Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: yegYxxFi+oCHI7qLmz6LPBjY6N7Eb5OokLG8ILvthOw=
Subject key identifier: 4C:7E:33:55:4C:5C:1D:AC:83:24:B8:D6:A1:A1:45:94:28:1D:41:68
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 019858344C05C1C4CABF799631881706ADB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 1575
Signing time: Tue 29 Jul 2025 22:01:19 +0000
Manifest this update: Tue 29 Jul 2025 22:01:19 +0000
Manifest next update: Wed 30 Jul 2025 22:01:19 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: SaDEXGqUT4wMWOyOqySa6nG4inVyr8p5jOZx5ah9f2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:34:4c:05:c1:c4:ca:bf:79:96:31:88:17:06:ad:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jul 29 22:01:19 2025 GMT
Not After : Jul 30 22:01:19 2025 GMT
Subject: CN=4c7e33554c5c1dac8324b8d6a1a14594281d4168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:7f:72:14:a5:36:ea:ff:57:e2:ec:4e:8e:
ea:fc:77:5e:18:35:f8:13:19:bf:88:8a:b6:5a:fc:
df:93:2c:6a:97:15:c4:0e:ee:0f:fa:7b:54:d2:ca:
0e:c6:96:6d:a4:9a:7e:2c:63:be:e1:bb:fc:bc:8a:
10:ed:45:ad:8a:43:6c:ea:f8:58:39:7e:7d:d8:2b:
65:1a:ba:ad:dd:8a:c4:8b:8e:e2:e5:5f:fb:94:46:
83:6e:c7:fc:eb:38:15:a1:14:91:6b:a5:be:f3:97:
67:af:1e:43:aa:8a:89:27:cd:9b:2d:2b:9b:b7:15:
8e:9c:19:7d:2e:8f:73:f3:cd:f4:3d:6b:d0:c7:c4:
4c:13:49:21:ff:43:ca:e4:9d:c2:17:20:a5:52:29:
36:0d:7b:32:7a:78:a0:20:bc:13:a2:db:23:2f:07:
10:6c:ce:cf:67:10:a0:88:4a:4f:9e:57:18:a8:3a:
77:b3:f7:14:e9:c5:1b:61:7f:73:cd:b7:27:ef:9f:
36:a2:9a:f5:95:72:b4:df:b9:9e:81:c0:df:f6:fe:
6f:eb:31:54:95:db:e3:be:bb:b2:44:d2:c6:4b:0e:
0a:e1:14:41:ba:0d:b1:d5:f1:15:98:63:9c:92:ce:
a2:72:5d:c7:6d:c6:b4:a3:55:90:77:b5:a5:f0:50:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7E:33:55:4C:5C:1D:AC:83:24:B8:D6:A1:A1:45:94:28:1D:41:68
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d6:86:9f:4d:10:1c:1e:8b:11:9a:b9:57:f3:44:7b:1f:f7:
f4:c9:91:01:89:b6:a3:a5:bf:0d:71:f7:0a:7f:b1:c9:1e:a8:
86:ed:55:dc:e9:6d:5a:34:b5:86:2f:40:f6:9e:78:38:27:d4:
cf:48:e8:a7:41:1d:0e:5c:ee:51:b5:d3:32:62:b1:64:88:ff:
c5:09:bc:77:e7:ae:05:91:1b:8a:d8:6e:7c:33:51:8f:5e:e6:
39:b1:31:93:6b:e7:83:a3:e8:56:e5:5f:e9:3e:61:4b:bb:6a:
4c:32:52:82:26:04:3d:a4:dc:4a:75:02:bb:54:15:a2:59:16:
55:1a:db:bc:55:2c:9c:51:b5:97:77:36:4d:81:6c:71:a7:45:
89:a9:06:28:ad:ec:b3:ea:e8:c1:3d:fa:72:e2:b0:76:2e:ab:
9e:54:df:f4:d4:78:b4:02:13:eb:98:83:67:6e:90:d9:ff:1e:
b1:a3:56:73:a4:2e:63:e3:4b:8c:97:7e:ca:7f:39:c0:c2:be:
29:4d:f0:ad:2c:0d:1c:ce:8c:49:38:5a:ce:ff:c4:a0:f9:1d:
12:ff:7c:cc:20:3d:7a:ac:7f:83:70:eb:ff:7c:a5:c2:cf:57:
f3:8d:95:70:fa:b6:c5:f7:7a:51:c5:0e:64:d5:f6:20:b1:98:
bd:ec:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:53:29 2025 by rpki-client