Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: uTvNdVpsx0s291AR6HV5TyqhLRSR7NwfATzBBOqLX1U=
Subject key identifier: 00:61:C6:74:48:BC:95:F3:BF:0B:A0:5A:82:8E:25:DD:AC:DE:75:11
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 01984A7817F151FECD6767C4D58B9EA62B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 0431
Signing time: Sun 27 Jul 2025 06:00:41 +0000
Manifest this update: Sun 27 Jul 2025 06:00:41 +0000
Manifest next update: Mon 28 Jul 2025 06:00:41 +0000
Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: Y3djGf/1FTzAhxU8t2JtbcgDG91ub9sZfua7FsioiMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:17:f1:51:fe:cd:67:67:c4:d5:8b:9e:a6:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Jul 27 06:00:41 2025 GMT
Not After : Jul 28 06:00:41 2025 GMT
Subject: CN=0061c67448bc95f3bf0ba05a828e25ddacde7511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:36:c4:2b:ef:d2:84:6a:a5:93:a5:31:86:
76:aa:a3:a9:b7:a8:34:04:69:7c:b4:bc:a2:92:3f:
09:72:ce:40:40:64:4f:2b:36:94:8f:25:3c:f4:c3:
62:48:6a:21:6a:80:43:c0:4b:73:31:27:08:1c:de:
af:bb:a8:64:65:21:8a:53:43:da:cf:3e:2f:cf:f3:
49:59:2f:67:99:b7:e1:32:c2:6c:ec:58:a4:b9:92:
16:81:c2:bc:37:b8:15:c7:de:a7:38:bd:9b:af:45:
cc:77:06:53:86:8f:1e:15:06:6b:4b:7b:af:e3:87:
e6:41:50:71:1a:cd:ee:ab:7b:4c:56:5d:a8:05:a8:
ee:3e:db:0c:4d:6e:d3:77:17:5c:f2:56:db:dc:cb:
6b:47:72:bf:8b:11:5a:cb:fd:5d:e6:d3:b4:b6:7d:
ae:06:de:87:f6:d3:6a:81:3f:da:b5:17:16:b7:11:
f2:96:c7:11:71:80:3c:ee:6f:6b:b7:40:20:61:ed:
95:9c:8b:29:95:57:88:9f:34:22:0d:36:3a:f5:4b:
18:6a:44:13:34:12:ab:5d:8f:95:4a:1b:e9:f1:90:
a6:63:70:55:09:eb:52:5f:e4:e6:9b:86:2a:e5:de:
4d:e0:6a:c9:c6:cc:c2:04:5e:14:d0:a8:9e:ad:bb:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:C6:74:48:BC:95:F3:BF:0B:A0:5A:82:8E:25:DD:AC:DE:75:11
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:44:8f:8a:7d:9f:f7:5e:6b:d5:4b:99:b4:c7:5c:ef:b0:0c:
74:64:5a:63:7d:6f:5a:3d:4c:32:5e:2a:37:de:0c:bf:00:bb:
7c:a9:63:19:4c:20:84:90:66:78:3d:a2:81:6a:ab:97:79:bb:
31:78:fd:94:19:88:f1:ce:46:c7:01:97:64:9e:5c:91:3c:be:
48:b5:e5:4e:2d:53:8c:a1:7f:54:9c:15:20:84:da:dd:5d:d0:
e7:f7:f3:21:4e:b9:a2:ab:46:7a:c0:34:53:f1:0d:82:c8:db:
b0:9e:be:6d:56:f8:84:44:d6:21:9b:52:cf:d1:43:4e:b4:ec:
c1:80:ed:9a:91:07:9e:c1:16:76:e2:ae:95:65:9a:97:6e:3c:
46:84:3e:f2:2c:d3:3c:d5:7c:7b:6b:85:7f:99:bb:75:a9:21:
c5:8d:ae:6c:2c:5f:3b:a0:dc:d1:ce:86:b3:2a:c9:86:b4:e9:
27:5a:34:90:80:a6:14:92:72:7e:02:f0:ec:be:62:a0:d8:38:
3c:44:83:b4:7a:68:46:ce:6d:75:73:8e:d7:f9:89:bc:3d:51:
2d:cd:fb:6d:bd:1e:c8:a9:12:aa:5b:d1:fd:70:7d:97:e6:85:
10:4b:f0:92:2b:de:c4:fd:df:71:36:6f:cd:25:09:8b:55:9a:
2b:7f:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:33 2025 by rpki-client