Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: B7OuIxL7JJxY9fXfvw0t8/Ip767/LlRkRo7TAs5l/o8=
Subject key identifier: 80:91:58:31:F2:EB:EA:C7:5F:22:29:DF:83:94:97:16:A3:36:B8:CF
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 01985833FCB686A5D55FAFE08FD587BF5FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 02F0
Signing time: Tue 29 Jul 2025 22:00:58 +0000
Manifest this update: Tue 29 Jul 2025 22:00:58 +0000
Manifest next update: Wed 30 Jul 2025 22:00:58 +0000
Files and hashes: 1: P7g82oQa9maLUZf-zyJXFEwQ_Tk.roa (hash: R1Jxxc/Qby3IEt4xnho0adyCsC1rCUaoaz24WlyrPXE=)
2: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: vPi2FymvOL7UoRkwhQf4boJ3AlJI1emGCFM2KLVG/zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:33:fc:b6:86:a5:d5:5f:af:e0:8f:d5:87:bf:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Jul 29 22:00:58 2025 GMT
Not After : Jul 30 22:00:58 2025 GMT
Subject: CN=80915831f2ebeac75f2229df83949716a336b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:47:58:13:63:15:51:a4:2b:16:c1:6e:a9:
70:37:e2:fa:42:16:21:f4:0e:4e:fe:78:ad:bf:45:
9e:d6:e5:09:89:a6:9d:2a:4c:ca:c1:d7:d6:15:e2:
5d:fe:9f:c0:ce:85:77:c4:83:14:85:b6:1c:25:a3:
99:84:36:63:18:5d:44:e0:43:e4:5a:18:83:94:7d:
88:10:78:18:17:9c:55:a2:17:b8:30:82:1d:8f:c2:
aa:3b:9d:bd:51:04:07:10:6c:b6:7e:4e:51:b8:44:
35:5a:08:9b:9c:48:82:43:8e:2a:1d:af:c2:06:ae:
a3:85:01:d3:10:05:b9:41:af:bd:fe:72:4c:ca:fd:
78:e7:f1:1f:0b:a5:ac:1b:7b:16:cf:55:0f:95:56:
f0:54:5c:18:be:de:15:5a:f7:c6:80:ef:db:e6:e4:
54:8a:86:8b:5f:3c:3d:10:16:f0:d9:91:5e:69:7b:
d6:11:31:c3:d9:b5:2d:69:dd:c3:b3:dd:a5:de:4a:
06:fd:99:17:95:25:07:36:42:8f:08:6d:d1:60:c1:
71:9d:8a:45:1a:8f:b1:e8:37:6f:34:91:20:2b:24:
bb:b3:d9:d6:27:46:43:ef:94:20:c8:5e:2c:93:1c:
74:8b:25:79:5b:4b:a1:10:b5:f7:c3:22:9a:5c:0b:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:58:31:F2:EB:EA:C7:5F:22:29:DF:83:94:97:16:A3:36:B8:CF
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:6d:32:1a:06:b3:be:f3:24:27:36:1c:8e:15:6c:5e:a5:
c6:e0:be:3c:fd:5f:b2:33:f7:13:d9:aa:ee:c1:5b:3c:15:22:
e8:0d:85:06:d4:15:e8:99:20:6f:24:bf:56:d2:8a:04:56:fe:
86:00:a1:ac:b2:24:86:3a:28:2b:e9:34:b3:e4:c2:91:b3:15:
44:1b:5f:8e:f4:18:ff:56:ab:39:5a:bf:2a:07:de:15:be:09:
0b:90:a4:aa:fd:27:f3:7a:de:e3:1f:24:66:01:21:65:4c:0b:
c3:50:0b:7e:dd:cf:08:93:95:e5:09:0e:ed:5e:cd:b4:76:a6:
27:c6:0c:9b:ef:7d:c0:03:96:a0:31:bd:22:2a:d8:f6:9d:f9:
8b:ad:50:66:c2:55:1f:fe:83:7b:93:39:4f:88:24:75:c4:9e:
52:44:4f:8c:8d:4b:36:d8:3a:9b:81:f4:ee:f6:f3:8f:55:b5:
e7:6e:e6:7e:7d:7b:ec:31:82:1b:cf:fc:2d:78:83:e0:64:88:
b1:bf:b7:2e:41:f1:3d:e2:3f:51:29:12:9d:ae:b2:cf:82:73:
19:52:65:09:8c:37:62:41:27:93:d6:76:f3:d3:ed:68:69:ac:
d9:21:27:f3:7f:bb:24:d3:82:d4:28:b9:a8:6e:82:82:bf:17:
0c:f7:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:24:43 2025 by rpki-client