Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: 3pUnUtYME0ENCj6AuRpbJ2oB4BgBASFAdMcqGdG1FUM=
Subject key identifier: 4C:F0:CB:13:E6:54:2E:96:04:75:D8:EC:F5:8E:13:0B:50:C4:7E:0B
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01983803AC20AF5E4A9B0F81E9F66F816BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0A1D
Signing time: Wed 23 Jul 2025 16:00:21 +0000
Manifest this update: Wed 23 Jul 2025 16:00:21 +0000
Manifest next update: Thu 24 Jul 2025 16:00:21 +0000
Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: DNvr8av2buQFuzF8M50/IdbkAIf3R/MaQhqlgNPgd/g=)
5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:ac:20:af:5e:4a:9b:0f:81:e9:f6:6f:81:6b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jul 23 16:00:21 2025 GMT
Not After : Jul 24 16:00:21 2025 GMT
Subject: CN=4cf0cb13e6542e960475d8ecf58e130b50c47e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:e8:b4:3e:52:f0:8d:29:4f:c0:17:46:07:
31:51:85:63:96:14:9b:71:b6:bb:69:b8:e8:c9:ce:
d0:85:9e:fb:c9:9a:a7:82:26:f2:21:e2:19:79:c6:
4d:d2:00:cc:0b:1b:4e:06:d2:dc:b1:c0:8c:15:55:
de:c6:8f:6e:d9:94:56:f2:95:00:d0:10:2f:6d:ca:
ef:03:8c:b4:11:bd:65:97:b0:c9:10:a8:7e:fc:7a:
b5:89:a2:54:66:f9:c0:05:6d:e8:3b:92:48:1b:ea:
bb:90:1e:ab:73:b4:0f:14:61:22:a2:e8:f8:31:49:
94:c4:cf:4c:2b:2e:31:03:29:94:05:2d:b4:a8:04:
48:f7:52:1e:f6:ff:be:4d:6e:e4:86:c9:72:48:d0:
67:84:c5:ef:86:9c:09:b0:c4:98:44:64:d8:02:e6:
50:5d:ce:4d:ee:cd:5d:40:fe:8b:2e:d5:10:9f:c6:
58:c7:7b:a2:c7:8a:82:98:ab:6b:f5:f4:b9:48:e3:
ab:e7:94:fa:00:88:aa:87:e7:79:6c:1b:b1:71:e1:
8d:d7:e2:ac:51:fa:95:3d:24:f3:78:32:09:03:b7:
63:ac:11:68:50:3d:08:cd:bd:bd:18:74:7a:4f:8c:
cf:1c:e2:69:26:b2:2a:ff:04:28:2f:0c:1f:76:2c:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:CB:13:E6:54:2E:96:04:75:D8:EC:F5:8E:13:0B:50:C4:7E:0B
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:08:97:a4:f5:c8:06:af:98:72:02:f4:84:49:2c:8b:e1:7c:
23:44:8b:aa:e0:a7:a4:69:d6:30:34:ce:ed:f0:91:da:03:61:
22:02:7d:96:19:7f:a1:b6:08:1c:52:05:a1:ca:ab:04:4e:29:
41:ed:e5:9f:8a:ec:ae:22:50:72:b6:27:8f:c9:2c:c5:9d:f1:
f0:51:18:30:47:fa:fa:ea:f8:82:cc:7f:3e:4e:29:25:00:d5:
43:1a:6a:0f:7d:38:c2:17:8d:86:2c:c1:b6:80:18:02:8f:b1:
6b:f1:3f:c5:15:b2:ac:b8:1f:16:5b:a6:89:c2:bd:39:32:5b:
94:87:e4:31:81:02:d8:9d:39:8c:67:cb:53:60:c6:4c:63:3b:
1c:b3:bc:20:de:60:c2:dd:97:0b:b4:48:fa:20:e8:74:d5:79:
cb:63:4d:87:fb:ce:0e:d0:2c:46:cf:f3:36:70:33:e0:6f:36:
6f:7e:9d:7d:d8:ac:ab:1b:85:f5:59:92:b7:d2:51:87:e6:6e:
e0:2f:09:84:4f:6c:bd:a3:83:bd:d7:ed:97:1c:31:3d:61:f4:
d0:27:98:b6:4f:90:de:99:e0:bb:29:7e:d7:49:cf:b8:e3:1a:
ad:94:5c:03:ef:6f:ad:2e:b1:ac:65:7c:70:f0:b4:2a:f5:30:
0b:cf:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:25:54 2025 by rpki-client