Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: 1oKZZWdPJQ7rHMaji5pHvY1lwUNb9tx7Ta5olAYNUYI=
Subject key identifier: 1A:1F:9C:84:D5:18:2D:6E:D5:2C:EA:0C:A6:D5:DB:A9:37:59:EE:AE
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 01984852D8882857F1CE514CA3F6F31B5DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 20:00:45 +0000
Manifest this update: Sat 26 Jul 2025 20:00:45 +0000
Manifest next update: Sun 27 Jul 2025 20:00:45 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: hp2zNNr9IaoW5D3OYY87c2Wba8o2/gfwGaxf8No2w8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:d8:88:28:57:f1:ce:51:4c:a3:f6:f3:1b:5d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jul 26 20:00:45 2025 GMT
Not After : Jul 27 20:00:45 2025 GMT
Subject: CN=1a1f9c84d5182d6ed52cea0ca6d5dba93759eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:56:e3:38:d6:43:93:a2:35:a6:f9:11:07:
0d:3c:f4:e9:a4:11:10:f8:a8:30:08:cd:b6:af:8c:
72:0f:d6:32:32:fe:3b:23:e5:c2:48:08:40:b4:1a:
91:e2:2b:1f:d0:b7:4e:12:b2:70:0f:2a:82:e5:b8:
cb:16:8c:8a:d0:62:c7:45:73:b5:f2:50:d0:1f:48:
8f:33:c1:cf:59:1d:b1:f8:de:f0:f5:be:f3:a7:81:
de:8a:a9:1d:5b:a2:c3:6f:27:fc:93:49:3a:e8:06:
be:81:fa:f2:26:e5:d1:2c:d6:d9:48:f3:5b:60:5e:
97:c1:8b:2c:db:3e:5a:7f:31:ee:0c:f9:61:06:a2:
f8:9e:1a:78:ee:f4:03:46:55:34:67:72:46:b2:ee:
8f:6d:30:91:8d:02:84:20:3a:6b:f2:50:3a:b9:3a:
f4:0b:ed:d2:22:07:5c:be:48:a7:ab:85:d4:7c:f4:
bb:ae:cb:e7:6a:2e:5a:b2:0a:5d:ac:db:de:bb:be:
70:32:18:dc:83:5b:77:19:f4:0f:91:d0:49:3c:50:
ca:38:78:69:91:e7:c1:64:7e:86:8e:26:68:7a:6f:
f9:41:49:5a:9f:43:c7:41:04:1e:2e:71:4c:67:29:
c8:05:52:b3:8a:2b:74:d8:35:b7:ee:8d:04:53:90:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:9C:84:D5:18:2D:6E:D5:2C:EA:0C:A6:D5:DB:A9:37:59:EE:AE
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:e8:97:e7:8a:9f:81:e4:10:39:c6:97:7c:19:7b:31:aa:
0a:9b:31:5c:11:96:f6:30:40:07:e7:a3:ad:c5:2d:00:7e:40:
63:9c:32:b6:5e:71:05:a3:cd:74:57:21:45:4a:59:ef:91:6c:
db:c8:77:6e:99:78:4a:67:93:82:9b:ae:b5:96:df:b0:6f:c2:
01:40:90:fd:a0:2d:8d:05:05:42:3f:e3:c5:b0:d7:48:dc:3b:
11:51:1a:78:57:05:77:73:85:62:84:e2:1c:48:47:09:a6:ca:
6b:3b:f4:2f:a8:80:05:d9:c7:ba:b7:26:fd:90:db:55:f6:6d:
44:44:d5:24:75:bf:62:55:fd:0b:78:0c:28:f7:6d:be:9a:2f:
1f:b7:9e:e3:d9:f2:61:79:53:53:e2:2f:6b:84:3c:c7:4c:63:
55:66:21:2a:32:2b:33:70:b4:0f:a5:f4:39:9c:a1:da:a8:98:
e5:93:c7:0a:21:6d:f2:40:b6:c5:3c:a0:8f:8f:4f:a8:dd:9a:
a6:e7:77:28:28:a5:f4:e2:f3:05:53:3a:42:85:3b:6d:dc:c7:
c0:c0:f5:35:e5:a3:5d:31:6a:58:ab:44:dc:91:a6:90:58:22:
bf:7e:f6:a8:61:c2:fb:c7:18:63:bc:e9:ee:b1:81:1b:e4:f6:
a7:3c:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:44 2025 by rpki-client