Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: +/nFTIjCp5kwm1u6hbBQzIQQTx69dfdROBjvUq4/hsc=
Subject key identifier: 32:0A:1F:70:B9:BF:E2:2F:31:5A:39:00:4D:F7:A3:FD:5E:66:D2:BE
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 01984AAF2C3F20403C3C378020830E310C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 07C6
Signing time: Sun 27 Jul 2025 07:00:50 +0000
Manifest this update: Sun 27 Jul 2025 07:00:50 +0000
Manifest next update: Mon 28 Jul 2025 07:00:50 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: IFj3m1gsdgRqfIm3C3/WVrFB4AmnXTlCSag6V4caBk8=)
2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:2c:3f:20:40:3c:3c:37:80:20:83:0e:31:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Jul 27 07:00:50 2025 GMT
Not After : Jul 28 07:00:50 2025 GMT
Subject: CN=320a1f70b9bfe22f315a39004df7a3fd5e66d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:ad:89:09:af:a3:8b:7c:05:e3:7b:7d:21:
60:86:8b:dc:2f:3f:39:67:18:46:89:eb:9e:42:e5:
4d:e7:e0:ab:7e:74:08:d9:d1:87:17:49:d3:6c:46:
b1:81:bc:fb:5d:24:91:0e:5a:eb:7a:d9:86:05:37:
c7:c3:73:da:3e:ed:79:da:d9:14:aa:38:ad:0d:db:
44:b6:1a:14:41:69:26:f4:82:2d:cb:0f:66:8a:61:
8c:9c:91:14:34:c1:61:78:8c:7a:2f:80:76:6c:61:
ff:42:41:ef:7d:01:6d:9d:63:b6:1d:fe:20:92:0b:
a4:6a:ed:06:de:99:5f:21:65:59:bd:ce:c4:c5:a1:
68:89:9f:98:42:4a:ca:ec:48:83:f5:95:62:ba:72:
ef:dd:3c:50:6e:28:59:3c:d0:90:2f:96:f3:00:e4:
08:93:50:26:48:8c:6d:a4:81:15:44:25:a7:53:1c:
aa:cd:c8:5b:70:10:6c:89:97:c9:8e:6d:54:95:7f:
7e:e4:d0:a4:8a:d5:67:85:81:6a:93:b7:45:f4:c5:
5c:0e:d4:4d:ff:8c:4a:26:04:2c:39:48:f0:d4:1c:
49:c4:34:c5:11:92:d6:d9:63:1a:3a:42:ca:92:a1:
e5:66:f1:4f:6d:b0:29:3f:ab:24:e2:bf:f8:e1:b0:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:1F:70:B9:BF:E2:2F:31:5A:39:00:4D:F7:A3:FD:5E:66:D2:BE
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:4a:24:3c:b1:5b:b5:a0:06:ab:d3:f8:e8:f0:f3:ac:7a:
7a:b9:04:8f:4f:ed:f8:79:5f:c0:7c:da:8c:20:3d:08:56:3b:
e7:ae:93:f0:62:60:42:d6:04:b5:42:5f:3d:f8:e8:19:5f:1c:
b1:02:bc:ca:81:e2:f7:d6:33:19:36:e4:06:20:ef:6f:59:f3:
d3:cc:d5:c1:51:44:53:aa:ce:4b:23:f5:02:f3:69:20:fb:49:
ca:85:20:c2:74:9b:9e:24:7c:1f:46:a8:72:5c:9b:4b:65:03:
c0:db:ba:bb:b8:43:d3:32:42:1d:9e:d7:7d:cd:48:5a:0c:ef:
43:f6:06:69:6b:a8:f8:fe:3a:db:91:f9:f1:dc:4b:ee:0f:7a:
d4:4d:e8:73:b5:c5:cc:41:ca:63:36:8c:9d:47:cc:b9:1d:ce:
81:2f:2a:c3:c1:12:14:45:35:53:5b:a6:33:c1:28:27:fe:c8:
7e:01:f8:48:b3:ba:15:f2:93:7d:ce:ec:b0:85:1b:1c:97:80:
7c:2f:93:62:69:f9:32:f6:2f:8c:0c:73:0e:52:96:39:c5:f2:
6b:db:37:2b:78:dc:d4:33:91:7d:9e:6a:df:da:ac:d0:38:4e:
cc:7f:70:c8:53:33:fb:6d:b9:cd:fd:d9:26:2d:86:9a:ab:a4:
c6:cb:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:04 2025 by rpki-client