Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: Xsd6kGjwrHNTzHN/quJZpbbM7xNO4zxItJ7IK5ObqsM=
Subject key identifier: 3C:57:49:B0:88:1F:8E:67:95:A2:F1:3F:D7:52:F7:05:1F:12:3B:D0
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019874195E0BF8B79B37761B978B3E2B45EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:01:16 +0000
Manifest this update: Mon 04 Aug 2025 08:01:16 +0000
Manifest next update: Tue 05 Aug 2025 08:01:16 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: y5G+EaErQYHeypW8Frs5rWyegcBZN8e7PkI+wmsD9hM=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:5e:0b:f8:b7:9b:37:76:1b:97:8b:3e:2b:45:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Aug 4 08:01:16 2025 GMT
Not After : Aug 5 08:01:16 2025 GMT
Subject: CN=3c5749b0881f8e6795a2f13fd752f7051f123bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:35:88:73:ff:57:ea:07:80:2d:30:b6:3e:
d9:67:8b:9c:a7:a1:bd:64:33:44:1a:f2:60:c1:79:
95:35:98:88:c5:f9:32:cc:7a:f7:eb:c5:ad:20:1e:
ff:93:8a:5b:e3:26:be:89:24:9a:96:32:40:f3:1e:
ef:f3:e5:0c:b3:cf:fd:0d:a6:99:95:66:44:df:d7:
cd:7e:e6:66:cb:b4:1a:af:ed:8e:bb:d2:28:05:8a:
d6:5a:cb:22:9b:0e:b6:19:03:cc:fb:5e:5d:64:c0:
3f:38:cb:a6:ce:51:23:bf:38:23:0a:d3:93:f1:89:
26:09:13:c4:10:23:97:d1:e3:5d:9c:cb:5d:92:69:
b3:cd:15:87:93:51:83:57:fc:90:6a:58:b1:5e:55:
18:83:8c:d6:1b:ce:b1:e6:4b:dd:4a:84:1c:b0:72:
83:c5:51:8c:df:ed:18:5f:fb:5a:1b:12:b1:04:1d:
7a:f7:96:e1:65:c9:83:d9:5c:2b:c9:d0:cb:2e:9a:
48:76:a4:87:c8:8a:1e:3a:ef:09:0a:d4:89:1d:fe:
04:b0:ee:71:3f:c1:24:d8:63:c2:79:87:67:53:18:
39:6a:09:68:60:f9:04:0f:2b:3b:cb:79:4e:20:44:
89:c1:e6:9e:5d:d7:03:72:67:a7:74:11:2c:7d:8a:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:49:B0:88:1F:8E:67:95:A2:F1:3F:D7:52:F7:05:1F:12:3B:D0
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:bc:d5:cd:c1:8e:08:82:c7:c4:eb:bf:07:8e:67:5f:71:
91:12:7b:82:06:a8:83:2e:49:8e:36:8e:8d:87:b8:6d:f9:18:
2c:3e:2d:12:97:de:89:29:bc:31:59:83:57:6d:a8:bf:f5:f1:
b4:5b:84:ab:07:f2:f5:de:92:9c:bf:87:a8:9c:14:bd:08:2c:
cf:3b:fe:17:2e:e8:a8:02:ae:7f:f3:e5:a5:76:1a:b4:35:01:
ac:89:ac:8a:3a:40:c7:86:03:96:08:88:bd:85:0e:ee:d2:2e:
6d:69:ae:17:ce:26:da:b3:d8:d8:04:40:bd:45:c6:01:7b:c4:
4f:6c:d1:3f:17:00:07:57:f6:58:7a:19:70:2d:a8:67:2e:de:
14:a6:a6:91:ed:22:3d:57:43:4e:22:29:fd:65:fa:3b:9b:95:
21:00:d5:9c:90:d6:e8:48:66:01:b7:a0:f8:4e:c0:8c:99:3a:
b3:7d:56:ce:a3:41:f6:1c:1b:ea:b8:f6:b8:22:e3:ed:e5:81:
b6:63:76:0c:61:8a:d0:f6:90:19:bc:c1:22:ca:bf:5d:00:b2:
fe:e8:03:51:74:78:eb:be:9e:cf:d9:67:7e:66:7b:d2:99:b3:
4c:1a:a1:ad:ca:1a:89:7e:2a:32:82:ac:12:7c:02:09:ec:26:
df:7b:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:25 2025 by rpki-client