Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: wC35KNoNhk7nd2qhimRQBK3rEkVY6q995X3ZBLsYWK8=
Subject key identifier: 32:67:07:48:04:E3:70:12:49:B1:12:3F:74:F2:E4:89:C9:9C:4D:E0
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019826A388A2323A9D1F8749DD6045AAD474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 15FE
Signing time: Sun 20 Jul 2025 07:01:48 +0000
Manifest this update: Sun 20 Jul 2025 07:01:48 +0000
Manifest next update: Mon 21 Jul 2025 07:01:48 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: uZHzkmEWs3jGEPPEjct5DIkLtXu33jsLMw1m1OtDcyk=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a3:88:a2:32:3a:9d:1f:87:49:dd:60:45:aa:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jul 20 07:01:48 2025 GMT
Not After : Jul 21 07:01:48 2025 GMT
Subject: CN=3267074804e3701249b1123f74f2e489c99c4de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:03:48:b7:e2:9b:34:9f:66:83:15:cf:f0:
e5:0a:69:55:6d:03:db:44:ac:70:ce:31:3d:ae:55:
93:20:50:6b:63:a3:a9:90:40:d6:4d:5b:69:14:04:
c6:35:07:e8:5b:f4:10:2a:d4:41:b4:95:d0:a7:8f:
46:9d:35:21:d8:dc:53:2b:30:f9:40:ec:1d:35:9f:
8a:1d:f7:8e:28:1b:f0:85:72:dd:6d:a0:50:c3:1e:
85:29:23:a9:38:bb:7b:c0:75:e2:24:c9:08:05:44:
e0:d9:c2:63:e1:61:68:66:fa:19:60:93:90:9a:2d:
7e:9e:5f:7d:ec:71:14:e3:8a:57:d8:b0:9b:f2:ab:
34:7e:b1:de:92:dd:91:f9:50:d0:91:13:53:e1:54:
cf:bc:d0:8c:42:92:29:8b:0f:80:e4:4c:da:1d:61:
e6:bc:4d:64:6d:61:c9:73:30:55:e0:f0:19:58:03:
a7:12:7a:d8:e2:6b:3b:f0:01:ca:9c:34:0b:e6:7e:
d3:9d:84:51:36:82:7d:9a:9f:81:f3:03:7b:e7:c8:
04:de:ea:de:c7:97:d1:d6:3f:ab:d6:89:68:79:55:
58:bb:91:08:b0:e7:08:d2:8a:d8:b5:62:10:48:79:
e5:80:9d:98:16:86:1d:9a:8a:4b:fe:a9:23:42:bd:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:07:48:04:E3:70:12:49:B1:12:3F:74:F2:E4:89:C9:9C:4D:E0
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a3:6e:56:5f:5d:cf:cf:f9:9b:ce:31:d2:b8:56:9e:0e:c3:
f2:25:02:a0:5b:55:a5:92:e0:6d:af:29:8b:c9:bb:1b:ba:bd:
ea:fa:25:1c:1a:7e:ff:ea:84:2b:62:56:33:49:f6:32:94:3a:
0d:22:d3:3a:b5:4c:1c:d2:5d:bc:6d:16:ca:c4:40:6b:c9:4c:
1c:f3:76:32:b1:55:68:2f:52:65:57:f9:db:c9:82:3a:4d:8e:
f7:63:5e:b4:9d:58:40:f8:ef:16:cf:c1:4c:eb:d2:66:5c:95:
40:e3:bd:ec:8f:54:6c:77:cf:2e:28:7a:ce:e2:3e:0c:67:2d:
d1:ba:67:91:a2:7f:90:92:56:96:4b:52:c0:8f:ee:de:94:25:
53:f1:a2:a4:dd:a9:2b:34:ae:3e:50:0c:f5:25:f9:ab:76:df:
54:a1:04:50:26:c2:04:e6:12:51:42:4c:63:48:fb:c0:d5:4e:
15:1e:db:ff:44:fa:98:9e:db:68:c3:06:36:03:38:51:2d:19:
2d:7a:c1:c9:a4:b6:62:4a:31:26:3a:62:6f:a1:19:0b:4a:b1:
3a:cd:a8:bf:2e:36:c3:59:04:d9:23:44:03:97:8f:6b:bf:8f:
c0:a1:71:0a:4e:86:5c:c5:0a:ed:af:19:53:b2:04:cc:34:7b:
40:83:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:15 2025 by rpki-client