Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: 6GAnVpWOquI7au7I6oUGsE2tVlE3XCo0Pm9Wh5N3i2M=
Subject key identifier: 71:63:D1:D7:7E:94:97:B0:72:D9:EB:3D:B8:8A:BC:D9:23:39:68:7E
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01983193F362EC76530AE235D1A5081DC52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1508
Signing time: Tue 22 Jul 2025 10:00:36 +0000
Manifest this update: Tue 22 Jul 2025 10:00:36 +0000
Manifest next update: Wed 23 Jul 2025 10:00:36 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: LJpsuc68+5U0CTTEFerK6SMDaYcNtGVnQmqkz7zApm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:93:f3:62:ec:76:53:0a:e2:35:d1:a5:08:1d:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jul 22 10:00:36 2025 GMT
Not After : Jul 23 10:00:36 2025 GMT
Subject: CN=7163d1d77e9497b072d9eb3db88abcd92339687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:ef:df:87:5b:ed:b3:cc:08:d6:ae:44:10:
3e:e9:82:4b:f0:ae:56:f0:d5:6f:ae:e2:f0:59:92:
c1:35:62:9b:97:a4:e5:0f:aa:e8:6e:c7:be:6b:71:
66:f3:2e:93:f6:85:45:b5:31:e9:bc:86:90:43:98:
b4:e9:2e:38:1a:9c:df:12:04:70:3d:e2:df:0a:d3:
53:39:81:df:c6:01:e7:a0:fc:c6:2d:7e:ad:ab:c6:
71:e4:b3:0f:c1:17:91:9e:67:89:80:a6:b4:96:d2:
3f:53:0c:78:fe:cb:23:ed:40:2a:60:dd:ef:31:e3:
7a:3b:04:1b:f9:0a:09:8f:08:3b:8a:68:ba:83:14:
76:ee:4d:0c:b1:89:36:9b:ed:72:eb:48:fb:a9:f0:
cc:15:86:e8:83:fa:02:67:48:17:0b:6e:8a:a5:be:
56:19:36:c9:6a:14:52:4c:62:8e:30:90:32:51:00:
6e:71:be:ab:10:05:ac:60:c6:66:f6:7d:8b:3f:61:
f8:32:d1:1d:6e:85:58:59:30:a9:14:45:d6:2b:00:
d9:3d:2e:67:26:63:b7:6a:a3:aa:eb:cb:c0:ce:91:
a2:bc:dc:7f:8e:5f:6a:ed:4d:57:a1:6a:dd:4f:56:
c8:49:a5:8b:f9:4e:16:ad:9a:26:ee:d1:c9:6a:bc:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:D1:D7:7E:94:97:B0:72:D9:EB:3D:B8:8A:BC:D9:23:39:68:7E
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:b6:1b:8f:c2:96:8e:2c:c0:41:f6:22:20:c4:84:26:e8:
0c:0c:42:fe:af:a5:f6:ff:a4:02:02:4c:53:53:0e:94:65:ae:
d5:85:79:6a:20:0f:7d:49:cb:b9:98:a0:78:fa:69:29:61:59:
68:69:7d:19:de:d0:13:f1:f3:ce:aa:0a:b3:ba:98:04:aa:aa:
66:8c:b4:3e:2e:ed:ef:6f:b2:24:99:c3:a0:a7:ff:51:49:d3:
3d:dc:ab:98:51:17:76:8e:6a:db:f7:83:96:8c:25:05:6e:cc:
7a:f9:a4:75:e4:54:6b:73:37:85:bc:33:bb:0a:f3:20:04:4f:
5b:7d:ce:d2:82:e7:56:b8:7f:af:98:f6:e7:fc:0b:1f:1c:74:
73:aa:31:81:86:d5:0b:34:53:73:46:f1:34:85:cb:70:21:ba:
0d:8d:09:78:c9:79:12:73:0f:f7:5a:32:34:dc:9e:90:0a:cc:
1d:5e:c3:a9:96:c9:2a:8c:49:ec:c3:cc:cc:90:a9:94:5b:ef:
0c:82:0b:59:bf:2a:b3:2f:b5:5c:09:5b:da:f0:a4:8a:07:01:
61:cc:a2:08:24:fa:59:f3:54:3d:89:06:37:18:da:0a:f1:7f:
ac:45:ba:92:ef:98:fd:f3:d9:cd:cc:30:c4:7e:79:b4:af:0b:
c9:db:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:40 2025 by rpki-client