Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: 35gt4RRo5gxrWAeiA1TNkGUiDiDVBkiGwgXQIVZd5Bc=
Subject key identifier: 09:FE:D8:97:CC:5A:01:9C:C2:57:DC:EF:02:8C:73:AA:BC:E1:AC:18
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0198529F64C99007E69C2D729C367140DDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 20:00:34 +0000
Manifest this update: Mon 28 Jul 2025 20:00:34 +0000
Manifest next update: Tue 29 Jul 2025 20:00:34 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: cUiRwSscFuCZo3yYZ1135MiF9q6XOc8gVnGbX0lghgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:64:c9:90:07:e6:9c:2d:72:9c:36:71:40:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jul 28 20:00:34 2025 GMT
Not After : Jul 29 20:00:34 2025 GMT
Subject: CN=09fed897cc5a019cc257dcef028c73aabce1ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:6e:da:d5:1e:af:b3:a7:4a:83:d2:bc:90:
68:ac:16:f2:6c:8c:b6:da:3d:74:b7:88:29:e6:9b:
89:ca:70:11:eb:f8:e2:a4:ca:4e:f4:9c:d8:95:84:
07:52:fd:57:a0:8a:1a:ec:72:f8:d2:ab:81:ae:d1:
0c:ef:4d:ec:95:e9:e3:1c:d7:0b:1c:c4:83:88:92:
14:31:6a:97:d5:26:4e:76:d5:db:4f:58:49:87:c6:
93:af:fd:e1:3f:e2:0c:03:7c:5a:a4:70:f5:fa:90:
5e:f8:b3:1d:56:a5:d8:e7:c5:34:6f:6f:71:67:28:
12:67:57:64:33:16:9c:8b:d7:87:3c:d9:3e:51:83:
1f:e4:15:46:a9:b8:18:2d:39:65:d1:44:d7:e1:0a:
3f:1c:32:32:fb:ee:9a:8a:69:f7:dd:25:cb:23:4c:
4c:1a:9c:b6:87:8d:79:6f:44:65:2f:43:74:52:7d:
24:4d:b9:2a:fd:d6:13:ca:01:00:76:2b:28:13:39:
05:dc:99:24:b4:b6:fd:52:fe:6b:97:03:dc:5a:7e:
30:2a:5c:d3:b6:58:9f:0d:9c:86:1b:fc:48:ec:8c:
7c:40:97:a6:d3:8d:a5:a0:40:53:c4:b3:b7:d1:c0:
ab:a2:f5:3e:56:82:75:ac:77:60:5b:cd:19:58:62:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:D8:97:CC:5A:01:9C:C2:57:DC:EF:02:8C:73:AA:BC:E1:AC:18
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:a6:f3:1c:c8:9f:96:f4:bf:bd:ff:c5:d3:73:d3:49:bb:
ff:18:7e:8d:2e:fd:12:44:68:99:85:9a:fb:b1:7e:86:17:1b:
4f:2c:7d:6d:d5:9e:00:c5:f6:d8:59:23:ab:eb:e3:70:f2:a5:
7d:ed:49:3a:6a:db:2f:d7:88:9b:58:83:46:6e:c9:5e:58:93:
95:c0:98:0f:e9:0d:70:52:18:9b:ca:45:6b:8d:9b:6f:a2:53:
6f:83:85:01:e1:a3:d8:dd:39:62:c2:de:35:f5:4e:d8:20:21:
e2:52:61:23:a0:88:a9:1c:2d:39:dc:24:da:4d:78:d2:b2:ca:
01:93:d4:77:43:20:89:22:b5:2e:57:7b:69:01:42:22:41:5b:
47:9f:1f:3c:12:c6:ae:7d:47:1b:be:4b:36:8b:9f:38:fd:ce:
da:d5:c7:2e:cc:5b:67:3f:3d:f8:f4:43:8d:c5:36:30:b2:14:
c1:c3:28:10:72:26:57:6b:76:53:e2:21:4a:85:67:67:f6:e6:
57:1b:b2:aa:87:40:06:fd:d7:f7:e4:e3:57:1a:da:c3:fc:e4:
d7:3f:ac:bb:f8:56:1b:ba:8e:46:52:a3:88:1c:e5:c5:fd:ea:
ab:dd:83:86:29:b4:8a:7d:ab:b4:8c:a6:64:ca:60:95:79:ba:
fe:73:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:59 2025 by rpki-client