Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: KZpFZz+tAYMyaJh2uxH8hF+q1krZxd6fhUxB2J1Yi6c=
Subject key identifier: 4D:41:5E:7A:A0:22:5B:4D:19:AD:4C:E5:EA:73:47:AA:3F:82:51:5B
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 01984965F55F3DDD113872EBBC988621E6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 01:01:15 +0000
Manifest this update: Sun 27 Jul 2025 01:01:15 +0000
Manifest next update: Mon 28 Jul 2025 01:01:15 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: oY9D4Iu3dUEgbQEKoeMYgwnbEjArBV22vgUMkseH9Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f5:5f:3d:dd:11:38:72:eb:bc:98:86:21:e6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jul 27 01:01:15 2025 GMT
Not After : Jul 28 01:01:15 2025 GMT
Subject: CN=4d415e7aa0225b4d19ad4ce5ea7347aa3f82515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:f6:ce:48:24:71:b1:1e:8d:76:59:61:1c:
aa:82:71:97:22:08:5a:c4:b9:db:04:ce:a7:b5:d8:
99:48:9d:6d:8a:f6:14:12:79:3e:ca:48:13:f9:68:
56:59:25:76:f5:7c:39:4c:3d:0f:0e:1e:e5:49:51:
03:a2:fa:b7:1c:ca:ac:ec:63:18:81:fc:40:3e:ba:
d2:ff:54:a1:6c:fc:9c:b0:88:b4:c6:df:2f:1d:ca:
7a:6a:8b:e5:bd:1d:30:7e:60:ee:7a:38:ad:02:4a:
1f:c0:26:61:1e:01:dc:b7:c3:e1:a5:28:be:e7:ef:
21:c7:96:35:f4:d1:65:28:f4:37:cf:3c:48:6c:a3:
a5:bf:52:04:85:d1:6b:c9:c1:0c:56:ad:17:b3:e8:
0d:14:3f:d4:9a:b0:c5:7b:82:15:87:0d:78:86:ef:
b0:e7:18:ef:3a:89:6e:fc:3e:c4:cb:0a:ab:7d:b0:
19:4b:77:cb:53:f4:7a:68:b6:06:e6:0f:6f:65:c2:
fa:7b:b8:fc:2b:9d:fe:32:c2:96:c5:90:78:47:64:
26:75:56:6c:36:9d:f7:68:23:0c:f6:2f:92:4d:90:
17:88:f7:e0:d5:56:fa:3f:fb:0d:e6:b5:0d:bc:c6:
33:ba:c7:c6:62:40:73:ec:73:33:9d:ac:d4:71:b1:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:5E:7A:A0:22:5B:4D:19:AD:4C:E5:EA:73:47:AA:3F:82:51:5B
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:ba:26:1b:d1:7e:ec:21:29:09:5b:98:b6:65:71:e1:58:
21:07:c9:6f:5c:24:e8:c7:af:d5:8e:b6:21:73:1a:a1:7e:84:
f2:54:0a:88:7e:c6:29:93:fe:44:e8:90:b0:b4:70:1b:11:2d:
27:4b:3c:0e:7b:18:1b:15:cf:65:09:b6:95:84:08:75:8d:17:
99:e2:7e:54:66:19:7a:8b:55:b3:e2:0c:cc:4a:d7:3a:59:59:
ac:cc:e4:0e:e9:cc:fd:39:60:78:05:f9:de:cd:95:79:7b:6e:
33:11:2f:d1:c5:eb:2d:cf:d8:d8:e9:97:3b:b8:8b:a9:92:f0:
dd:55:8f:f7:f7:3b:23:32:9c:dc:10:1f:65:52:bf:1f:89:3a:
29:48:7a:5e:e3:46:b8:2f:16:18:00:75:6b:73:1d:0b:eb:29:
66:74:03:28:7e:5e:f1:91:26:ba:69:08:af:73:67:6e:1e:4c:
ef:73:02:c9:63:10:83:f2:ec:e1:5e:27:cc:f2:04:c4:65:0e:
8b:04:31:4a:3d:fd:40:c4:04:d2:62:ab:78:17:a5:92:b2:78:
3b:1b:96:6c:ed:59:c5:97:9d:9d:f5:ba:ed:f4:9d:e7:e9:36:
68:39:21:4f:8a:f6:1c:a5:9c:13:4e:ee:24:9a:9f:52:a4:a0:
a1:ca:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:15 2025 by rpki-client