Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: tt5U1+SFowLMJ9NqmdJk78cWjgw/UhCSV12+/7EdJV0=
Subject key identifier: B7:82:F1:B8:29:38:BA:1B:2A:E2:CB:22:A2:DC:57:FB:39:56:7F:1C
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0198A08424FD182CCBD631CC837D1865F202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 066F
Signing time: Tue 12 Aug 2025 23:01:11 +0000
Manifest this update: Tue 12 Aug 2025 23:01:11 +0000
Manifest next update: Wed 13 Aug 2025 23:01:11 +0000
Files and hashes: 1: 7Ghy2KOMD1-pxs6lWGiA6q4-z1k.roa (hash: J5S5OetOqGJ7Io3TU/mcCxQvdxv1Uc0njSvqSkgbTBE=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: eilvAC44LOmPEQMIpCjtqE2Lo8p9GoBRXYecFNvBAEQ=)
3: uonOqP5wBqSzkwbkw5ZejvGJb6w.roa (hash: amqIUnAXzDDjJKDCjX6cXkvcrcCD+JJZvl678dayDXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:24:fd:18:2c:cb:d6:31:cc:83:7d:18:65:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Aug 12 23:01:11 2025 GMT
Not After : Aug 13 23:01:11 2025 GMT
Subject: CN=b782f1b82938ba1b2ae2cb22a2dc57fb39567f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:f3:c0:c2:05:b2:30:bd:45:f2:53:8c:8c:
3d:ea:66:6f:df:a0:22:d9:88:e1:4b:f9:c4:39:00:
5f:4f:6d:a5:1f:aa:3e:ef:af:15:f5:02:20:25:93:
9f:43:58:5d:9c:5f:3e:60:13:dc:5a:64:c1:8e:9a:
73:a8:7b:23:0e:df:e1:3b:1f:a9:91:18:3b:89:1f:
89:24:3f:77:89:9d:39:ad:21:bc:bb:e8:b9:38:0c:
7a:16:4c:87:56:74:dc:02:69:83:21:14:a7:a5:a6:
66:d1:03:18:1f:64:14:2d:f4:ee:68:1c:37:ad:e1:
5a:4b:9f:52:d0:74:41:35:45:49:5f:3a:5d:6b:4f:
9d:9a:8c:4b:9e:96:d3:5d:2f:36:36:0e:13:58:0d:
06:10:6f:60:5e:90:76:b3:16:e3:68:38:d4:1a:ca:
10:f7:ed:83:4f:4d:32:25:12:62:8f:9d:ba:35:a3:
fb:6c:ea:78:34:7f:c8:5b:8d:ed:6e:9f:88:1f:dc:
ff:53:da:58:a1:55:f9:93:ef:98:0f:db:f7:60:df:
e5:1f:be:7b:49:0b:e3:cd:c5:2a:c8:65:f4:78:ce:
f5:ac:19:92:43:7a:b9:b3:2c:bb:52:51:be:5e:52:
59:b0:6f:e1:79:d0:c5:fb:32:52:e4:ad:b3:9a:91:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:82:F1:B8:29:38:BA:1B:2A:E2:CB:22:A2:DC:57:FB:39:56:7F:1C
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d0:96:e0:92:cb:24:4f:a7:c4:b8:5c:ee:e5:f8:58:64:be:
83:f1:39:f5:9a:18:ec:5a:c2:82:ef:68:a2:43:df:2b:5c:0a:
b1:3c:e7:c8:df:3d:d4:41:54:33:61:51:8d:22:0f:78:a8:7e:
9c:7e:43:bc:d3:e6:19:a2:41:6d:fc:c8:f8:9f:47:90:2e:5e:
90:82:be:b2:e1:c2:ac:3d:fc:ed:f9:69:db:b2:d9:3c:d0:cc:
d3:cc:09:c6:08:cd:da:82:b5:11:64:03:5d:d9:51:f1:12:5f:
25:70:df:e0:25:e8:08:a9:41:fe:39:96:11:1a:b0:eb:a9:95:
6d:4e:34:ca:60:0b:1e:88:ec:1e:f9:64:e8:32:35:08:a9:a5:
d1:19:f1:51:f8:b8:0a:6b:bd:4c:6c:57:d3:e1:63:57:65:0b:
2b:4a:6d:70:7f:9c:45:e2:ef:b1:31:cf:89:9b:4a:f3:7d:14:
83:5f:ac:f4:a2:43:66:22:d4:17:87:54:1b:7f:bf:40:96:a7:
6e:19:fd:e7:0b:c1:91:03:c4:7e:e4:6d:1f:fb:b0:0d:88:56:
5d:5c:72:84:67:86:8c:cb:f4:42:7f:1f:22:db:b5:03:15:f3:
79:77:bd:02:a0:33:13:5d:89:88:5d:f6:d5:f2:ef:23:9e:4d:
75:6d:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:10 2025 by rpki-client