Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: qR7gG9cbGqbKyDRHWbw1rbyD8KQVKGG1CYDrauhyayM=
Subject key identifier: 3C:4C:32:B8:28:D7:63:6B:F8:2D:40:B7:B6:04:6D:00:92:7E:56:B8
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 0198CB01FCA4693D41AE159EF503BF2848FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0CDB
Signing time: Thu 21 Aug 2025 05:02:41 +0000
Manifest this update: Thu 21 Aug 2025 05:02:41 +0000
Manifest next update: Fri 22 Aug 2025 05:02:41 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: QgQ+PyftSFPpuyTU7VGPao4ca2qgfL9uWTC/HOy9cB8=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:fc:a4:69:3d:41:ae:15:9e:f5:03:bf:28:48:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Aug 21 05:02:41 2025 GMT
Not After : Aug 22 05:02:41 2025 GMT
Subject: CN=3c4c32b828d7636bf82d40b7b6046d00927e56b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:fc:ec:df:e0:97:cd:83:f6:59:4e:54:83:
a7:eb:eb:bb:b5:41:5b:73:1e:c3:00:6b:9a:af:e4:
8e:02:c0:c5:c2:08:f1:09:1c:99:48:4d:50:fa:ec:
fd:15:24:7d:af:4c:3e:52:a0:c8:c8:b5:bb:79:a9:
b9:36:6c:40:ba:55:22:be:c9:75:af:34:81:15:7f:
3b:c9:b2:3f:0e:75:33:0a:df:96:86:ac:a5:f2:a4:
75:c1:8f:3e:0e:05:75:62:99:59:28:b3:0e:b0:e1:
84:31:0d:a8:ce:30:05:5a:fc:bf:c6:05:1a:67:ee:
36:9c:af:24:bb:31:7f:e7:89:d1:4d:8c:55:95:95:
b3:d5:0b:b9:d1:19:76:aa:a1:0e:fd:6c:ed:1e:4f:
c7:ac:27:fe:8d:36:2c:8a:5d:06:d3:7d:f3:36:7b:
77:97:c4:04:26:e0:6b:c7:2a:61:fe:65:ef:81:1c:
47:62:09:d6:d6:6f:e2:66:5d:18:cb:cb:e3:c0:e9:
ff:5c:24:17:8f:d3:0d:82:7e:03:9b:99:48:0b:74:
b0:2d:18:6f:17:40:50:75:99:54:3b:44:47:f8:1a:
06:37:32:e7:25:12:7f:7b:ee:37:45:ac:b0:f4:06:
52:5d:c6:e7:c8:d2:36:43:dd:60:1c:47:a7:d8:6a:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:32:B8:28:D7:63:6B:F8:2D:40:B7:B6:04:6D:00:92:7E:56:B8
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e5:98:cf:09:bc:33:d2:41:73:e1:6d:bb:66:d2:7c:25:50:
9a:df:8c:61:fb:06:61:5f:b7:dd:ee:41:86:c1:fe:59:e4:39:
36:5b:dd:a4:c5:a0:cd:5d:5b:16:49:da:35:6a:18:f6:3f:67:
2d:be:83:78:89:47:44:04:f9:fb:55:30:dc:3b:b8:68:ed:0b:
c0:33:60:57:78:c8:0f:c9:a2:4d:51:1d:be:53:11:42:f5:74:
91:fa:2c:96:0b:e9:1f:b5:92:36:7f:ca:ce:dc:c2:95:02:1b:
5c:4e:26:4a:80:ad:e3:44:0a:29:a3:de:60:3a:bb:cf:be:a4:
bc:32:93:67:98:08:34:a1:a4:d6:94:6f:a8:28:ab:4c:3b:dc:
75:38:49:76:12:f9:7c:a6:73:3e:67:3d:82:dd:6a:e2:cd:94:
97:76:b4:5e:f2:b5:b8:de:83:0c:6b:6e:66:e3:5f:98:cf:0f:
87:a2:3a:7f:17:ee:59:62:ca:82:a7:8c:d9:af:08:e4:41:c8:
2b:72:3a:39:25:94:35:b3:03:a6:6a:f3:7c:fa:ee:5d:93:0e:
90:2d:ac:ba:71:5c:a3:c8:07:b4:49:f0:c8:86:88:ea:fd:16:
2a:97:88:81:65:a8:90:5e:ed:6d:bb:94:e0:45:fe:42:5d:f5:
9d:e1:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:51:02 2025 by rpki-client