Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File: XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier: HIsFfMJ1DalIX/2zdnoqqDN+SnjSFTAJPJ7V4BMvoVQ=
Subject key identifier: 60:10:85:A5:27:CF:B8:09:4E:79:22:8B:54:BD:5B:14:95:A4:79:B2
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 01984966BB42683CE9F0DD7DDBEA3A533DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:02:06 +0000
Manifest this update: Sun 27 Jul 2025 01:02:06 +0000
Manifest next update: Mon 28 Jul 2025 01:02:06 +0000
Files and hashes: 1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: ZwSqfMrPiuyQwY4/hQeVsOZn34g57jYXAjX/L3UNOOg=)
2: jcQt-MOzJfjybIamiUioFB-oBn4.roa (hash: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:bb:42:68:3c:e9:f0:dd:7d:db:ea:3a:53:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Jul 27 01:02:06 2025 GMT
Not After : Jul 28 01:02:06 2025 GMT
Subject: CN=601085a527cfb8094e79228b54bd5b1495a479b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:af:50:9c:55:e2:4c:c6:9d:5c:5b:7a:8e:
9a:91:d4:31:7b:17:87:69:58:ae:86:36:52:99:63:
74:1e:38:98:3c:40:c2:51:f4:54:35:23:ec:9d:e9:
b9:74:9f:e9:31:16:ae:01:68:7c:61:15:3f:f1:87:
b6:31:61:8d:61:4d:6d:02:43:90:a9:56:9f:b5:17:
db:de:5b:41:99:41:cb:62:dc:e3:f2:6c:1d:4e:4e:
c5:ed:ca:f7:7d:9a:85:34:f9:1b:24:8b:e3:eb:32:
77:65:2d:3d:e4:51:05:db:85:b3:fa:be:4b:54:7f:
af:4d:7e:23:f3:31:d4:9b:54:b9:a7:15:a5:6f:4b:
ff:ac:05:05:15:4a:ac:7d:c1:08:ea:9b:cf:2e:a8:
f7:f3:0d:61:9d:7b:64:b9:b6:54:35:e1:4b:b9:0d:
f5:67:e1:1f:8a:e2:6f:a1:6b:f2:ba:7f:b9:ac:b0:
a1:61:19:7f:92:8c:89:c0:38:3b:ae:33:9e:c2:50:
62:b8:8b:1b:9c:4b:34:87:83:f5:ea:de:c8:bf:cc:
74:58:cb:6f:86:85:94:1e:2c:aa:57:bb:0f:c6:eb:
64:c3:7e:0c:63:50:40:28:91:77:e3:1d:72:5e:b4:
7c:c2:bb:0d:2b:e6:dd:a1:a9:d0:d6:c0:4b:58:b8:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:85:A5:27:CF:B8:09:4E:79:22:8B:54:BD:5B:14:95:A4:79:B2
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1b:73:cb:6a:38:ab:ce:fb:48:4b:2f:9b:8c:66:b2:36:dd:
bf:29:43:98:ea:0f:e2:2b:ea:49:d5:11:02:68:5d:dc:0f:f3:
19:c7:26:65:16:54:38:c3:fc:5f:8a:98:49:3e:15:86:cc:aa:
d4:67:18:0f:5e:4f:1d:9b:be:9e:68:29:ec:2e:6f:5b:5b:61:
7c:a6:5e:86:75:0f:98:62:9e:a2:ba:63:60:ea:f2:35:6e:a9:
bc:ec:e4:ac:83:b1:5d:8a:34:27:0f:f5:9c:b0:03:1b:56:a4:
bf:af:3e:33:14:56:45:ad:9b:c4:e4:d5:35:10:ab:9c:dd:1b:
7a:18:3d:59:b3:86:b4:71:48:7b:de:b1:3b:d1:4e:a4:16:5a:
b9:2a:65:2e:7a:d3:2d:aa:22:f1:49:dc:73:be:37:65:d8:0d:
44:ea:0e:b0:c5:13:02:dd:8d:5a:b4:de:38:57:e1:63:b9:80:
6e:01:30:c2:9c:c6:4e:bb:ea:4e:cf:94:1b:74:e7:52:eb:5d:
62:d3:b2:dd:13:64:1e:1c:54:e6:1d:a6:04:c0:10:3d:95:8c:
b4:27:63:be:e6:d4:fe:e1:f3:16:fb:e0:50:2b:b5:ce:c3:3d:
c0:93:71:5d:fd:8e:d1:53:36:09:b6:5e:d4:9d:cc:49:6e:aa:
e8:9e:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:47:36 2025 by rpki-client