Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: 9FGDZS34Zm2Ljsqf+SiRePUd9Mob5Cs0IpD6bptqhjM=
Subject key identifier: 84:CC:11:19:1F:D2:8F:79:76:33:9E:EF:58:CA:94:5A:ED:6C:53:FC
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019853445106DF34A745987C80FCE20580BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:00:42 +0000
Manifest this update: Mon 28 Jul 2025 23:00:42 +0000
Manifest next update: Tue 29 Jul 2025 23:00:42 +0000
Files and hashes: 1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=)
2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: DIkRlyEUITt6YB0V5xA4g4RRnPLocCgbZYl1pJvwtTg=)
4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:51:06:df:34:a7:45:98:7c:80:fc:e2:05:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jul 28 23:00:42 2025 GMT
Not After : Jul 29 23:00:42 2025 GMT
Subject: CN=84cc11191fd28f7976339eef58ca945aed6c53fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:7d:87:d1:25:d4:51:e3:0b:b4:5d:44:2c:
46:9a:35:bc:1b:df:e8:3b:e5:c7:a4:a8:0c:80:42:
2e:49:c9:b6:a3:e9:0f:25:5f:ef:2c:57:59:35:f9:
27:e2:05:ab:0b:e1:1a:cb:22:a2:2d:3b:d2:28:e2:
3b:59:0a:f4:7d:dd:c5:0a:b5:16:74:4e:98:ea:c9:
3d:ff:b1:da:90:9a:59:b9:c1:08:2d:ff:d4:ba:45:
c3:80:61:33:30:2a:51:58:b0:dc:72:fa:fc:a1:93:
e9:50:49:d9:54:2f:55:a3:7c:a1:f1:9d:fa:9c:21:
8d:58:a1:e9:f5:d2:d7:0c:b2:89:8e:ce:89:8e:93:
44:13:2a:a3:3b:a8:03:e9:4d:4a:0c:29:a3:cc:68:
8e:74:59:93:1a:9c:8a:e9:11:e7:30:30:5d:42:d4:
5c:05:b3:c9:ff:dd:46:c2:60:3c:73:dc:54:2e:e6:
36:79:8c:d9:4c:bd:de:fc:56:1a:1a:4a:8f:07:47:
64:bc:98:66:6f:7f:44:96:66:38:5f:42:a1:77:1a:
5f:50:ab:b4:83:6f:70:cf:6d:d1:36:ea:57:a3:3a:
76:63:3c:59:fd:89:28:33:39:6a:10:00:b0:a2:cb:
3b:39:29:93:e1:da:74:77:a9:0e:ed:f3:be:73:dc:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CC:11:19:1F:D2:8F:79:76:33:9E:EF:58:CA:94:5A:ED:6C:53:FC
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:18:9a:f4:5e:30:9c:28:17:fe:cb:d8:2c:ec:3d:1d:1f:
61:64:60:08:14:23:da:86:cd:a0:90:a3:bc:5c:b8:7a:31:97:
97:38:0f:21:94:80:d5:e5:71:58:e6:b1:f7:16:a8:36:ee:4f:
7e:6e:9a:18:63:bc:13:78:75:24:f3:8c:3d:1e:ce:74:e9:c5:
15:fb:18:b0:45:a2:df:86:bd:78:9b:6c:1c:a8:27:34:cf:92:
4f:55:8b:e8:5d:ce:37:cc:30:2c:1a:9d:16:90:62:b5:b1:92:
e6:64:fb:39:c2:14:41:98:ca:82:3c:8a:ba:44:e0:75:80:29:
72:5c:93:2e:02:60:b5:99:ce:39:78:1c:79:46:41:4f:c4:0a:
e8:b4:62:e2:32:54:6e:49:a9:2d:d2:17:cb:aa:57:02:f5:4c:
8c:63:2c:91:30:f3:b5:75:36:87:24:5d:8a:60:03:6e:9b:07:
05:46:68:ac:2f:34:cc:73:77:e8:c6:41:ff:5c:fc:35:8e:a6:
2b:11:d4:4b:6b:81:91:fb:4d:8f:8f:d0:0b:5d:25:57:2a:54:
6b:41:3b:f9:08:2a:47:cf:a2:cc:b3:60:95:52:4e:f4:b3:61:
de:cd:c0:7d:71:a2:59:82:00:27:6c:64:64:3e:37:98:62:e7:
a0:bc:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:10 2025 by rpki-client