
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: DzAufh2VGoQgHR9uNyxDG0nfQeG5zz8MBV6uGEVicHE=
Subject key identifier: EC:22:88:F5:EC:6B:42:0A:D0:76:4F:2D:BF:44:26:5F:4A:B0:C2:B6
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019827477E5D5B48823DC07A7C3C6D63E8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1608
Signing time: Sun 20 Jul 2025 10:00:53 +0000
Manifest this update: Sun 20 Jul 2025 10:00:53 +0000
Manifest next update: Mon 21 Jul 2025 10:00:53 +0000
Files and hashes: 1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: n77xMO6BPmWmmbqbCF3E9Nr2iwYusWLuZDtWB6a5hOs=)
5: ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa (hash: hHz6N7J+wTDqY/Lm+M/7LMn5tnMNWvw100eCFcrE1zM=)
6: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
7: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:7e:5d:5b:48:82:3d:c0:7a:7c:3c:6d:63:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jul 20 10:00:53 2025 GMT
Not After : Jul 21 10:00:53 2025 GMT
Subject: CN=ec2288f5ec6b420ad0764f2dbf44265f4ab0c2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:77:3d:e3:8d:8e:86:62:57:7e:6a:cb:a8:
2f:46:0e:03:bf:09:8e:1c:c6:08:7f:95:6e:51:05:
0d:0b:08:dd:20:ea:02:a3:05:d5:6d:da:1f:0b:0b:
83:a3:d0:8a:a6:19:a2:19:bb:4f:8c:3f:48:26:12:
cd:11:39:6b:18:25:c7:fb:b5:2d:54:6b:4e:43:fa:
e0:e2:c6:97:a0:28:45:62:5d:ca:e8:49:2d:74:35:
e0:f9:17:35:5f:16:68:57:4f:22:40:49:7f:bb:da:
1b:5d:76:30:9c:73:01:29:55:d0:a2:48:fa:0b:54:
8b:d7:b9:fc:59:f9:a5:61:1a:9d:79:3c:12:00:b4:
db:40:9a:c1:42:d3:fc:1d:ae:45:22:24:b1:c5:e2:
4d:c5:c7:f1:ad:e1:e3:c4:04:75:9e:be:76:4b:2f:
81:3c:19:47:b6:bf:9b:0a:04:b1:e9:4a:68:60:47:
c0:84:6a:34:0f:00:38:19:0a:ac:ac:34:55:50:de:
e6:17:31:05:7a:b9:d0:fa:7d:8f:6d:f9:2e:7b:41:
8e:47:04:6b:35:ae:21:88:99:51:1d:2a:1c:2c:49:
77:18:f7:bb:8b:89:ee:08:d4:42:f9:f0:84:2d:5e:
70:5c:c7:47:ad:ea:52:68:b8:67:32:d4:64:33:b0:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:88:F5:EC:6B:42:0A:D0:76:4F:2D:BF:44:26:5F:4A:B0:C2:B6
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:89:35:b7:59:00:83:bf:90:3a:1f:22:2e:ed:d4:5a:15:ba:
2b:9f:a0:e1:77:79:c5:4f:76:8a:7c:c2:10:aa:e4:8b:c8:8b:
ef:d0:cd:e9:6e:fe:ad:91:fc:43:fa:f3:ae:66:7e:7c:8f:67:
5e:e2:44:b5:90:8a:78:6f:5e:b3:60:d0:a9:a6:79:55:9b:83:
e7:47:57:4e:47:b7:47:a0:ba:fe:cd:11:e7:96:0e:1d:ac:fb:
0f:1f:1c:a6:b7:60:a8:51:f7:88:4e:96:8a:55:84:3a:f6:4e:
82:3a:84:7a:40:60:69:25:ff:1d:b3:77:9b:2b:75:fe:44:bf:
e8:51:a5:2e:b9:be:a3:55:3f:d0:4b:cc:c8:1e:06:e8:09:41:
ea:50:7b:bd:22:c1:a1:d5:7e:f8:26:f1:9d:43:18:ed:64:f7:
45:fc:e0:fa:a0:51:01:cd:68:ca:28:c4:38:c2:b2:ff:d5:85:
5f:88:f0:62:8a:7d:05:2a:a8:8d:09:ce:1a:24:d3:67:5d:bc:
ab:76:58:0f:ab:d5:91:3f:ad:32:57:c4:0e:80:e7:46:36:36:
de:35:e2:66:d9:e2:cf:52:d4:c7:8f:77:43:e0:fb:8f:a1:48:
1b:d4:86:62:e9:fc:f8:a3:b9:3b:d2:2d:23:35:12:97:8e:b3:
1b:c5:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:50 2025 by rpki-client