Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: Hk/xSVHqEna/T4fwlcr8rODO3v7PUEw5Y6hhyTbQOVc=
Subject key identifier: B8:33:81:6D:87:87:00:3D:AD:E2:E7:A6:F7:00:9B:8A:3F:4B:2D:A8
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019849D35725BF65857331983C9CA14AC517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 061D
Signing time: Sun 27 Jul 2025 03:00:43 +0000
Manifest this update: Sun 27 Jul 2025 03:00:43 +0000
Manifest next update: Mon 28 Jul 2025 03:00:43 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: OmwHibbLBkY1C+t4sGp3Ir94OOc1xPT69/+WFILrXIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:57:25:bf:65:85:73:31:98:3c:9c:a1:4a:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jul 27 03:00:43 2025 GMT
Not After : Jul 28 03:00:43 2025 GMT
Subject: CN=b833816d8787003dade2e7a6f7009b8a3f4b2da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:e4:9d:ab:ae:60:0c:90:01:84:95:92:0d:
72:96:92:e2:a8:af:51:00:6f:31:e7:3f:3e:86:b7:
ac:cf:6a:26:1d:3e:18:f6:6d:af:86:c9:75:cd:9b:
95:de:97:cb:bf:87:80:7e:e2:cd:41:ed:44:da:92:
22:79:9f:ee:bd:ce:c8:33:fc:4e:ed:aa:db:5a:0c:
56:c3:55:9e:0d:6c:05:49:38:48:a5:4d:db:a2:00:
06:31:ce:a7:41:0b:61:2d:37:a4:54:38:dc:0e:80:
9b:79:59:af:10:c0:98:77:39:be:b5:22:a3:a8:35:
dc:11:80:84:09:95:fa:3f:37:ab:63:4f:24:86:66:
91:74:3b:ae:fb:57:e6:f1:9b:63:fa:5e:2a:7e:db:
31:1a:bd:09:ee:4a:5d:18:8d:03:84:a9:e1:33:54:
09:9e:8f:88:03:f4:87:55:20:27:14:c1:80:a8:84:
58:3a:51:08:03:6e:8c:29:1f:d0:6a:5d:05:bb:d6:
7b:10:30:ff:84:f9:45:29:9f:02:28:93:10:65:bc:
41:8c:d3:95:22:24:8a:63:3a:cc:9b:4f:46:41:7d:
33:dd:c6:57:64:83:a1:c1:19:0a:c4:68:8e:02:7f:
70:a1:8f:37:96:31:a1:5d:43:71:0f:46:78:e3:29:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:81:6D:87:87:00:3D:AD:E2:E7:A6:F7:00:9B:8A:3F:4B:2D:A8
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:63:0f:df:ce:71:46:29:4d:26:3c:de:c1:65:84:5a:e7:c9:
e9:88:a5:be:8c:b5:7b:2f:dd:a0:b3:e3:60:5a:72:ce:89:7f:
d5:33:3a:5d:0e:23:28:99:22:e5:9e:37:43:b0:d4:6c:b0:15:
21:05:45:c2:0a:b8:9d:8f:91:51:e0:47:9e:ee:03:f7:df:d6:
6c:58:ab:39:0a:50:aa:28:cb:0f:2e:3d:da:82:2a:0d:2b:46:
ce:f5:ce:86:af:1c:e4:8f:3a:59:be:4f:98:fd:7c:c3:cf:08:
b8:57:fb:f1:b9:35:f9:2c:30:f3:e3:4c:32:76:74:5a:68:1a:
77:3b:e6:55:4e:09:53:ef:6f:a6:a8:2c:68:7b:d2:a3:31:8f:
8c:97:ec:10:42:98:b6:92:68:eb:01:4a:7d:d6:90:bb:d6:eb:
2c:b1:00:4f:34:df:20:2c:0e:5f:cf:cf:c8:bb:8e:f5:ce:7e:
5b:1b:07:16:26:cc:f1:25:23:50:2a:20:9e:37:44:de:af:ed:
64:5d:96:b8:0c:28:c8:de:05:b0:3d:55:76:c1:8b:8e:20:23:
53:8e:89:8f:92:8b:9d:48:3d:f4:bf:19:11:1b:3d:11:a6:ee:
21:5f:93:ad:4a:8e:21:6b:d6:9b:ca:f4:7e:62:2c:45:07:20:
bd:38:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:58 2025 by rpki-client