Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: +IOd93Ti0KFO9bjfRf6kBYZVCC+hdTxZ4JPp3fv/eP8=
Subject key identifier: AD:20:5F:34:A4:43:34:1F:C9:19:1F:3A:6D:AB:4F:50:E1:98:4A:CE
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 01984A77D54BA486CB2942E1C6994667C076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 06:00:24 +0000
Manifest this update: Sun 27 Jul 2025 06:00:24 +0000
Manifest next update: Mon 28 Jul 2025 06:00:24 +0000
Files and hashes: 1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: 3O7PSN3l9FgekS7DkHBEJGjGwuIMgZzA4A67cSRW6Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d5:4b:a4:86:cb:29:42:e1:c6:99:46:67:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jul 27 06:00:24 2025 GMT
Not After : Jul 28 06:00:24 2025 GMT
Subject: CN=ad205f34a443341fc9191f3a6dab4f50e1984ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:9c:f8:69:dc:dd:78:37:0d:b9:b5:36:8a:
19:71:c2:da:bd:c8:05:01:4f:23:d2:65:ea:9b:96:
66:a8:64:c5:c4:e5:ea:7b:e2:a6:e8:60:32:78:01:
e4:1a:09:a9:4d:52:a7:81:7e:a1:b9:5f:40:f4:94:
b1:d7:64:7a:fb:7b:f8:00:44:a7:bf:48:61:d5:01:
78:f0:0b:e5:29:f0:4a:bc:d3:01:05:03:5b:9e:7f:
37:18:b7:6e:3e:2c:57:0b:ab:08:43:fa:c5:1c:71:
fd:f6:d9:52:9d:1c:4b:d4:19:c1:a6:07:af:97:bd:
51:5b:71:e5:d1:3c:9c:78:5a:81:08:a8:b1:a2:c5:
3b:ec:a4:06:67:5d:be:22:59:96:8f:28:a8:6a:ae:
1d:31:a9:54:89:89:f4:96:c4:30:a8:dd:88:e3:29:
a1:9f:b8:7d:6e:cb:fa:97:9d:e2:b8:80:28:4d:9b:
b4:6a:7f:41:95:2e:27:3a:30:d1:23:38:02:15:3a:
21:42:46:e1:3c:d6:d0:27:61:2b:f7:42:7e:fa:1d:
a0:b2:84:df:21:d4:8e:76:7c:f7:2f:5f:38:85:d9:
b2:b0:16:b9:38:1b:85:91:93:c1:1c:d0:e6:98:34:
ab:18:9d:95:fb:f5:fd:4a:94:e5:d0:a7:cf:2b:8b:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:5F:34:A4:43:34:1F:C9:19:1F:3A:6D:AB:4F:50:E1:98:4A:CE
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4d:91:33:20:08:37:58:29:10:7c:0d:44:c2:f1:8d:8e:05:
87:10:3f:a4:4f:f6:96:36:f1:7d:b3:59:d8:df:04:5d:a5:2a:
ce:40:9f:25:64:c1:83:90:e0:05:0f:f6:4e:1c:3c:5e:3a:46:
e2:d8:4f:36:f7:1a:7f:49:9d:8c:04:cb:dc:4b:98:e2:f6:83:
24:79:05:ea:77:53:a8:e1:b8:68:5f:b3:0e:34:48:6c:6f:cc:
11:de:49:36:18:d9:55:ed:d6:6a:d9:d1:dc:95:dd:30:83:d9:
ea:75:8a:cf:7f:4a:28:a6:1f:ae:d9:20:95:7e:d7:87:16:27:
87:a6:89:06:e8:c9:bf:04:58:92:39:9d:5a:4a:99:d8:3e:db:
ae:4c:2d:60:9a:09:6e:c7:00:10:ca:50:d8:f4:12:d6:27:5c:
17:3b:e6:aa:89:cf:03:11:c8:ce:5e:99:21:34:50:f5:35:a1:
ac:a5:3a:00:e9:f4:a3:8e:8a:18:f7:e2:e0:27:a9:3d:6b:a5:
c0:50:80:58:d1:43:40:a6:a7:8a:76:61:e0:81:7a:1b:24:36:
ef:2f:8e:44:87:24:85:63:af:59:83:f5:ee:06:77:92:31:81:
13:24:b9:45:a9:be:0c:a2:9f:bf:83:ca:30:bf:d4:2f:8d:1e:
cb:f8:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:52 2025 by rpki-client