Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: X3yD4IdWxhqchSXv/0GIlFIZ7TEjukym22HqP4ugOUI=
Subject key identifier: 4F:B3:69:DD:8C:0A:7D:3E:25:C9:BC:C3:4F:E1:63:DF:D0:96:91:D3
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 0198548D74BE11EBA392D24FF9930F21C21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 0DC3
Signing time: Tue 29 Jul 2025 05:00:13 +0000
Manifest this update: Tue 29 Jul 2025 05:00:13 +0000
Manifest next update: Wed 30 Jul 2025 05:00:13 +0000
Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: zHlmdxrs7l2GbBgRvtKnNGeVwv7UsDsa5tpPjRF1rgw=)
4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=)
5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:74:be:11:eb:a3:92:d2:4f:f9:93:0f:21:c2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jul 29 05:00:13 2025 GMT
Not After : Jul 30 05:00:13 2025 GMT
Subject: CN=4fb369dd8c0a7d3e25c9bcc34fe163dfd09691d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:b3:b7:c5:60:8e:9d:af:8a:18:a5:e4:1f:
6d:1e:94:92:47:e2:40:f5:37:a4:0e:a1:5a:5f:c5:
bd:1d:c4:92:f0:6b:53:70:46:ed:17:c2:4f:5d:5b:
bf:e1:40:5f:41:d6:f6:cb:1d:fa:8a:e9:5b:3e:8d:
3b:03:70:c6:ff:1e:dc:46:8c:2e:27:2c:2d:68:d0:
f8:66:e7:44:60:92:78:d0:46:a5:00:4c:74:dc:22:
c9:f4:77:f2:76:51:db:78:2e:32:c7:1d:9b:bf:ac:
5c:ef:c9:f2:a9:4d:52:1b:a0:ae:a8:9e:32:9e:d3:
70:f1:54:b3:71:82:b4:44:79:1d:d9:9a:4f:7a:b3:
8a:fd:f0:d7:5a:6a:79:c0:24:70:2a:e6:c3:ee:ae:
d3:48:85:7f:1c:f6:6f:3c:97:d2:8e:6a:72:39:05:
00:78:1d:e6:1f:91:59:91:b0:94:8f:6c:b4:a8:1b:
2c:d3:3d:9a:c4:14:c8:2f:31:96:24:a1:26:cd:60:
d6:b9:1c:08:ef:95:f9:d1:bc:53:c3:9c:da:51:46:
59:ab:f6:68:76:9d:6d:8b:69:d2:aa:6d:f0:20:a1:
99:be:6a:fe:ac:2f:6a:1b:39:93:c5:4f:13:08:58:
ca:96:63:a1:f1:8e:66:2c:4e:5c:15:70:7a:4d:8b:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:69:DD:8C:0A:7D:3E:25:C9:BC:C3:4F:E1:63:DF:D0:96:91:D3
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b1:dd:0d:87:4a:8a:ad:ca:5d:65:71:64:1c:8c:69:18:c7:
18:39:69:24:ec:f5:32:6c:67:32:39:83:f9:cd:be:25:b6:3f:
28:9f:5a:dc:39:75:38:c4:7d:a1:35:eb:61:e1:c7:ba:dd:0e:
a1:c4:39:7c:b1:44:1f:c5:17:4f:39:75:da:9e:05:f0:8d:db:
79:67:d7:8b:90:41:3c:18:ec:0e:d3:f8:88:b7:aa:c2:77:15:
0c:9b:e8:63:cd:a0:ff:f0:62:39:b7:83:ae:6d:77:3a:47:78:
b5:9d:81:5c:cc:37:a2:f4:94:1b:62:c6:83:b0:09:35:b8:97:
40:d7:ec:c5:1d:7f:73:f0:0f:50:71:c4:c5:cf:42:c2:f4:19:
82:8d:9e:10:31:17:2f:a6:d7:10:d2:56:25:4b:09:25:4c:d8:
9a:bb:76:e3:b9:48:ce:37:51:ee:63:95:2d:9f:f4:40:57:73:
b5:26:f1:3e:4d:bc:f1:4d:72:5b:10:d8:e1:08:d3:94:a6:38:
c5:0d:8c:d2:e8:c4:42:67:5f:6c:1a:29:3c:95:a8:1b:e2:a6:
b4:b5:d1:22:5b:73:67:78:d3:52:7d:6f:2b:d9:a7:80:7d:6d:
30:2c:29:fd:11:d2:d1:dd:74:f6:8a:80:4e:c6:06:18:47:61:
f4:33:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:15 2025 by rpki-client