Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: ZN4R0fvDFh/Obqk4jfxU734tXfjCi9v8UxfAroJhFDw=
Subject key identifier: 49:5D:34:30:63:2F:AB:3E:F1:FA:B8:C9:AA:30:AE:DE:74:6A:55:11
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 019847E49AF16CD10B1EC15B2A3C1F6A4921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0A3E
Signing time: Sat 26 Jul 2025 18:00:20 +0000
Manifest this update: Sat 26 Jul 2025 18:00:20 +0000
Manifest next update: Sun 27 Jul 2025 18:00:20 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: pOoDKuF1PhTf3WxBBP22pl7M5WDsUGmJdcgqZUpN4PI=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:9a:f1:6c:d1:0b:1e:c1:5b:2a:3c:1f:6a:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Jul 26 18:00:20 2025 GMT
Not After : Jul 27 18:00:20 2025 GMT
Subject: CN=495d3430632fab3ef1fab8c9aa30aede746a5511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:4e:96:c9:85:4a:c5:46:9b:1d:9d:4c:57:
f5:f8:80:73:db:54:3a:28:3d:e4:73:4a:5b:9b:97:
7c:0c:f3:e6:63:5a:f9:d2:96:64:c7:8f:86:e1:c5:
fd:79:9c:9b:b6:fb:dc:92:6e:ab:a7:2d:14:1d:71:
8b:72:36:4a:ed:53:dc:41:68:c8:3b:df:82:1c:4d:
27:1e:c6:97:3d:a7:1a:bc:61:a0:af:3c:4b:f5:a5:
04:14:68:23:39:1d:4d:20:44:9f:09:ae:e0:2e:88:
c6:b3:2c:8a:d6:e9:4c:d2:ec:df:61:73:99:4e:45:
15:8e:a1:1d:12:da:be:d9:3e:96:31:a8:6a:ec:e0:
cc:2a:56:f7:ce:4b:e4:25:0b:99:5e:3e:13:75:a8:
9b:b1:82:2e:65:9b:87:59:d7:51:07:3a:13:6a:c3:
f8:58:56:47:86:9a:45:2c:30:76:4c:d0:9f:4e:12:
fc:e3:47:3b:26:05:7f:81:3c:3d:d7:ce:4c:34:59:
7a:ed:3b:0e:37:ab:d8:5e:a5:7e:67:be:da:33:57:
74:85:10:89:99:b8:bc:c5:81:17:22:32:cc:ef:35:
42:7a:5f:e2:9f:b3:30:ef:f6:09:de:b7:37:c1:c6:
79:63:be:33:81:b2:b6:c6:5c:da:94:ba:9e:f0:3b:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:34:30:63:2F:AB:3E:F1:FA:B8:C9:AA:30:AE:DE:74:6A:55:11
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f3:f7:77:6f:0b:39:f3:2f:e6:86:94:e9:a4:de:74:74:68:
57:e6:a0:b6:51:7a:6e:c6:fd:97:aa:59:9b:47:f2:8d:9e:8a:
b4:3d:6f:e1:eb:f6:68:77:8d:9c:fa:64:b8:54:a1:45:2e:a8:
58:c8:42:1c:cc:19:5b:35:50:82:6c:38:eb:89:92:cc:7b:cf:
a4:9b:e8:c9:23:ee:9a:81:17:56:77:50:8e:11:3c:0c:b4:f8:
aa:3e:47:3a:9a:b4:26:8b:57:88:62:30:0e:4f:44:6a:1b:ff:
7a:8e:1f:99:bd:f7:9c:69:ce:70:85:26:a7:0d:29:d1:b2:60:
15:34:9a:6a:32:9c:db:17:54:f6:6d:0b:d4:57:3c:96:22:e4:
7e:f6:fc:30:e4:b6:17:7c:89:9e:c0:e0:b7:7b:01:c1:5b:be:
60:a9:66:bf:26:a2:45:34:90:1b:92:60:ff:95:91:25:e5:ca:
6a:53:80:ef:34:8b:2d:28:18:f2:0e:5b:e2:20:b3:28:3d:a2:
41:21:fb:66:d0:3d:72:fa:42:0f:42:fe:bf:2e:69:dc:35:f0:
53:be:de:b3:6b:90:15:a6:e9:e1:23:9d:e8:f9:9a:8a:12:48:
50:1e:3f:cb:86:f2:d6:15:08:35:7f:57:d5:9d:10:90:af:8d:
7f:09:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:24 2025 by rpki-client