Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: v1CgkX+L89GhXwvh8SJ/w7FsjEo1y9d658SzjqRKJps=
Subject key identifier: 1B:58:A2:E7:0A:52:B6:1F:49:8C:EE:F2:57:31:0D:45:D5:78:93:AA
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 0198481BEB6A493870EEBBBC3A86CA763B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0AE9
Signing time: Sat 26 Jul 2025 19:00:45 +0000
Manifest this update: Sat 26 Jul 2025 19:00:45 +0000
Manifest next update: Sun 27 Jul 2025 19:00:45 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: Juc3V2QXyHxpTzEAVfOthbBkwxscu3vcWPS7jHJGpAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:eb:6a:49:38:70:ee:bb:bc:3a:86:ca:76:3b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jul 26 19:00:45 2025 GMT
Not After : Jul 27 19:00:45 2025 GMT
Subject: CN=1b58a2e70a52b61f498ceef257310d45d57893aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:2b:30:e3:e4:c1:18:32:31:87:46:53:fd:
c5:06:09:29:b1:0a:b1:6f:de:9d:67:86:1b:11:2e:
88:42:dd:e3:cf:d6:ca:dd:40:3e:23:9b:73:d2:33:
e4:24:2a:53:8b:9f:80:cf:f7:2a:52:ab:70:9a:77:
ec:3e:d4:95:c2:6d:88:f4:1a:a0:a4:b3:ce:de:39:
c1:94:09:93:b4:9c:ae:56:18:b2:32:f3:74:71:48:
f8:75:3e:16:04:0a:a3:0d:fa:9a:b4:71:6d:c3:cb:
a8:bd:7f:63:fc:d6:a7:b0:ea:41:da:c7:5e:a6:07:
f6:4d:6d:3f:40:3a:d2:f3:6e:fc:48:ed:b3:0e:1d:
da:0a:79:9e:38:b7:e7:29:69:bd:f5:fe:1b:83:f4:
f3:f9:2b:f1:01:63:68:ec:f4:5a:d8:e2:fa:83:f6:
6d:a6:39:36:e7:8b:db:24:af:70:de:4c:b4:78:72:
c2:20:36:8a:67:2a:31:d0:59:d0:96:3c:17:a8:0e:
5b:20:3b:34:b2:2e:93:2f:80:83:38:af:88:0d:ff:
6c:93:79:62:f0:a8:90:38:bf:9e:d7:5c:58:8d:66:
05:25:fb:6b:71:03:a0:ed:14:e8:b7:08:94:27:c9:
b0:e3:58:7b:0b:8c:3c:74:7a:48:59:22:29:bb:e5:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:58:A2:E7:0A:52:B6:1F:49:8C:EE:F2:57:31:0D:45:D5:78:93:AA
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5e:0d:a0:f8:ea:fc:4f:d6:68:82:6e:c0:22:6b:46:ec:78:
f0:83:3b:7c:37:9d:91:80:ab:af:37:e0:ae:63:28:0f:21:41:
5f:21:39:ff:5d:f7:27:7c:97:5c:b9:e6:13:e3:f1:cd:9c:1a:
e8:8e:8b:33:f9:b9:3d:4b:c8:ef:24:f8:f6:87:48:ba:e9:3e:
48:0b:5c:50:f6:3e:3e:c5:a4:e6:31:81:67:16:c1:8a:95:aa:
fc:48:c5:6e:54:6d:d3:24:62:f5:0f:8b:8d:c1:b5:82:da:ee:
ee:15:41:4d:49:c8:32:f0:c3:ae:2e:e7:29:8d:4f:c5:bb:aa:
3a:45:f4:9b:2d:a3:d1:e7:4f:69:6a:eb:96:c5:90:47:16:f7:
fe:f1:20:94:01:96:39:f3:31:0c:56:c7:c9:99:99:69:da:d8:
83:33:30:b4:69:ed:02:45:88:63:9a:e4:68:eb:3f:42:99:98:
6c:d1:d3:94:33:81:3a:86:f6:af:8b:54:02:14:09:68:4f:0e:
bc:f3:d7:23:d4:90:05:11:f0:2e:3a:2c:8c:14:2a:9e:7e:f7:
99:5c:bd:1e:94:15:68:00:f4:b7:43:43:b1:21:ad:d3:f4:bc:
c6:c0:89:5b:47:83:24:47:42:61:2f:11:2e:c7:9b:71:d5:d3:
23:0e:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 22:59:22 2025 by rpki-client