Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: meUhPrudZHhbKS72kGowxjpXlI9rLATdJIPCzCb/+TE=
Subject key identifier: FA:69:8B:A0:6B:34:78:D3:1A:23:2C:09:97:D2:69:68:9C:0B:B4:30
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0197C9F1B366E858D1AF5F1C62C2B92AB225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0889
Signing time: Wed 02 Jul 2025 07:02:29 +0000
Manifest this update: Wed 02 Jul 2025 07:02:29 +0000
Manifest next update: Thu 03 Jul 2025 07:02:29 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: LKuCDcyUFfG1I2YEwbP9EizI46Sc0nqWrAeL9N3NVIo=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:b3:66:e8:58:d1:af:5f:1c:62:c2:b9:2a:b2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jul 2 07:02:29 2025 GMT
Not After : Jul 3 07:02:29 2025 GMT
Subject: CN=fa698ba06b3478d31a232c0997d269689c0bb430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:49:8e:03:7a:95:af:ca:d8:4c:65:46:17:
c8:ed:eb:aa:71:37:22:d9:91:9c:57:36:56:eb:69:
26:68:20:1a:eb:cc:99:74:44:50:8e:66:30:ea:88:
50:ab:19:dd:1e:b5:1a:e1:fd:20:92:4c:d2:33:f3:
ed:15:b3:3a:f6:d6:5d:c5:96:a4:3b:e0:05:d5:f1:
77:fc:ac:ae:b5:ff:0f:0e:00:05:87:e2:3d:46:76:
c0:94:66:44:04:a8:a5:31:5e:a8:a8:d8:89:64:f1:
de:37:28:9c:48:93:76:2f:2f:13:f2:6f:00:7c:39:
a6:ec:bc:88:02:dd:30:fe:0b:58:69:16:8a:dc:d8:
b1:be:00:cc:64:38:34:57:ab:44:ef:86:90:3c:2d:
e2:ee:b3:bb:83:03:0b:67:4f:f8:d0:2c:2e:96:9e:
a9:2e:ea:27:14:14:3b:9c:bc:fe:36:6f:ae:ad:1f:
7f:6b:57:55:a8:c0:18:07:43:e0:4b:ef:30:36:f4:
d1:62:26:0b:2d:d6:2a:34:85:3b:c4:93:5a:78:f1:
e2:ff:eb:3e:b7:65:f9:d0:56:a7:8d:91:c8:f7:0b:
b4:3d:b3:07:24:f9:86:1e:be:67:1a:32:be:50:7e:
17:8a:b1:6a:e2:57:a9:09:c0:35:3f:cc:61:69:ed:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:69:8B:A0:6B:34:78:D3:1A:23:2C:09:97:D2:69:68:9C:0B:B4:30
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e5:23:7d:34:66:46:f5:1f:fe:4f:f1:48:58:85:fb:95:a2:
53:42:82:61:ea:ff:99:40:24:a7:57:e9:10:a3:5e:e6:c5:d6:
77:be:a2:14:74:3e:1a:a8:ea:f2:36:37:11:63:be:81:13:11:
97:c4:11:d9:2c:ef:08:87:78:00:28:2f:ac:87:b2:75:13:5b:
11:d5:ed:e9:83:ad:ef:5f:93:f8:bc:51:c9:ee:d2:8d:c4:af:
3c:13:92:99:12:ea:db:f5:f9:04:30:03:eb:0a:55:1a:ea:12:
a6:7f:dd:95:03:31:f8:9f:32:b2:1f:50:02:5a:92:9e:2f:02:
fe:a9:94:5a:6f:5a:15:e4:38:1e:1c:a1:aa:f8:70:58:24:b4:
45:df:65:a9:6f:f0:a0:97:2e:85:67:9b:90:f2:72:2d:bf:5d:
f2:0e:e9:f5:4d:c6:06:1e:e7:6d:6f:4d:9e:0a:49:3c:18:32:
b6:bf:0f:b0:5f:5f:7f:e3:e4:8c:7f:86:78:6c:f4:04:59:3e:
5f:4f:68:b1:63:80:8c:33:5a:72:d8:fc:d2:ab:fd:4c:73:a1:
25:fb:ff:c7:22:3e:7b:4f:c4:4f:65:63:76:13:3f:cd:c6:d6:
0e:4b:c2:61:a7:99:88:25:cf:24:37:03:c5:a7:e0:68:9e:1a:
9f:e0:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:06:59 2025 by rpki-client