Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: cf0ZMVvT7u53lKapkzBPFYK+NFvQ40H4A20Qlm4Vktw=
Subject key identifier: AD:A7:0D:47:17:96:F1:8F:97:C6:71:7C:99:51:38:AE:D4:7D:1A:02
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 01984B549D888CF422405734FC413587E8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0CE3
Signing time: Sun 27 Jul 2025 10:01:33 +0000
Manifest this update: Sun 27 Jul 2025 10:01:33 +0000
Manifest next update: Mon 28 Jul 2025 10:01:33 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: vWR1WtnOXM2gni0VeLffK1J8xA6A8Ln3A+ULS+dBSM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:9d:88:8c:f4:22:40:57:34:fc:41:35:87:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jul 27 10:01:33 2025 GMT
Not After : Jul 28 10:01:33 2025 GMT
Subject: CN=ada70d471796f18f97c6717c995138aed47d1a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:18:e4:a5:2a:ef:20:fe:1a:68:21:a6:cc:
c8:26:aa:3a:03:84:32:e0:42:60:5f:a5:b8:6b:39:
d3:95:4d:20:d9:e1:ef:f0:88:6e:69:03:c4:57:f9:
b5:26:10:07:bf:63:16:5d:3c:b2:5e:6d:64:9e:6b:
44:49:08:4d:d2:6f:72:18:26:73:46:ac:fa:1d:d5:
5f:57:e2:5f:3a:fe:b5:fd:c7:69:ea:3b:4d:95:bb:
4a:3c:24:8b:e1:15:d1:02:9b:54:da:30:69:30:95:
7d:eb:1c:9c:1a:bd:e5:97:da:6b:f2:e4:e2:c8:d6:
70:7a:b7:81:a1:cf:b7:c7:36:7f:78:01:a7:7f:3b:
51:9b:96:1d:a2:62:9e:9d:94:09:cb:c6:99:9a:ca:
b3:dc:d5:ab:86:28:32:74:b7:10:6d:54:b3:6d:eb:
ac:a0:b9:d6:9b:98:6e:17:f2:22:60:a6:4a:1d:4f:
93:6a:15:18:31:80:d0:6f:80:69:99:3a:3a:77:97:
27:49:07:9f:9b:78:eb:54:d5:0d:58:2e:51:91:d2:
ce:72:1c:a2:7d:f5:b7:75:22:7e:e5:31:f9:03:65:
01:01:2d:09:24:bb:7d:48:49:7c:cb:4f:50:9c:6d:
75:88:1c:88:a7:00:e6:00:8d:71:12:3a:14:dd:62:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:0D:47:17:96:F1:8F:97:C6:71:7C:99:51:38:AE:D4:7D:1A:02
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:4c:62:c7:62:d3:32:12:8f:42:80:fd:b1:54:f2:6f:4c:
1b:18:bc:05:4b:ea:2c:90:57:b6:3b:37:25:ee:b1:26:4a:7e:
8b:97:f5:b2:03:fc:2a:78:5c:f0:66:9e:eb:25:5e:90:71:0f:
f5:1a:fa:df:dc:f8:0b:91:1c:a1:37:9f:c9:cd:69:5a:2b:38:
a1:fc:db:a3:fc:f0:b9:6a:65:ae:bc:4c:5c:03:eb:1a:8b:f1:
fd:df:b2:25:7b:5b:aa:87:9e:ea:6a:83:a4:68:37:34:31:1d:
e9:df:63:62:71:ec:46:77:e2:d7:cb:97:42:2f:86:e0:6e:39:
75:b1:5b:78:8a:f7:99:ec:ca:7d:44:13:b9:b1:6b:27:45:8b:
bc:b0:0a:6d:c8:b8:a1:d4:ee:0a:e1:9e:ee:dd:18:3e:12:62:
b0:78:67:6a:19:b6:58:20:63:d4:fb:fe:38:64:db:a2:21:58:
2f:85:6c:5d:97:3d:5c:51:80:5f:7d:a6:d7:63:eb:4a:e7:4a:
7d:87:35:bc:8b:17:96:7f:2c:c0:af:dd:b9:6c:cf:cb:fc:92:
cb:3f:b3:2d:10:be:01:d8:e3:da:a8:6e:87:94:be:76:f6:c2:
d8:56:05:86:58:4c:e8:12:d7:90:80:b9:83:4d:20:2d:7f:13:
5d:51:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:56 2025 by rpki-client