Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: 3682NJnfFyvRpEQhV1Z39gjJEHsfiM6Afo0n3y9pq+E=
Subject key identifier: 6F:F9:67:3D:03:1F:9B:60:97:81:75:9A:06:5B:D4:59:EA:B0:53:B5
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01983F184639AE696F49A65071779F2F6D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 150F
Signing time: Fri 25 Jul 2025 01:00:12 +0000
Manifest this update: Fri 25 Jul 2025 01:00:12 +0000
Manifest next update: Sat 26 Jul 2025 01:00:12 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: 0fXvdtQYotTb1Mmq3ZnNE0yzHc+1N45r4bfCF1Z+HEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:18:46:39:ae:69:6f:49:a6:50:71:77:9f:2f:6d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jul 25 01:00:12 2025 GMT
Not After : Jul 26 01:00:12 2025 GMT
Subject: CN=6ff9673d031f9b609781759a065bd459eab053b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:b9:67:8d:b5:6a:6d:46:f1:1f:c9:4c:b5:
4b:cf:27:e7:6f:80:ac:08:ee:73:db:11:fd:b9:cb:
42:c3:ad:6e:f0:48:1e:b8:40:e0:7d:94:3e:91:13:
ac:50:f7:03:af:d2:c5:0b:d7:c8:53:31:5a:d1:48:
ba:d7:1d:0c:e9:94:72:ef:0c:3e:19:76:f0:e2:06:
4d:a1:69:84:93:60:4b:c7:54:27:d9:5a:96:76:41:
e9:61:31:39:68:98:7a:4d:5e:88:25:f1:85:91:90:
e2:d3:86:0d:28:11:23:c6:e9:ce:26:11:cd:09:2e:
0c:15:0a:3f:e4:26:d8:49:79:6e:35:98:19:bb:ff:
5c:40:5b:4b:76:b1:5f:3e:0a:d0:45:c8:6e:07:ad:
7a:52:0c:6a:6f:70:37:00:27:34:0a:8a:49:95:db:
4b:37:6e:66:8f:91:0b:e3:14:d0:08:9b:7a:22:8a:
3d:05:45:3c:ab:96:95:4b:2c:59:01:fc:b1:a7:36:
30:a4:82:d5:2e:f7:29:93:40:c6:97:47:74:e3:2c:
7b:37:51:94:23:eb:83:7c:37:65:84:9e:72:57:a6:
90:e8:eb:91:8c:87:fc:c3:64:a7:5f:3c:6e:46:da:
a3:5a:de:6d:33:1e:0a:43:a3:25:a3:04:5e:84:23:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:67:3D:03:1F:9B:60:97:81:75:9A:06:5B:D4:59:EA:B0:53:B5
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:31:53:5f:1f:6e:c6:ec:f0:e8:f7:2f:2c:cc:22:86:51:
da:d0:62:30:aa:4e:af:8e:d3:1b:c7:9e:23:73:bd:54:29:33:
00:81:06:a2:c6:6d:23:bb:24:d3:c7:80:aa:15:1a:8e:e2:e1:
30:27:57:c4:d1:eb:a7:76:ff:80:3b:59:24:d3:b5:08:5c:3a:
2f:d8:b9:44:bd:31:c3:8f:0c:b4:c8:06:49:dc:6c:8b:56:78:
56:51:4b:c5:82:9f:ff:6a:0c:72:5c:e3:0e:36:ab:c6:72:3e:
fa:94:a4:bd:30:a9:c1:e5:0b:c4:04:66:39:fb:9e:c9:39:44:
6d:4a:bb:11:25:69:89:5c:06:d4:cd:07:cd:ee:62:71:98:b0:
92:33:cd:ea:30:ed:99:a3:25:aa:86:9b:64:db:6b:f5:e3:9e:
86:fe:df:3b:c7:40:f2:af:1a:7a:df:5a:ab:76:8a:11:33:38:
f5:58:a8:d3:7f:4d:70:5a:0c:f0:63:de:07:96:f9:49:1e:6c:
fb:af:2f:b9:6f:fb:1e:3d:42:aa:69:a8:0a:21:c5:6a:f1:63:
66:93:53:6d:13:8f:46:05:d0:99:91:f1:74:e3:04:25:47:4c:
d5:16:85:57:cd:6d:55:95:bb:55:25:2b:b7:5e:a6:a0:7a:ce:
17:f4:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:16:27 2025 by rpki-client