Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: GbrkXmkwyHQQP7dV1CmN9EQRl04vCX/hXneM4JGSd38=
Subject key identifier: 5E:0C:06:21:94:07:12:C0:47:50:FD:04:57:85:4D:C8:10:75:DF:56
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0198277E16EFBB7D3AD4C87B712D8660E9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 15F1
Signing time: Sun 20 Jul 2025 11:00:31 +0000
Manifest this update: Sun 20 Jul 2025 11:00:31 +0000
Manifest next update: Mon 21 Jul 2025 11:00:31 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: UQRvy4wVyiJrdIdGk0Y78spbjEQEz/RvGCSuiC9ELIk=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:16:ef:bb:7d:3a:d4:c8:7b:71:2d:86:60:e9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jul 20 11:00:31 2025 GMT
Not After : Jul 21 11:00:31 2025 GMT
Subject: CN=5e0c0621940712c04750fd0457854dc81075df56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:f4:cf:29:3a:be:b6:b7:b2:2c:5c:79:fa:
84:8f:e2:7f:08:5a:34:50:c8:7e:00:26:58:47:a6:
cd:97:10:c1:52:f1:3e:ec:41:ef:7c:a7:53:ad:a9:
e0:91:c9:a5:37:3b:1c:45:bf:f7:1e:4b:97:b6:93:
40:3d:2f:4b:0f:2e:8b:69:14:e1:c9:bc:7e:80:f5:
3f:84:65:7e:fa:88:f2:10:3d:c1:e0:34:19:f2:37:
08:de:bc:f1:15:81:81:0a:74:7f:fc:34:90:fb:4f:
ed:d3:33:78:8b:1d:0c:3a:8f:42:9b:09:9d:2b:d9:
7f:01:2d:da:86:a2:a9:7f:91:8f:8b:b5:37:bb:29:
0a:47:e1:44:4e:04:c5:19:ee:38:ad:92:b0:9f:b7:
15:81:4b:e4:50:92:69:c0:c9:e4:96:67:d4:80:ef:
88:87:a9:68:65:a9:b8:a3:af:4b:e6:b1:76:4e:e0:
56:6c:54:36:a3:26:94:61:ba:a7:92:7b:cf:4b:0e:
a3:34:e3:ed:21:5b:36:6a:c5:7b:7b:b1:ef:2c:5f:
c0:79:c9:3c:53:cc:3c:b2:e7:b4:cd:00:26:41:46:
ec:c8:31:c5:ec:53:23:7f:de:aa:ae:34:91:ad:7d:
ba:29:fa:97:4d:97:81:c2:40:75:b4:e4:a6:fc:d5:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0C:06:21:94:07:12:C0:47:50:FD:04:57:85:4D:C8:10:75:DF:56
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:be:41:7b:26:d5:12:de:ec:32:46:9a:ba:4c:6a:24:ee:
a2:87:11:68:3a:f6:4f:2d:60:00:5e:e4:d8:b9:dd:c4:47:3d:
9a:da:31:ad:aa:4e:bb:3d:78:61:dd:38:d7:8b:54:a2:a8:af:
a1:48:61:7c:a3:84:46:fc:a8:c1:12:bd:af:d3:f5:92:8d:12:
f2:94:23:d6:c6:f1:09:b1:30:84:00:a6:d7:55:c8:8c:0f:61:
0b:81:5f:3c:df:c8:27:10:d5:3b:85:97:df:ac:94:11:7d:a2:
bd:d2:4f:21:51:8c:34:65:86:d5:af:2c:43:e2:a0:86:36:50:
c3:cc:84:a1:a8:6b:11:75:26:bc:db:e3:dd:31:3a:0b:08:c3:
a8:a4:b7:43:40:66:e2:0f:9f:ca:be:84:88:28:97:cf:bd:0c:
cb:b2:5a:a9:c1:c2:42:07:07:d9:6b:01:59:c5:ae:79:57:30:
de:2f:e2:83:06:e5:85:89:76:ff:d4:72:24:8f:d0:68:77:90:
92:11:a8:c2:46:bc:51:ef:0b:ce:0d:bd:35:bf:3c:b8:84:a7:
e8:89:d0:b6:8d:41:44:97:71:5b:76:1b:ec:d1:15:04:1c:e1:
28:23:b3:9a:87:6d:7c:82:bc:ae:f4:d3:bc:a4:66:f3:96:0a:
24:10:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:17 2025 by rpki-client