Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: 3IPQ/yemRdRu5srdsOXcbrSd/WySVFvc/CwtCL7d8T8=
Subject key identifier: 7B:D1:9A:72:30:4D:27:37:85:1B:FB:21:63:04:F5:2A:E7:35:F0:7A
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 01984A0A1E8BBECDD7AFA0AEEF9E54DFD14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1312
Signing time: Sun 27 Jul 2025 04:00:33 +0000
Manifest this update: Sun 27 Jul 2025 04:00:33 +0000
Manifest next update: Mon 28 Jul 2025 04:00:33 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: VtWnHKHMDGdh4Bdu8bHTzFgGOAuGXrO4rEAV8jDLmr8=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1e:8b:be:cd:d7:af:a0:ae:ef:9e:54:df:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jul 27 04:00:33 2025 GMT
Not After : Jul 28 04:00:33 2025 GMT
Subject: CN=7bd19a72304d2737851bfb216304f52ae735f07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:3a:76:85:91:82:72:48:82:90:8c:17:a0:
13:58:0c:1b:8d:a6:9d:6e:d8:bb:45:30:8a:30:4a:
97:22:33:17:5e:4b:80:6f:4b:dc:f8:d9:84:6a:15:
45:79:cb:e7:64:c1:ad:b0:83:21:39:53:a9:dd:36:
fd:75:cd:17:ad:55:62:b3:90:7e:09:35:f7:ad:39:
a0:4c:29:9b:1b:d2:73:8b:94:a3:06:44:94:4b:a5:
66:50:9a:74:f4:3c:41:1c:1d:42:60:c8:b3:e0:ce:
22:6c:fe:b6:b0:72:6f:47:69:99:a9:33:1b:ae:98:
d4:df:76:d2:28:c8:03:ff:17:fc:0c:47:a0:41:22:
3e:a3:fb:3d:06:0b:33:96:95:81:7f:26:ee:2c:7b:
eb:bd:be:a6:26:28:58:cc:e6:a8:17:51:fb:68:de:
33:de:17:32:45:07:93:39:e5:c2:9a:06:08:d2:88:
c9:bd:0a:69:7a:2a:c6:b1:52:4e:c7:39:41:dd:17:
e6:eb:8c:40:5e:6c:c6:6f:e2:2b:52:93:71:98:f6:
87:27:a7:93:63:1c:6f:d5:8e:2b:f8:91:a7:44:12:
95:23:39:27:85:a5:70:97:51:c6:48:60:cf:a8:25:
4b:50:77:62:25:83:aa:9d:5a:b1:00:ef:d9:72:75:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:9A:72:30:4D:27:37:85:1B:FB:21:63:04:F5:2A:E7:35:F0:7A
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1b:8a:92:f3:2d:3d:8a:c5:42:9f:fc:83:49:7d:49:1e:52:
03:3b:51:6d:69:bb:80:41:f3:34:95:12:ee:01:75:de:ed:f4:
4c:0c:28:31:51:2a:0f:3b:8f:0d:73:b8:9f:57:5e:6c:3c:ec:
4e:20:8f:55:8b:34:b0:a7:ad:80:88:3d:32:45:19:b6:f4:cf:
83:c2:1c:32:22:d3:bb:2e:33:b2:2b:8f:4a:b8:bc:3c:ec:3f:
cd:92:65:df:a0:a2:9e:55:9a:23:16:08:10:78:34:89:5d:80:
19:29:88:7d:73:48:79:8e:ca:df:e6:2e:94:00:5f:7b:e7:62:
37:8a:fa:7f:bf:95:50:dd:f6:6b:72:10:74:c1:79:91:d5:16:
35:ee:b0:6a:16:7a:28:c9:29:8c:58:58:2a:19:71:87:cd:ae:
80:b2:8c:fb:58:74:ae:cf:7b:a3:cd:b6:a5:3c:01:3a:ef:26:
91:32:e8:4e:d4:43:89:ba:17:30:9c:61:d3:40:19:4c:e1:ba:
58:4e:09:70:0e:40:6e:1b:6f:cb:07:6e:c7:35:62:d0:e6:c9:
47:d5:2d:b3:b0:e0:69:15:ea:da:e9:0f:cd:07:bc:98:79:cd:
cf:bb:ac:35:06:c6:6f:b0:21:02:f4:8d:2d:31:12:e5:ed:07:
e2:3c:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:53 2025 by rpki-client