Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: NviUsZGpXIi/OB46hZv52X7rlh8Kh+HtolQHylMITFw=
Subject key identifier: ED:4C:F5:49:88:5C:27:72:E9:5D:5E:27:10:E7:16:6A:1E:E6:05:E7
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019828231FAE22F8225ED0AF21E56B6BF813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 15F3
Signing time: Sun 20 Jul 2025 14:00:47 +0000
Manifest this update: Sun 20 Jul 2025 14:00:47 +0000
Manifest next update: Mon 21 Jul 2025 14:00:47 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: mH1g1f8DWtACS9HqlXvYjPZKV5Wt5V30a/RENxFfruU=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:1f:ae:22:f8:22:5e:d0:af:21:e5:6b:6b:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jul 20 14:00:47 2025 GMT
Not After : Jul 21 14:00:47 2025 GMT
Subject: CN=ed4cf549885c2772e95d5e2710e7166a1ee605e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:20:fc:10:93:b9:67:a6:67:5d:87:d6:15:
87:d1:32:46:f9:bc:82:13:ef:c6:5f:a1:5a:35:5e:
0b:39:30:70:4f:4e:f2:d3:19:0a:39:12:22:62:58:
6f:c3:95:5d:f9:ea:ce:3a:35:d0:47:d1:94:b7:4c:
59:c9:0d:9d:fc:cf:fd:5d:98:88:72:9d:23:70:99:
6f:f7:ba:2b:6d:ce:7c:5b:48:71:41:ae:ad:49:a6:
62:43:4e:66:07:ca:0a:ea:12:b2:b8:c5:eb:66:25:
77:62:ba:b9:68:6d:26:91:99:a7:23:94:23:7b:c0:
e1:ad:ac:67:de:67:a2:d4:ac:3d:5d:a3:0b:26:7e:
92:fb:5e:b7:8c:25:b6:c2:56:39:e0:95:79:33:0f:
24:a1:3c:d2:84:da:2c:99:af:08:d3:11:b3:88:e5:
8e:b4:1d:c3:ac:3a:34:05:bc:b9:9b:57:a0:77:50:
7f:7f:95:8c:7a:7c:45:60:2d:74:fd:4b:bb:1e:30:
77:68:bc:76:89:e6:87:78:06:84:be:c9:0c:46:49:
99:8a:66:3a:c8:e1:a3:63:51:4e:3d:8d:9d:61:16:
ed:9c:d4:2d:f1:d4:0e:30:4d:ca:e6:79:d4:77:3b:
ee:82:a6:76:af:b2:2f:2a:23:96:b4:e5:79:6f:60:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4C:F5:49:88:5C:27:72:E9:5D:5E:27:10:E7:16:6A:1E:E6:05:E7
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:53:82:83:01:bf:ef:38:f1:8e:85:3f:8f:82:6e:d6:67:86:
0e:d9:1b:02:10:17:bb:3a:b8:ac:16:17:37:e4:71:bc:f8:b5:
d8:04:d7:02:f9:eb:91:9c:1a:81:c2:58:5b:9e:f1:b5:03:1f:
ba:04:18:18:85:5b:e1:ef:3b:55:60:4f:e6:6f:55:37:a8:97:
7d:3c:74:48:1b:aa:d3:ff:dc:c6:80:cc:58:a6:57:fc:48:05:
53:1e:10:de:29:c7:e5:fa:13:5d:a2:97:3f:c8:20:1b:9f:98:
ff:05:2b:4a:b8:14:c8:02:c3:47:be:b6:c0:18:0c:7f:79:e6:
8d:b2:0b:90:f2:26:dc:bb:f6:f1:18:4a:37:7d:d4:73:c6:15:
43:dd:a8:25:6d:56:64:12:a4:39:c3:dd:88:d6:38:90:3a:6b:
3a:58:93:bb:bd:f8:17:1a:81:1b:31:92:48:d8:8f:fc:c7:6d:
ec:9b:dc:80:62:0b:1a:1d:bd:7d:36:41:4c:9a:ac:35:76:1d:
32:c5:a3:63:94:fc:d7:ae:a7:95:fd:02:e4:07:88:24:5d:6d:
b2:0f:cc:6d:93:8f:e9:21:b3:c2:ca:fd:14:95:d8:3d:08:f1:
b6:06:35:42:79:ac:43:95:0c:ea:78:b8:53:3c:d5:69:b7:2a:
2b:ad:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:20 2025 by rpki-client