Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: WWCHh50F3rxZ3Lk0SWrRSAup6vhWPGVi8qMg3j/fdIM=
Subject key identifier: 0E:93:50:A0:3B:89:3E:55:A7:19:F8:BB:30:FD:73:E0:35:12:E7:6A
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019842F5325C5B8DA33AA0FB63A1CDB2FAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1338
Signing time: Fri 25 Jul 2025 19:00:22 +0000
Manifest this update: Fri 25 Jul 2025 19:00:22 +0000
Manifest next update: Sat 26 Jul 2025 19:00:22 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: TnqwX5vD0X7dX8wBkoxEet4w5WGarsexzUViP8lrFsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:32:5c:5b:8d:a3:3a:a0:fb:63:a1:cd:b2:fa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Jul 25 19:00:22 2025 GMT
Not After : Jul 26 19:00:22 2025 GMT
Subject: CN=0e9350a03b893e55a719f8bb30fd73e03512e76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:48:a4:ff:ee:83:d4:ee:a8:da:45:8c:43:fd:
7a:61:2b:d4:c2:79:bc:e4:a5:2d:0c:13:68:c9:ae:
99:41:5e:62:af:43:fb:6d:a4:ec:4e:6f:74:64:2d:
ec:ab:ed:1a:30:87:a9:c2:98:ff:46:60:5e:31:9e:
57:c4:04:d0:ee:6c:79:56:73:2e:74:86:dc:a3:65:
9e:29:20:3f:0e:1b:ea:49:55:ff:eb:24:f7:2b:44:
7e:39:b7:9b:0f:03:77:0d:e0:7b:cd:e8:49:6e:45:
fd:ee:73:aa:d4:9d:60:40:5b:9b:b7:7b:af:1c:2e:
1f:13:12:94:dd:f7:05:cb:f9:b7:8a:b1:3e:b2:97:
4a:82:92:0c:b4:18:14:49:13:93:a7:be:0d:fb:d9:
ad:8c:15:dc:ec:6c:28:37:7d:8d:17:9c:43:2e:0f:
08:47:4f:d9:97:55:ab:8e:3b:c7:0b:99:66:b4:8f:
65:8a:bd:36:f9:60:7f:cd:79:a6:58:3b:d5:a1:ad:
12:58:8f:9b:fb:09:b1:8c:e1:9a:95:6c:32:c6:23:
70:67:05:0d:7d:9f:cc:04:b9:1a:bb:35:8e:24:0a:
f9:d4:b2:59:6c:95:1e:2a:53:85:f1:c5:fe:be:fa:
59:75:5a:86:de:de:a1:9d:79:0b:1c:d0:c4:80:1e:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:93:50:A0:3B:89:3E:55:A7:19:F8:BB:30:FD:73:E0:35:12:E7:6A
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:84:9a:8f:b9:b6:a1:d4:20:13:f1:1c:5b:f5:06:a5:aa:2d:
b6:9a:d4:12:16:29:9c:0b:8e:fa:7f:36:bd:74:ea:38:b8:01:
22:54:f1:78:ed:70:30:b9:65:86:bc:ca:b1:8c:4d:1f:19:29:
79:a1:af:74:18:f4:fd:72:b5:b9:96:98:d3:2c:e9:ef:54:cd:
50:aa:e1:d2:79:d7:a9:d6:58:b1:2a:7d:01:c3:e1:f7:54:bc:
8c:a9:36:d2:cc:8c:24:3d:95:4a:c0:65:e5:ff:47:e3:3c:d7:
8d:18:88:67:03:e8:19:6a:5f:42:aa:19:fa:06:87:6d:68:f7:
0b:e1:d6:d0:86:e5:f9:4a:13:43:ec:18:83:c9:a2:85:8f:fb:
6b:4d:98:4a:63:67:53:d1:cd:2a:b7:f4:83:29:a6:59:31:d5:
69:2b:8e:57:82:ff:c4:d5:0d:a5:3f:31:46:a5:95:83:10:65:
70:4a:0e:ca:f5:5b:2e:f2:de:a2:03:ef:82:6b:c7:f8:38:d1:
60:bc:b3:77:f6:78:a6:79:8a:d4:0c:54:50:51:2a:c7:3b:54:
83:ea:5e:4e:01:07:5c:b7:c0:f7:c9:61:9f:e0:32:7a:c9:ec:
b2:18:88:b5:91:ee:b1:a2:2d:22:98:3d:3d:e7:dd:92:38:5e:
ef:48:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:06:48 2025 by rpki-client