Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: C7EzIlGUG4k73F0n6x773ip5h8QMXFquEFyUBvh00T8=
Subject key identifier: 7E:98:AD:B7:53:2E:7A:20:E0:60:A9:D6:B5:D0:80:B0:D8:8F:A7:8B
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01984A0A69B1847D14FE79333C924856063C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 13DB
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: 5jNxER0XSd69NXWTDucp/toSqcYOhUYiklwFwx43haI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:69:b1:84:7d:14:fe:79:33:3c:92:48:56:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=7e98adb7532e7a20e060a9d6b5d080b0d88fa78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:03:bf:b1:76:98:66:8c:f8:34:f7:e6:74:
48:21:54:5c:0a:15:23:7e:c4:5d:0f:71:4d:08:e9:
74:8b:a4:24:28:fd:51:f0:5a:3b:16:92:9f:54:38:
9b:f2:14:ef:3e:23:2e:e2:93:67:0c:09:e3:c5:7e:
01:01:29:eb:f8:0b:af:77:92:d0:b7:b6:88:12:27:
6b:17:0a:dc:a1:03:a4:be:5d:ce:bf:bb:8b:79:3e:
82:97:56:76:d3:1e:01:c8:45:c2:cb:05:46:16:88:
97:3f:4c:0c:f6:ed:90:a2:49:2f:b3:87:9d:9b:85:
dc:ce:9a:bb:3c:ba:65:4c:8e:79:48:d4:d2:93:59:
61:a5:95:6e:c2:db:0e:b7:8b:b7:af:be:08:dc:36:
57:a2:0c:c6:a4:9a:47:71:db:a0:76:d2:59:7b:dc:
c8:5f:74:2a:d3:15:63:f8:ad:2e:70:b0:f8:7e:28:
ab:af:0d:aa:35:59:dd:78:ec:90:02:19:6e:6a:aa:
a7:f3:de:57:39:e5:28:c4:ea:cd:d6:b8:c6:ba:0b:
46:9f:b9:9c:f5:e4:d6:c2:0f:1c:e0:fe:93:d3:91:
ed:fb:cd:2e:df:b4:b9:fb:81:6e:73:77:59:db:da:
b9:93:92:63:8f:32:02:55:d6:82:83:9b:11:df:3c:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:AD:B7:53:2E:7A:20:E0:60:A9:D6:B5:D0:80:B0:D8:8F:A7:8B
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:48:db:4a:24:40:1d:59:d1:62:63:0f:9e:ce:93:40:9e:3a:
97:34:8b:46:c1:46:df:6e:c1:e8:6b:be:ac:14:a9:8d:b4:71:
3e:6d:6b:d4:b3:6b:df:03:95:c3:94:31:d8:77:1e:8f:49:2f:
9a:a9:b3:fd:32:6b:e3:dc:04:36:ed:48:d1:35:55:7e:c0:61:
17:ba:15:02:e7:89:6b:cb:26:cc:de:6e:4d:44:c2:85:93:da:
d3:74:38:28:2f:4e:53:07:54:b8:0c:54:81:46:7e:3a:22:6c:
a5:91:cc:22:ed:b6:65:36:c3:ed:f3:7e:73:51:8f:af:4a:f0:
80:e5:08:5e:2f:f3:19:2b:e3:89:da:65:1c:a0:fc:2e:47:3c:
78:af:13:d1:9a:dc:76:a4:e9:6c:11:c9:45:b5:bd:a0:a8:5d:
30:e1:0a:6d:fc:cf:fb:97:4d:46:86:1d:9a:47:5c:a2:f5:f5:
ec:fa:46:33:b9:4a:2b:d4:39:05:3b:88:cd:3b:07:89:e6:69:
72:be:d6:a5:24:fa:87:20:9f:f3:f4:fa:d4:da:37:fc:0c:12:
7d:3d:50:30:f8:6b:4b:79:0f:a6:2c:e3:5b:24:87:9c:60:68:
db:79:6a:89:b1:f9:00:2c:98:2a:1e:39:ce:62:f4:0c:2e:0b:
12:ff:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:53 2025 by rpki-client