Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: BMC4hGpb2x3A+ePtpDNsEw1C4JlRbto94iqetwM7a4Q=
Subject key identifier: 49:67:E9:23:F8:AF:AC:15:6F:8E:77:E3:35:03:14:74:06:17:9D:ED
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 0198481BD204EC7ED32B96460A594D741CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 19:00:39 +0000
Manifest this update: Sat 26 Jul 2025 19:00:39 +0000
Manifest next update: Sun 27 Jul 2025 19:00:39 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: 3eHEGTnudWzgF9Nso30njkt3mTx2nzak6PwahVvKunM=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:d2:04:ec:7e:d3:2b:96:46:0a:59:4d:74:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Jul 26 19:00:39 2025 GMT
Not After : Jul 27 19:00:39 2025 GMT
Subject: CN=4967e923f8afac156f8e77e33503147406179ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:dd:be:7d:00:17:6a:64:19:73:72:0f:2e:
c1:c4:e0:80:d4:8e:c4:38:ca:06:58:b6:38:91:d2:
54:88:04:67:27:80:d6:5f:4f:07:82:2a:7b:8e:e7:
1f:82:e5:72:c5:43:07:9f:6a:59:bf:2a:ee:4d:d6:
3d:48:65:44:72:59:0e:0c:15:68:9e:33:2f:5c:87:
c2:b6:39:86:31:af:c7:5c:b0:e5:fc:9a:27:09:34:
8e:57:f2:d0:91:65:b5:29:50:a6:42:c9:f4:55:5a:
75:ef:1d:86:56:97:2d:3a:41:ed:38:68:af:a6:4a:
e2:47:dd:9d:c7:aa:8f:38:03:78:72:0e:43:45:17:
72:41:d4:90:bc:68:a1:b5:4f:c3:4d:8c:fe:66:51:
f2:72:df:1e:ea:d5:82:e1:7a:fe:fc:6f:24:a3:db:
3b:ec:f1:8d:86:37:9a:72:42:36:a3:b5:cc:30:f9:
75:e2:70:fd:e8:88:31:59:2a:dd:c2:86:28:33:4b:
4f:3d:b5:13:d7:08:51:fe:d6:2b:df:b0:19:8f:7f:
84:b2:52:6b:e6:ab:ba:41:84:4c:47:5a:89:bc:a4:
cd:54:29:69:5e:ee:25:dd:db:1c:37:44:41:32:f8:
1d:29:95:59:e6:0f:ad:50:43:f1:17:c0:58:f7:d0:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:E9:23:F8:AF:AC:15:6F:8E:77:E3:35:03:14:74:06:17:9D:ED
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:b4:6e:0c:8d:f8:d5:13:a4:ef:38:5e:cb:2e:56:35:60:
dc:e0:69:9a:41:77:83:bd:50:b0:b1:48:dc:1d:ab:07:23:08:
86:50:80:2e:c9:93:28:7e:39:be:37:bf:c1:0f:06:9b:e0:6f:
02:5b:3c:ed:f9:5d:85:50:80:9c:a3:ec:b9:66:36:f1:fb:5b:
6d:db:ec:f2:b3:d9:a6:00:b6:51:e3:03:4f:2d:85:05:b3:9e:
d7:a6:4a:f5:8e:81:12:2f:3b:6f:f2:b7:92:2f:fe:fd:7a:7f:
94:fa:5e:b3:b8:3a:dc:3f:42:1f:30:c9:12:db:73:ae:0e:2f:
fd:8f:54:19:db:fb:89:37:cf:a6:4e:33:2c:b9:5e:77:91:4c:
19:be:15:a3:90:75:18:0d:db:b3:6f:ef:ed:1a:07:21:7a:44:
2d:05:ce:b7:a1:ac:b8:ec:11:b6:02:f2:52:5d:5e:30:b2:f3:
95:db:1c:c6:46:a9:de:02:82:a9:b1:4a:03:50:ee:c4:cd:86:
2f:f0:c6:91:2c:83:76:0a:e8:58:cf:65:b0:e1:10:c7:c3:91:
f0:d3:7a:b2:ee:44:dd:77:63:f7:ca:00:f8:1c:92:ec:7a:28:
6e:b5:e1:ab:d0:f8:15:47:86:6b:9d:0a:5f:46:35:f2:e5:11:
f0:a8:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:38 2025 by rpki-client