Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: Nj9mvWi9X1CZ6QlarKyrS1t50pgENlNFEM5IgUfw5Wg=
Subject key identifier: 5C:49:81:43:16:BB:CB:57:72:37:4C:C9:89:00:10:C7:04:D9:0F:C0
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01984588B946DF9DC9689834244226C3BB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:00:44 +0000
Manifest this update: Sat 26 Jul 2025 07:00:44 +0000
Manifest next update: Sun 27 Jul 2025 07:00:44 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: onLBd7jJiIPtaI3RqrkjegZ03PbykzqXCAzS5Ba9CfU=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:b9:46:df:9d:c9:68:98:34:24:42:26:c3:bb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jul 26 07:00:44 2025 GMT
Not After : Jul 27 07:00:44 2025 GMT
Subject: CN=5c49814316bbcb5772374cc9890010c704d90fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:7d:0f:ee:1d:74:44:13:d0:6f:a7:c9:3a:
da:93:5d:6d:6c:5f:d1:b7:66:89:6b:11:3a:f2:ff:
72:66:a5:2a:c5:cb:7b:78:14:96:68:e1:5d:23:91:
ab:00:05:fa:4a:9b:d9:92:f8:38:b3:92:24:34:51:
16:49:10:80:97:72:9f:14:09:df:d5:22:2b:53:c5:
ef:c8:59:07:24:f0:40:88:cf:66:bc:9c:e8:18:41:
1f:c2:bc:60:de:27:66:ca:a1:51:df:05:00:be:e9:
1a:51:f1:ab:23:17:fa:c9:0f:e4:71:a0:4e:c3:53:
41:23:23:c0:9b:2f:33:a5:5c:dd:4a:be:3b:f7:5f:
a6:da:77:57:ec:6d:b7:4e:2d:5e:88:9b:46:39:0a:
8d:b5:b2:76:f2:d5:d6:a0:73:ba:68:82:0a:94:25:
9c:fe:86:07:e1:97:45:7f:44:3e:9c:37:53:37:89:
0e:ef:a4:1f:26:d1:32:46:db:39:1c:26:04:85:3b:
57:ea:99:5b:33:a5:f9:04:4f:2b:c5:64:25:b9:45:
7c:af:e5:b4:20:53:9f:3d:bc:cf:2b:69:72:4b:d5:
7b:46:7d:c5:44:b1:e9:4b:11:52:62:31:e1:ac:c7:
f2:9a:f8:3e:36:c6:cf:7e:1d:66:6c:77:a8:41:e4:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:81:43:16:BB:CB:57:72:37:4C:C9:89:00:10:C7:04:D9:0F:C0
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:44:f3:86:4d:89:89:3e:1b:82:2c:f8:7e:3c:b5:ee:b2:
64:c2:b6:48:c5:70:00:7e:35:49:19:3c:e1:0b:f6:45:6d:9a:
0d:39:71:d3:33:92:0d:12:2a:8c:fe:40:07:5d:1c:16:e4:92:
bb:22:f3:bd:97:11:98:d4:cb:75:c4:ed:7b:96:31:55:0c:9f:
4e:06:b5:1b:b6:7f:86:e5:6c:2c:b6:dd:33:3f:d4:be:a6:00:
e2:4a:40:18:ab:86:46:1f:e9:36:ca:95:17:22:e5:bb:3f:e5:
97:27:a4:5e:f4:10:4d:19:a7:f3:a5:a1:eb:38:80:4b:c7:4f:
7a:c9:2c:8d:2e:f1:52:91:ed:a0:6f:8e:65:21:ac:00:c9:a7:
d1:89:c5:e0:a4:66:b0:b5:c1:fb:95:eb:aa:c6:68:90:c1:89:
48:8a:d4:62:17:b4:65:42:32:25:74:0f:27:a8:3f:ef:df:0a:
a6:2f:2f:ab:37:30:a0:46:74:8a:02:92:b2:7f:62:77:be:9b:
c6:7e:9f:d8:d3:a7:a5:76:d8:08:27:10:26:e5:73:8b:ab:4d:
76:e8:3b:ed:86:71:f3:ab:73:b9:c2:7b:6d:67:5f:e6:1c:3e:
46:1b:8d:40:0e:7f:0e:ad:1a:a7:22:52:6c:02:32:51:ed:43:
28:47:b5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:18 2025 by rpki-client