Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: TiQs2fH5Rxbb7p7+NoLRxaQfOBU7/0ZbvEN39uwRHCk=
Subject key identifier: 03:CD:FF:30:A8:6C:AD:EB:B9:B5:23:2D:BE:74:E4:E9:C6:5B:DE:1A
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019846648045454D3494F750AAFBC121BE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1590
Signing time: Sat 26 Jul 2025 11:00:48 +0000
Manifest this update: Sat 26 Jul 2025 11:00:48 +0000
Manifest next update: Sun 27 Jul 2025 11:00:48 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: O5TqRNR8VIsTam2x989PJdOuYf8u+Qg5hu2RDS5c28Q=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:80:45:45:4d:34:94:f7:50:aa:fb:c1:21:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jul 26 11:00:48 2025 GMT
Not After : Jul 27 11:00:48 2025 GMT
Subject: CN=03cdff30a86cadebb9b5232dbe74e4e9c65bde1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:15:08:9b:9a:69:62:03:2a:7c:6e:d8:29:3d:
f5:59:40:c8:4c:19:58:57:c8:cc:b8:43:02:ac:47:
8a:9f:98:86:67:70:cc:ea:2e:a0:95:76:52:14:06:
29:c2:31:f3:a4:59:a5:8b:84:3f:5d:a3:6b:2a:34:
a3:93:46:71:80:d0:8a:d6:01:10:87:e6:4f:d8:1c:
0e:f5:bc:3a:9b:39:f7:3c:49:b6:64:da:d0:17:f9:
3d:3b:c9:d2:18:20:4b:59:c0:96:2b:5e:8b:ab:6e:
4c:f4:e8:69:10:ff:1d:a6:24:bb:78:99:a4:97:e4:
e3:1a:58:24:24:10:b9:68:02:13:60:e2:75:32:36:
68:cb:e5:2b:8b:1b:e2:67:2f:43:a8:3c:52:89:85:
37:f1:92:24:22:f1:e6:3e:2a:c1:44:b3:2c:59:2e:
51:c5:84:84:88:60:b2:f6:2c:aa:af:1b:70:aa:0d:
48:6a:91:b9:72:09:56:7f:e5:3c:9c:51:90:75:7d:
d1:6a:74:a8:ed:f4:8f:f3:9c:17:df:2f:7c:22:17:
98:85:c3:80:b2:13:05:c6:55:3c:da:30:81:c6:f9:
a7:b9:0f:8d:31:f9:99:eb:8e:0b:54:e2:fa:e3:6d:
79:c0:ad:b2:09:aa:f2:d0:37:a8:f0:5a:ec:ae:ad:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:FF:30:A8:6C:AD:EB:B9:B5:23:2D:BE:74:E4:E9:C6:5B:DE:1A
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:6e:cc:56:a2:43:3e:34:01:ec:fe:2a:56:27:25:03:e5:
10:93:3d:4e:07:6d:d7:58:98:f3:70:5b:96:d1:91:96:6d:32:
56:04:37:09:c7:c5:72:93:69:ca:76:7a:14:d0:6d:dc:64:07:
6e:a9:34:8d:9d:a1:6d:e8:59:b9:6f:da:86:df:73:f5:4f:16:
f0:9d:92:47:a6:0c:95:b9:85:b7:a7:9d:20:a4:eb:bf:2e:76:
26:43:9e:3e:6e:ac:41:e3:b4:b6:b6:c9:6e:76:cb:a2:09:61:
be:54:71:6d:21:a8:4f:ed:9d:ad:ab:22:b9:7f:b3:d5:68:84:
1e:8d:1f:bf:88:28:43:8e:80:62:8d:19:12:c2:14:27:f0:f2:
65:83:07:26:1e:48:b6:b0:06:32:a7:52:49:68:47:63:dc:a4:
b4:45:24:b5:0a:69:e3:95:24:09:de:0d:b8:e5:b2:37:4a:88:
98:ff:69:c3:ac:54:ec:e8:c7:ca:2f:f5:5f:66:9d:3a:03:70:
b7:83:d7:0a:c6:5f:7d:11:ff:e6:c3:1f:0d:ef:bd:e2:5f:13:
97:b9:1f:ba:ad:8c:18:47:95:58:fd:12:86:0c:3c:aa:6a:07:
51:24:52:cb:8b:49:c6:91:f2:e1:b4:d7:fe:03:1a:3d:71:ff:
95:e5:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:29 2025 by rpki-client