Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: YFTHEC8fcyCLLLNkRpruZnAn/oWhz/tEw7tPiIegAaY=
Subject key identifier: 6B:C0:C3:89:3A:1E:3E:F2:35:92:42:D2:92:64:EB:BF:CE:61:15:FB
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 0198537BABE90EB82553DAC47B1C924F0FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 10A1
Signing time: Tue 29 Jul 2025 00:01:10 +0000
Manifest this update: Tue 29 Jul 2025 00:01:10 +0000
Manifest next update: Wed 30 Jul 2025 00:01:10 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: UBb0gBM6hGa2lGB04TxHCHqVMWUqCfMOWYDfWktA4RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:ab:e9:0e:b8:25:53:da:c4:7b:1c:92:4f:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Jul 29 00:01:10 2025 GMT
Not After : Jul 30 00:01:10 2025 GMT
Subject: CN=6bc0c3893a1e3ef2359242d29264ebbfce6115fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:60:e4:0b:f0:e9:6e:73:af:0a:7a:e0:67:
46:fa:76:e2:7f:14:bb:83:7c:a4:07:90:90:bf:07:
a8:75:59:c6:81:13:19:b3:6b:76:07:74:e1:30:61:
ce:2c:87:ad:9a:50:67:9a:b4:56:e0:22:9f:90:65:
ea:d1:e0:6e:12:37:54:93:3d:10:d6:dc:c6:c5:cf:
ac:82:c6:5a:b5:03:42:f7:11:ff:af:f4:46:f7:10:
fc:d9:ee:0a:d4:a0:6a:92:65:2e:27:8b:9f:ab:ab:
b1:55:b8:ef:a3:32:bf:6d:5b:ad:f5:e5:ba:0c:c5:
ac:6f:8a:95:e1:b7:1e:60:86:0d:e0:62:13:02:ac:
8f:7b:25:47:ca:d4:ba:1e:ee:46:49:c1:52:a0:0f:
b6:3d:f5:3f:cc:46:c1:0b:b5:70:b2:d5:28:5c:ef:
a1:e4:7f:e7:d5:c2:e8:1b:2c:15:ec:fc:14:6d:93:
56:d5:b0:47:05:11:8d:f1:98:9b:41:69:9f:a5:9f:
58:da:b9:63:af:3a:1c:65:49:1c:e3:b1:83:5d:16:
79:61:f5:f1:4c:7e:3a:f2:1d:29:a4:3b:e7:f3:c9:
e7:25:49:b5:0d:07:f9:ab:30:a4:6d:67:db:e0:8f:
2f:ca:c1:c6:ac:40:32:9c:5f:0d:3c:d1:6d:f2:e4:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:C3:89:3A:1E:3E:F2:35:92:42:D2:92:64:EB:BF:CE:61:15:FB
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:33:6f:17:d4:ee:56:f3:4d:7c:52:72:e2:93:d8:ce:25:
e0:01:b6:88:ba:8e:d2:f6:44:9e:7d:6b:76:3c:78:d9:8c:0e:
21:38:24:56:08:4a:c7:69:09:e9:1b:02:8d:a7:01:cf:dd:7c:
2e:81:d4:e4:9a:01:fb:96:25:c1:dc:47:44:96:4c:c6:0a:fa:
38:b0:42:bc:f7:22:a2:07:50:50:42:c8:e1:00:9a:dd:3d:0c:
1e:fc:26:a4:ee:4d:e5:fd:c4:dc:76:a2:8d:68:f1:40:51:a7:
57:80:34:55:1e:6a:6f:f3:fc:7e:c3:02:c5:81:26:65:4f:82:
d1:e7:6c:16:d7:7c:9e:ef:8a:a3:a5:bf:d2:a7:14:d0:c2:b7:
3e:1a:b4:74:59:ba:ad:9f:d7:8a:77:e3:ff:7a:14:be:09:a5:
2f:de:7b:45:ac:98:a8:e5:0a:71:8e:47:ba:26:80:dd:6c:64:
9f:b6:c0:1f:29:01:e5:98:da:98:0f:5a:37:c0:71:08:06:de:
bd:02:62:8f:ac:c2:11:4c:93:aa:4c:9a:fd:5e:8d:4f:3b:94:
5f:6d:1e:bd:7a:42:91:03:0b:71:80:3b:22:29:02:b7:f6:b2:
9d:55:2f:0b:4b:6c:98:a5:53:4f:cf:dd:b0:ed:e0:59:65:31:
ba:52:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:51 2025 by rpki-client