Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: YTYfbXN2lV86iSP0u5U9Qy0jqSimtrTXrPUxRkUkqrE=
Subject key identifier: 9B:DE:17:1B:32:9A:02:C6:37:55:28:41:AD:FC:B6:94:73:B1:30:F3
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0198499C49F301BAA51EC04F9269FFB88DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1475
Signing time: Sun 27 Jul 2025 02:00:35 +0000
Manifest this update: Sun 27 Jul 2025 02:00:35 +0000
Manifest next update: Mon 28 Jul 2025 02:00:35 +0000
Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=)
2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: QJFp5uavOLhxLjaG5zQEUg7//1gM1sJi4TKLhQ3eZMg=)
3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=)
4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:49:f3:01:ba:a5:1e:c0:4f:92:69:ff:b8:8d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jul 27 02:00:35 2025 GMT
Not After : Jul 28 02:00:35 2025 GMT
Subject: CN=9bde171b329a02c637552841adfcb69473b130f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:d0:96:15:6d:d6:f6:02:6e:87:ea:ae:0d:
38:ed:3f:31:d6:4b:dc:55:23:ad:28:b8:e4:e4:13:
63:a1:b4:3b:b7:d3:db:70:0c:80:35:dd:c2:4c:3b:
d6:de:30:2b:c3:90:63:65:9f:95:a6:c1:0d:eb:61:
4b:9d:9c:84:27:6e:87:11:61:27:5a:4c:2d:39:27:
ec:33:46:ef:9e:ce:5b:1e:82:b7:e2:2b:92:ca:1a:
d3:53:27:3b:cb:90:35:8b:2d:71:3b:da:79:a5:6a:
87:3b:b0:dd:f7:b8:ac:e8:44:da:af:63:7c:e5:eb:
f3:e2:8a:93:dd:e9:6d:43:d3:c8:81:29:cd:3a:87:
b1:5e:49:9a:2d:b6:ba:41:be:eb:6c:2b:35:ab:53:
60:2b:4c:69:a5:2d:fa:3d:e9:b6:21:0d:69:6b:89:
a8:07:bb:56:b5:36:e0:b7:40:bc:0f:8b:a1:7f:4f:
c9:8e:23:60:58:e8:2f:a8:bb:a6:63:8a:53:b6:b4:
c3:e8:70:9a:7c:4b:58:13:00:89:72:cd:27:c5:26:
81:42:cb:3d:2d:c6:75:0d:9c:64:f2:f5:75:91:09:
f3:14:ae:8b:93:ab:9d:66:e6:c2:d0:d6:01:a9:77:
49:0f:f9:63:1c:46:47:9e:7f:2e:1a:ee:5c:54:c0:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:17:1B:32:9A:02:C6:37:55:28:41:AD:FC:B6:94:73:B1:30:F3
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:de:ca:4f:04:2b:fd:0a:03:65:24:a2:eb:ab:b0:49:da:ba:
51:a5:81:d7:8f:f3:ea:8c:55:a0:7c:e7:4a:7c:f4:19:05:ff:
62:65:a9:35:06:0d:07:ae:6c:b6:4e:56:fa:ee:89:0f:3f:71:
5f:06:ad:40:79:dd:56:1a:fe:e1:90:2d:de:c9:e9:7c:33:c1:
8a:9b:cf:83:96:bc:9d:32:33:a5:5e:1f:13:51:2c:dc:ec:91:
54:e4:65:54:5e:5f:61:cf:1b:a5:be:62:ee:88:b4:cd:fe:97:
66:1a:6d:90:69:bb:46:a9:a6:24:bb:10:5d:5f:df:eb:8f:ca:
c8:c1:35:3e:b6:0e:b6:7d:27:a4:df:20:21:1a:dc:c6:0f:44:
61:e5:5b:ad:e1:87:63:eb:74:3c:f9:02:68:22:a2:7e:54:ba:
9c:45:cb:e7:a7:9a:8f:ae:01:97:c7:42:e7:15:4e:2e:ca:af:
fc:19:04:56:4b:ae:6c:76:ab:9b:87:13:a2:9e:0d:4e:da:c0:
91:31:bc:0a:6d:88:88:92:83:a4:f7:44:a4:ea:12:43:fd:b8:
9c:22:1e:10:ff:e2:88:9a:aa:fa:a4:3b:4c:60:27:37:80:95:
22:cb:2e:c2:23:86:3f:b5:ca:c3:b6:94:e4:5c:ec:b5:5e:f1:
46:0d:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:55 2025 by rpki-client