Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: KQ9s5CtYFdQDBco2hQevxW7SWEEnno7pXGCrL6Hwj9M=
Subject key identifier: BD:7E:CB:63:00:45:09:B6:CB:46:F5:06:AD:7D:6B:65:74:B0:DE:63
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01984A0A30C594AB48D0F92A72DFD8721186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 04:00:38 +0000
Manifest this update: Sun 27 Jul 2025 04:00:38 +0000
Manifest next update: Mon 28 Jul 2025 04:00:38 +0000
Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: WHC2erOrw52vSPJ9Bn/YRDuLJDd8bs/HJHQUFtUxRVo=)
3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:30:c5:94:ab:48:d0:f9:2a:72:df:d8:72:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jul 27 04:00:38 2025 GMT
Not After : Jul 28 04:00:38 2025 GMT
Subject: CN=bd7ecb63004509b6cb46f506ad7d6b6574b0de63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:f8:39:a8:2b:d9:6f:0b:cc:4f:fa:69:20:
02:ae:0b:8c:19:9c:cf:21:10:86:9a:3b:14:6f:f4:
7c:b0:2a:f2:f9:fa:47:9d:17:27:2a:53:22:e8:99:
36:93:fa:ee:6a:92:bb:a6:0f:dd:a3:fd:ea:15:08:
97:19:3f:2e:c5:de:aa:cd:33:3c:0f:f5:e6:ae:dc:
a5:b7:09:14:85:2c:26:c6:c2:b6:d0:dd:c6:64:c6:
74:5f:1c:0f:fb:92:b5:8c:24:07:c5:a1:0a:98:87:
80:a3:0e:9d:b8:1f:d3:f9:86:bc:f7:32:39:30:47:
6a:e3:84:14:5a:73:7b:d9:06:81:70:0a:21:32:6f:
70:f2:40:52:b8:57:4c:08:1c:fd:20:03:80:56:8a:
37:7a:37:dd:71:25:0f:f0:3d:ea:b1:90:b9:13:97:
a3:1e:20:93:17:f2:15:c0:4e:e8:f8:16:9a:ff:67:
9d:20:a3:5d:7d:57:1b:04:bd:b4:4b:0d:da:48:be:
7e:73:c1:33:77:76:9c:ac:f6:16:e2:8e:b4:aa:71:
78:d0:e5:f9:d8:57:87:e9:70:72:49:66:97:c5:66:
dc:eb:45:52:53:3b:8e:a2:95:12:a8:54:3a:be:d0:
3f:e4:54:a6:46:5c:e6:f0:a1:b7:85:3e:79:64:83:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:CB:63:00:45:09:B6:CB:46:F5:06:AD:7D:6B:65:74:B0:DE:63
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9b:ca:9d:eb:9e:93:4f:fb:63:6b:06:88:e5:3a:80:b7:60:
e7:04:72:79:16:1f:9b:06:ab:55:99:ba:e9:67:fc:75:08:f5:
67:9b:c6:dd:b0:93:04:e0:7e:f9:28:15:dc:b3:6d:af:ba:81:
ba:3f:1e:ee:dc:c9:55:63:75:37:32:30:13:b3:86:6a:75:d3:
5b:13:1c:13:6d:ec:f6:f8:8c:82:ea:bb:89:f7:de:5d:f9:99:
e2:fa:c9:bc:9b:02:46:ec:0e:5c:d8:8c:f7:16:de:ef:70:48:
00:be:d8:17:16:8d:2f:31:e3:85:91:04:ad:e6:85:bb:95:79:
e5:a8:ed:e6:90:b2:2a:62:43:08:c3:d3:8d:b6:46:63:63:91:
fc:fc:49:47:fd:6c:d6:bf:ac:b7:a3:32:24:87:5b:d1:16:e0:
25:99:3d:16:75:6d:4b:e8:c2:34:14:f8:eb:02:9d:f8:6b:be:
01:e0:2b:fb:ca:53:7b:3d:96:b7:40:f0:ac:eb:ca:f2:fb:b3:
e6:6c:1e:66:df:7e:ab:dc:1f:53:b0:20:92:72:77:52:64:0d:
5e:36:0a:44:f9:43:4c:60:14:05:70:8f:39:51:9a:af:83:e3:
b1:26:37:5a:39:17:8a:78:16:99:e2:f3:f2:26:f0:29:1f:5d:
76:df:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:58 2025 by rpki-client