:4c:91:98:77:2f:e6:cf:f4:b4:8e:15:e9:83:9e:
67:03:2d:ab:28:a3:16:4c:38:f7:6e:16:cd:55:b7:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:92:66:4E:D3:BA:42:98:3A:2F:42:50:2D:BE:27:61:8D:93:07
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6e:bb:08:e6:d3:fa:c5:69:13:58:72:b7:ff:b3:bb:df:3a:
58:35:49:a3:77:a6:4f:17:74:62:ad:9e:d7:7b:fa:d3:16:bb:
f3:5c:45:88:d7:aa:8b:89:39:f9:2a:49:b3:13:ae:3c:5c:6a:
20:87:67:ee:ab:c6:6b:af:d5:97:3a:42:ef:9e:21:a2:c2:b1:
55:69:d2:6d:52:5f:eb:2e:2f:61:52:26:2a:2f:f5:aa:b5:0a:
b0:09:e4:67:26:6c:0d:02:bb:b1:22:03:ea:14:3c:39:41:cd:
78:93:6b:e9:62:37:5b:ee:9a:41:2c:44:c2:11:ec:87:46:aa:
f8:b3:41:b0:c2:01:83:ae:87:e3:4b:a1:23:98:44:9a:4a:23:
b5:3b:cc:5b:ca:2b:9d:14:ca:2a:73:b9:4a:d9:48:e6:c1:4e:
29:16:9a:8d:a5:fe:bc:c7:0c:9b:82:11:07:1d:b2:0c:fa:dd:
75:4d:ce:b9:44:cf:55:34:d2:61:dd:76:33:72:d4:3e:9c:fb:
91:33:f4:8d:e0:09:2a:45:5c:df:06:33:a7:72:03:22:ce:9e:
15:9c:a2:5b:ac:4c:5a:ce:47:0a:6f:0f:2e:53:e0:60:45:82:
06:3c:f8:78:b5:ce:67:68:db:1f:95:4e:96:f3:76:87:85:0d:
d5:93:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:47 2025 by rpki-client