
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: swVwilhSBdbSAPHWPN6WFyhSyqQ04E3QmFS2qgZADEg=
Subject key identifier: 29:E6:F8:DA:FB:01:B3:14:8D:FA:E8:0A:36:60:53:2D:03:C7:16:23
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019885B134EC96A337335D232233600F22F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1629
Signing time: Thu 07 Aug 2025 18:00:39 +0000
Manifest this update: Thu 07 Aug 2025 18:00:39 +0000
Manifest next update: Fri 08 Aug 2025 18:00:39 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: wvDS7IiUUCBcfR5C0xaGrrT8DBKVKZOqPLK2s7cd0/w=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:34:ec:96:a3:37:33:5d:23:22:33:60:0f:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Aug 7 18:00:39 2025 GMT
Not After : Aug 8 18:00:39 2025 GMT
Subject: CN=29e6f8dafb01b3148dfae80a3660532d03c71623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:75:e6:08:ec:91:21:62:ef:c7:b1:67:94:
aa:82:cd:cb:52:a3:99:77:86:cf:8b:69:00:53:63:
4b:41:82:f1:3e:e8:ff:ff:20:fe:62:8a:b1:2a:ce:
fa:1b:3a:5c:1b:35:19:e6:e3:eb:cb:4e:ea:59:54:
22:36:dc:07:de:41:95:ec:e6:41:33:07:ab:1c:f2:
a8:3c:78:ee:d4:3a:ce:df:fd:b0:21:d3:77:34:f6:
18:03:ea:0b:c2:29:2e:2d:3e:a4:70:98:bc:34:4e:
68:12:48:5a:85:92:b3:e8:46:3c:33:f7:92:1a:ff:
ec:05:aa:4b:7a:21:78:b8:90:47:95:03:98:9d:ee:
08:f5:2b:b4:49:c2:3b:15:08:1d:2e:3b:42:93:88:
c0:e5:c6:cd:b2:ff:92:18:74:70:74:a0:8d:1f:36:
68:62:8f:3c:5e:b1:51:de:4a:be:8b:71:ed:d9:5c:
5c:73:18:89:e9:82:f6:25:dc:13:21:9d:7e:a7:6d:
be:b9:3f:9b:a8:8a:37:4d:0d:40:78:ea:dc:82:7e:
94:41:e9:41:2e:80:91:b0:f2:55:fc:01:1f:ef:48:
6e:ea:7b:41:65:14:29:e0:3f:26:10:e0:ff:9d:41:
1d:23:70:3a:cc:c7:17:3b:4e:5e:97:82:06:6c:25:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E6:F8:DA:FB:01:B3:14:8D:FA:E8:0A:36:60:53:2D:03:C7:16:23
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:99:c7:2a:81:e5:33:0b:c0:ae:23:ff:4e:5c:1f:aa:c4:
93:5f:2a:71:b6:8d:24:cc:4f:b8:ac:29:8a:a6:2d:01:0b:7d:
36:c5:14:8e:0a:ad:e7:d8:da:22:78:6c:a0:b6:d5:95:70:79:
29:87:85:cb:99:6c:8e:1b:b6:b4:8a:51:26:b2:9a:cd:65:7d:
bd:59:17:2f:ce:bb:c8:23:9b:07:fa:39:74:60:7b:33:42:1f:
ce:c3:bd:0d:69:61:4e:5f:78:af:fb:b4:88:65:e9:60:01:8e:
23:ec:d1:b6:b9:c4:52:f6:6f:4c:01:d9:33:b1:35:81:6b:b5:
65:20:25:9f:68:5d:e3:7f:b4:67:c2:f5:18:29:83:b7:97:47:
91:81:36:97:fd:29:43:17:95:12:71:7e:75:f5:cf:1e:1d:77:
5d:c7:dc:5e:ba:d9:1e:62:d2:6e:9a:2a:c0:d6:03:71:05:bd:
cb:bd:18:56:8f:a0:6f:76:8c:62:09:f9:34:20:c7:64:6a:eb:
3e:32:93:32:ae:c8:b5:93:c6:d6:75:23:b0:69:ad:73:b9:b3:
ff:5a:03:e0:ac:f9:86:38:d8:25:fb:96:54:55:e3:17:19:a3:
31:fc:c6:5e:f8:a3:65:0e:8b:10:00:b9:cb:42:5e:c3:e1:40:
dc:46:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:24 2025 by rpki-client