Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: 0FGqSpgjjlnKuInVPxDz9TmuMMLDoLY9//2Lc3vZdtw=
Subject key identifier: DE:AA:F5:8F:A4:9A:0F:34:F7:B0:FD:CA:36:6B:89:22:2F:86:34:D0
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0198387158D31CA3A8EB14D47CB99C8CF02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 03EA
Signing time: Wed 23 Jul 2025 18:00:09 +0000
Manifest this update: Wed 23 Jul 2025 18:00:09 +0000
Manifest next update: Thu 24 Jul 2025 18:00:09 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: iJQ+XYuGHsWCyFEeRXqtr6JCxbwQ2g0a8JfjqtlxvkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:58:d3:1c:a3:a8:eb:14:d4:7c:b9:9c:8c:f0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jul 23 18:00:09 2025 GMT
Not After : Jul 24 18:00:09 2025 GMT
Subject: CN=deaaf58fa49a0f34f7b0fdca366b89222f8634d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:aa:02:3e:db:b2:74:df:2f:3f:5b:29:11:
cf:2d:e1:f7:97:9b:4b:8e:56:cc:16:aa:0f:3a:e3:
df:7b:51:95:34:e4:32:c0:3b:3f:75:fb:01:d5:59:
8a:f6:32:8f:e4:45:0f:4f:2c:ab:17:89:d5:3c:f0:
b0:d5:a8:2a:00:83:a6:fd:70:18:ed:61:1e:f1:93:
31:51:9c:63:86:46:21:0e:70:1c:a0:26:f2:f2:88:
ad:38:f9:66:12:cf:da:6e:81:7d:2b:75:77:39:90:
03:5c:89:83:0b:47:f7:ed:af:8b:3e:d1:e7:f0:c6:
d1:ea:12:d1:c4:30:4d:5d:6e:0f:7a:b3:ce:5a:d8:
7f:69:82:51:e9:2b:3d:e4:43:df:e2:59:95:d2:e1:
e6:ab:a6:cd:c7:40:18:14:a6:c2:b3:a9:d6:03:50:
fb:71:69:e6:85:43:f1:53:f9:ed:24:38:ea:53:93:
bc:86:f5:46:84:24:6b:11:49:3a:1c:4a:84:75:3d:
07:de:29:8b:33:39:b4:9a:ef:55:5b:07:40:c6:7c:
f1:59:ec:b5:e2:62:d2:b3:0b:57:c2:2c:0a:3b:08:
55:dd:26:a4:92:9f:e9:38:c5:f6:45:90:b3:e0:b8:
ad:eb:b1:78:52:14:ab:cf:a6:a2:99:bc:f5:4e:37:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:F5:8F:A4:9A:0F:34:F7:B0:FD:CA:36:6B:89:22:2F:86:34:D0
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:89:e0:2f:c9:d1:2a:b2:61:88:18:df:09:67:b8:0a:9f:
6d:29:4b:b7:82:8e:f1:63:fc:43:bb:f2:6d:8b:52:9d:9e:1c:
c4:8c:b7:4b:af:fc:a5:72:40:02:2f:13:1b:c9:f9:ae:c5:2d:
ea:fd:68:06:52:91:4c:b8:16:e7:8f:c4:01:f4:4c:59:12:32:
1d:9f:84:30:13:41:1f:95:31:7b:8d:7a:13:b6:91:7b:37:c6:
e6:be:e7:4f:02:e2:0a:24:f6:69:0f:9c:80:80:31:77:86:40:
da:cf:c3:c6:04:99:1a:bf:4f:bc:6d:7a:6a:87:83:21:b6:72:
1d:92:68:4f:4a:f7:83:30:95:9e:12:85:f5:e1:2a:92:83:cb:
40:9e:48:e1:f9:86:f2:8b:a1:00:cd:b5:0f:7d:5a:1d:89:3b:
44:ec:ab:e0:56:bd:9c:a0:5b:bf:ae:66:cb:cf:7c:42:78:b4:
a0:f1:f9:57:3f:6d:da:a3:aa:01:ad:61:c6:30:f6:b5:53:7d:
44:ba:72:ea:69:bf:90:38:fc:58:a1:5e:5b:85:e4:12:6b:e9:
43:f8:70:43:11:3f:d4:ea:67:11:50:ca:bd:d4:c4:81:3d:87:
07:79:29:cd:ca:e4:df:55:40:5a:1a:a2:eb:d5:ff:e7:f0:39:
67:19:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:39:16 2025 by rpki-client