Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: 3c6gfuzZ+uVsLBsgZb08KRZNWLv0Dq1A8mvb65NYolI=
Subject key identifier: 1F:4D:73:A0:A9:60:DE:93:A2:92:3F:E6:AC:35:81:9B:78:97:6A:AF
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019883C352636BFF44386D0DC4430B5D9A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0C04
Signing time: Thu 07 Aug 2025 09:01:12 +0000
Manifest this update: Thu 07 Aug 2025 09:01:12 +0000
Manifest next update: Fri 08 Aug 2025 09:01:12 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 7+jURl4LfGLEXAfxRH4ttY1mjxBhJnB74CqJUUx8e0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:52:63:6b:ff:44:38:6d:0d:c4:43:0b:5d:9a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Aug 7 09:01:12 2025 GMT
Not After : Aug 8 09:01:12 2025 GMT
Subject: CN=1f4d73a0a960de93a2923fe6ac35819b78976aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:f7:0c:92:c7:d8:e6:8c:2b:94:31:bb:f0:
86:5c:2b:ec:67:b1:ea:f1:65:76:52:fd:cb:e3:57:
84:e7:e3:26:62:36:6a:7e:be:fb:c3:80:b5:16:66:
08:6d:38:a4:6d:57:f4:dd:d2:e9:2d:8b:0d:c6:b7:
de:6b:84:4f:f7:0c:c1:0d:79:e6:3e:10:27:7c:35:
2b:fd:42:38:19:c3:85:f0:cf:9d:aa:ba:71:39:57:
80:75:3e:71:eb:9c:d8:61:2b:cc:0b:20:6c:06:8b:
4d:5d:e2:86:11:20:63:85:66:f7:0c:fa:27:d6:dc:
8b:31:73:96:2c:d6:81:2f:81:bc:75:ee:5c:1a:ce:
76:cc:2b:f2:66:f3:0c:36:17:3b:cd:c1:2a:6b:aa:
41:8d:b0:32:5d:0a:79:83:c4:56:4c:a4:3a:6d:1c:
2b:96:0a:36:b0:31:58:03:0f:5b:5a:66:33:15:53:
e8:4e:c0:2a:00:4d:b6:2f:1b:a6:84:60:2b:5c:87:
03:45:22:2d:e0:a8:ee:ba:57:fd:a0:51:04:d2:e6:
20:69:e2:57:6d:60:17:0f:76:34:02:18:24:09:fa:
ae:f8:95:83:b9:00:bf:cb:e0:df:73:5d:5b:75:2a:
f3:df:ed:c5:7f:89:da:b4:83:68:b3:2e:e4:bc:a9:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:73:A0:A9:60:DE:93:A2:92:3F:E6:AC:35:81:9B:78:97:6A:AF
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:92:f5:ba:fe:31:c6:30:45:47:02:7b:75:95:9c:17:f6:16:
1b:6b:68:64:5c:6a:d0:cc:87:6a:11:8b:1c:38:11:99:83:a1:
8c:59:af:2f:a9:e9:12:4d:4c:f2:72:fe:a8:54:b0:ca:39:81:
77:fe:59:f7:df:53:60:1f:02:70:8c:c5:89:e9:33:1b:ad:96:
6e:36:84:e9:37:78:64:73:9e:a5:f1:d9:09:54:e7:d6:9e:69:
a2:f0:fb:77:d4:f4:c5:94:17:5f:d6:a3:4f:d0:fd:29:c3:de:
e6:a3:2c:2d:c6:63:0b:bc:fe:4e:1d:fb:0b:fa:cd:c9:94:75:
16:4c:3f:e9:25:11:0b:56:a7:b0:7b:4e:51:2b:0d:3a:ae:03:
5e:3f:09:c5:e6:ba:b4:08:51:33:c8:ea:36:b8:81:69:29:04:
07:d3:7b:62:4b:9c:c1:71:a0:42:5d:b0:d9:fa:91:3d:a8:a4:
2c:ae:14:e6:6c:1e:8c:3d:76:87:5b:17:b1:2c:8f:52:1d:00:
d3:7d:01:7c:69:9d:ad:db:c4:e6:8e:b8:b2:7d:26:86:1f:45:
61:ce:39:71:be:fd:51:93:8e:0a:a1:34:1d:fe:13:26:8e:df:
c8:79:02:ac:2f:19:b0:84:21:87:66:04:ce:40:8f:da:db:c2:
cb:8a:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:54:00 2025 by rpki-client