Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: 8h+i9dnzeGtlV2m6Ib4m+DHFc8KnUt38TNDan3rqr8g=
Subject key identifier: 0F:30:BA:87:46:23:3C:9D:3C:19:D8:67:C5:E0:2B:03:BD:CF:EE:EF
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 0198518C7CC4458563777ED12570618AEE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 14CE
Signing time: Mon 28 Jul 2025 15:00:18 +0000
Manifest this update: Mon 28 Jul 2025 15:00:18 +0000
Manifest next update: Tue 29 Jul 2025 15:00:18 +0000
Files and hashes: 1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: 2vs2yxE9K9NSO8a8QbuNz8FR/SVFhbC+BqKXDeC/itk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:7c:c4:45:85:63:77:7e:d1:25:70:61:8a:ee:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Jul 28 15:00:18 2025 GMT
Not After : Jul 29 15:00:18 2025 GMT
Subject: CN=0f30ba8746233c9d3c19d867c5e02b03bdcfeeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:63:13:12:83:8f:a1:5e:63:bb:40:1e:f7:89:
59:25:62:6e:30:57:ad:b9:0d:f8:df:fe:ba:3e:24:
fc:27:60:ec:3c:98:10:c5:d4:10:5b:67:b3:15:14:
69:d0:8c:f9:41:65:69:bc:ba:34:fd:6c:87:f5:64:
34:45:98:96:01:44:3e:d3:00:69:15:68:24:2e:c5:
40:c9:46:fb:59:11:7c:6e:b0:56:ef:9e:51:34:e6:
32:c6:27:09:27:b0:c2:d2:35:e9:a9:d0:27:b5:bd:
4f:72:4b:f5:b0:70:09:53:90:72:55:42:1d:1d:d4:
88:67:bc:81:a5:7c:ce:6d:0d:a3:23:22:49:ac:8a:
a9:99:61:c0:3b:a4:15:9f:81:6c:10:d4:5f:b3:ad:
f6:89:90:88:91:d0:09:61:09:4f:99:cb:47:c7:6c:
c9:5f:c7:fc:1f:6d:e7:07:b1:bb:f5:f1:75:b4:7e:
a3:ff:be:e4:3c:ec:59:cc:08:ba:fa:b8:db:dd:60:
77:61:04:ef:bb:91:c8:85:37:86:24:84:93:d3:94:
12:09:8f:de:4f:96:eb:aa:de:7f:b5:f4:bd:13:3f:
a7:7c:ae:a5:c3:05:28:1c:a0:1c:8a:32:ee:49:55:
89:36:c5:f6:09:15:95:e8:4e:73:48:21:03:38:03:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:30:BA:87:46:23:3C:9D:3C:19:D8:67:C5:E0:2B:03:BD:CF:EE:EF
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ab:bb:09:5b:22:5c:30:2f:33:3b:a7:55:f8:cc:fc:cc:b9:
fc:f9:8c:48:1a:99:fa:2b:09:80:5e:6c:af:f2:b3:08:26:38:
f5:96:a3:f4:3b:7a:99:88:8c:1a:f7:aa:3b:80:7b:7c:21:d6:
67:3b:c0:f5:8c:a0:ae:65:aa:b7:96:64:6f:8a:ca:fa:68:af:
a2:11:17:d3:02:79:d3:ee:a2:33:07:a4:8f:71:8c:16:85:7c:
72:cb:0c:16:ef:86:e2:b5:6f:26:fa:d6:ef:06:e4:c4:5e:e8:
ef:23:21:76:22:81:50:8a:4d:74:08:93:2a:8d:6d:90:89:22:
7f:6e:36:b1:3f:d2:ef:e8:e1:4f:e0:34:f9:54:e0:f0:17:85:
6b:72:b6:3f:51:9f:e1:9c:6a:1d:c5:ed:e1:a7:57:34:66:00:
1c:89:8e:7a:c6:d3:48:1f:f7:c3:48:18:fd:72:29:91:f5:ef:
7a:d9:28:f4:6c:32:ec:a0:02:cd:1d:39:20:3a:b4:bc:68:c7:
0f:ef:88:58:e3:af:3e:80:29:aa:31:d0:a1:ad:5e:63:cf:a5:
94:f2:44:28:74:a9:64:99:7f:fb:98:4f:f2:5c:1f:9c:43:a8:
4b:68:71:3a:fe:94:80:ee:58:27:f2:55:70:78:3c:b6:4d:72:
5a:5d:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:35:57 2025 by rpki-client