Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: i4okTeyegmCtY5EhB38WD5wk7WLJR2te7i/8Ap0EFm4=
Subject key identifier: 96:FF:59:3E:90:DE:37:F6:C2:D2:B0:CF:52:0D:6A:8E:20:77:F1:DE
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01984AE5B1201392DBFD0B1AFB26A4DB1493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 1239
Signing time: Sun 27 Jul 2025 08:00:23 +0000
Manifest this update: Sun 27 Jul 2025 08:00:23 +0000
Manifest next update: Mon 28 Jul 2025 08:00:23 +0000
Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: jPByfNMADlANUHhcwEFEKnV1p/voERxghw7vYzxXwvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b1:20:13:92:db:fd:0b:1a:fb:26:a4:db:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jul 27 08:00:23 2025 GMT
Not After : Jul 28 08:00:23 2025 GMT
Subject: CN=96ff593e90de37f6c2d2b0cf520d6a8e2077f1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:70:fb:10:9e:7d:40:97:7f:c3:69:41:7c:3e:
39:f2:03:fc:ac:c9:a5:47:ed:11:df:34:7e:04:25:
9f:87:d8:01:c1:72:b3:08:d9:1b:ec:8e:90:3c:15:
68:d4:69:cc:b6:fa:25:3a:5c:52:3e:75:25:90:8a:
3d:5b:ef:6d:a8:3e:3a:b7:ae:c4:ed:7d:54:6d:a6:
fb:54:b4:3f:f5:54:51:af:a3:15:ed:97:e9:01:29:
e8:f8:81:f0:32:fc:dc:d7:63:3e:9b:f1:7d:23:63:
7f:f9:ef:4f:85:9f:d2:7e:e3:97:96:2e:cf:da:2a:
aa:70:67:de:15:89:1a:f6:7c:9a:76:c4:15:9e:4d:
6d:60:ee:af:ab:07:26:26:45:0f:bd:a4:ac:4f:b7:
46:1d:d1:18:3d:30:a2:f8:93:6e:e4:37:84:c9:ce:
f5:f2:77:f8:f2:c0:cd:0d:3c:f9:ea:fe:26:de:ce:
6a:c0:d1:a5:0f:29:d2:22:62:f8:33:3a:4d:b9:4f:
2f:af:ee:6f:08:ac:c8:45:d4:3c:a2:e8:b3:0d:7d:
39:7b:71:8b:07:c8:1c:a6:5d:e0:7a:0c:2c:a1:a6:
16:13:2e:11:5e:61:fe:92:27:47:1e:fa:3c:b7:f0:
e8:9d:bc:87:95:51:dc:3e:67:06:4f:42:6f:41:a7:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:59:3E:90:DE:37:F6:C2:D2:B0:CF:52:0D:6A:8E:20:77:F1:DE
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:89:4c:0e:c8:39:bb:8d:70:f0:fb:60:db:e2:16:15:ee:
0f:28:1d:0e:d9:d8:75:74:53:b7:16:08:ae:23:23:55:7a:86:
73:d2:8f:0b:48:75:0e:d4:b2:ff:cb:7d:96:bf:7b:bd:ea:72:
70:f6:35:9b:80:b2:83:fd:5c:ff:96:e2:a6:42:3f:5a:66:51:
2c:8d:4f:7b:56:8e:34:6e:de:fe:be:6f:6f:63:4c:a9:4e:c6:
00:06:3e:a8:9b:b1:a2:76:be:81:9e:d9:e2:f3:7f:4c:15:be:
08:88:ca:3d:d5:9a:d8:f6:ab:88:d6:a1:c4:18:f7:bc:86:77:
04:3d:5c:d5:c3:fb:91:11:d4:5f:8d:25:19:5a:49:be:37:4b:
bd:a9:3d:c8:8a:45:ed:e5:14:55:2d:99:8f:c4:24:11:ab:54:
f2:3d:4e:f0:78:16:ef:90:8e:75:7d:25:87:fc:c0:06:ab:20:
1d:83:6c:a1:e1:30:85:7c:34:29:23:fb:f9:2b:e9:db:d8:45:
95:8e:95:5e:9e:0d:39:18:09:5a:95:b4:79:ca:8e:ea:a5:ff:
06:69:f9:21:10:bf:0a:80:fd:d0:81:d1:ff:b8:e4:f8:7a:c0:
b6:51:71:bb:10:cf:61:a9:55:45:d9:7b:b7:cb:3d:2a:af:71:
e4:3c:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:42 2025 by rpki-client