Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: cN7Qm5JwvI5+EYgxECOWlFkQvyp5En5OxnIDG4lDx4g=
Subject key identifier: 1A:74:D4:95:C7:B9:A9:67:FE:86:02:65:2B:8C:94:6C:7D:54:76:47
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 0198383AD4A7D1F1169D87B8A222F246D763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 160B
Signing time: Wed 23 Jul 2025 17:00:36 +0000
Manifest this update: Wed 23 Jul 2025 17:00:36 +0000
Manifest next update: Thu 24 Jul 2025 17:00:36 +0000
Files and hashes: 1: 4SxEa8qHfL0SdS-yvynVjEWywI0.roa (hash: ed273NQ5dggxiwmHaUzsS7LYiMx/0KEG21fx026Qijc=)
2: 57zAUxjN80d98_hrUg6wNGuh-LQ.roa (hash: qIcET8+9I+XlvyugPkuqmk4yArAibC2n8LmahOzKwL0=)
3: D8TVIpbhKokDS9trBBqJHsFT1UQ.roa (hash: buVD8eTr7vS6C640rVcFTDAjpCVFYAxsjVTpolrqfNA=)
4: V-G5n9JBF2fuQBXkHR943IM1SJk.roa (hash: PktwOhATCRnu/fMCAW8Roob3cNUQ8DCkE9sG1tOGfQ0=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: 1x9LhrINsjHeNmI4FeiqoGqi8ORlNaESYTzb5zCEzvI=)
6: rnTaQ1uEKUsJsa3f9-uniTuwHWo.roa (hash: 65NB0UfxYYmSvSLb5gS9zELjlvrzXWC3McdcTIR7Hxk=)
7: tIc5dJ9row9Jpwnimlce4tYbp44.roa (hash: ouwAo45RW/R/dO1EFuBCaboweb6Z3RjFTDf5e9DgnQU=)
8: xv_S9Q_lixnhLdeB2FeY6-83q40.roa (hash: fpHqpuP8WhUb/qgqx71BT4D9l/LEKw+tKbvv5QvJ1WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:d4:a7:d1:f1:16:9d:87:b8:a2:22:f2:46:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jul 23 17:00:36 2025 GMT
Not After : Jul 24 17:00:36 2025 GMT
Subject: CN=1a74d495c7b9a967fe8602652b8c946c7d547647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ef:72:d5:64:c7:a5:13:74:ff:da:65:f6:c1:
c2:69:36:45:ec:a7:73:d3:38:65:7b:9b:2d:37:03:
5b:70:fb:dd:de:64:a1:b4:67:42:0c:16:63:ec:95:
21:04:5c:41:25:09:e7:0d:f0:7b:c6:bf:f5:99:97:
53:5a:22:76:bd:71:82:3a:86:00:af:71:75:8d:1e:
9d:ef:6c:8b:a8:e7:9f:63:39:f4:ea:79:56:b2:55:
f8:af:7b:5f:5f:69:17:2b:b8:5e:c0:39:86:86:ef:
f9:b6:95:f1:65:b9:72:3f:97:e8:a8:53:24:be:a2:
d6:51:e1:64:a9:5b:35:7b:c0:cd:9f:12:dc:0d:ba:
4d:5b:7e:89:88:33:fe:40:2d:12:e8:46:35:15:62:
51:31:9b:2f:98:09:d9:c1:9b:c0:b2:92:32:f3:82:
8c:ac:01:f3:63:54:c6:21:77:9f:4a:8e:04:e2:c4:
8a:59:c2:a1:3e:18:35:b8:6f:5d:18:f7:98:4d:f3:
7a:36:2b:0c:b8:aa:9f:cc:a8:72:19:66:b6:09:a6:
d7:f4:73:8f:fd:2d:06:41:a9:6a:c2:40:30:3b:4b:
a4:b2:6b:29:30:3f:7d:66:84:5e:44:0e:8f:d7:10:
50:6f:18:b1:09:53:21:e9:c9:f5:ee:e2:f9:72:bf:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:D4:95:C7:B9:A9:67:FE:86:02:65:2B:8C:94:6C:7D:54:76:47
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:cb:50:6e:ba:8c:09:72:28:54:b4:b3:5e:e2:22:13:36:
ed:b5:35:44:13:27:76:4e:06:34:7b:a9:ee:42:c9:70:0e:fa:
2e:cf:8d:56:85:73:29:1d:47:bd:60:f9:73:db:3b:fd:ae:67:
1e:0f:11:00:98:4a:90:e1:e8:04:2d:4c:90:06:a8:06:74:7d:
06:13:77:39:af:94:51:93:06:11:0b:cf:23:da:ef:08:44:51:
96:aa:8a:93:b1:eb:99:1a:6b:e4:8c:27:f8:66:ed:12:2b:19:
35:80:46:a0:f3:3c:ae:8c:db:73:b0:ba:6d:17:4a:6c:64:26:
36:15:c8:87:77:21:16:9c:f0:81:70:9b:8b:fd:56:79:0b:5c:
69:3a:7f:40:7d:7f:44:85:51:97:08:3b:64:98:c7:d4:bb:36:
ee:29:f6:23:e1:73:0a:0a:2e:d7:91:31:b0:12:08:f8:a4:58:
bd:61:e0:e2:9d:33:19:de:3d:9e:a1:01:f0:96:71:6a:d8:3e:
7f:80:dc:76:03:08:4b:fd:00:a7:49:94:6d:28:1b:fc:62:59:
f1:72:9a:b6:9f:7e:54:ee:d6:48:db:b4:9b:5b:d9:ab:b5:67:
49:34:3a:5b:a2:a1:5c:25:f7:eb:bd:0f:48:01:89:e7:18:1a:
1a:7e:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:43:37 2025 by rpki-client