Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: hHs/DfXKrjD1b95uD7UWfFqLfCY0vAWJuem+C1nKDtE=
Subject key identifier: 4D:E1:C7:B5:D1:B2:7D:A4:12:37:AE:BA:A1:57:A9:52:26:02:DA:12
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0198C5003D332AC35F89CBDFF33E72854DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 090B
Signing time: Wed 20 Aug 2025 01:03:03 +0000
Manifest this update: Wed 20 Aug 2025 01:03:03 +0000
Manifest next update: Thu 21 Aug 2025 01:03:03 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: X8Srkw51IQy+hktDjd/pFJg8l1pL0mZCDRWujwRymZ8=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 01:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:00:3d:33:2a:c3:5f:89:cb:df:f3:3e:72:85:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Aug 20 01:03:03 2025 GMT
Not After : Aug 21 01:03:03 2025 GMT
Subject: CN=4de1c7b5d1b27da41237aebaa157a9522602da12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:4f:a2:0f:54:74:7e:48:6f:92:9f:33:1e:
cb:74:6b:2c:4a:52:87:e1:33:45:d7:1b:72:c8:8d:
d7:cf:80:01:03:30:60:45:26:e4:b9:81:e6:aa:77:
98:26:15:68:61:b0:c4:be:0c:a4:09:98:ef:66:ad:
77:00:0a:35:c0:65:43:e1:1d:82:7d:c3:2f:99:d2:
9a:92:2c:21:5e:68:d5:2a:cf:cb:52:2d:7c:39:92:
8d:29:c0:7e:ef:90:02:f1:15:81:3e:b7:6d:6a:67:
75:87:b2:12:32:19:32:33:f7:19:1b:a6:f2:c2:46:
c1:f3:c4:1a:40:07:65:f5:f5:a3:4a:0b:7e:3e:8a:
71:14:1a:99:d7:85:7f:4f:51:fb:86:33:be:75:ae:
62:18:c9:14:78:45:e7:e3:60:fb:c6:b2:6e:ce:eb:
a1:53:3d:a7:a5:19:1c:bd:7c:54:20:20:ad:0c:b3:
cc:0e:7f:f1:73:d0:4a:cc:7b:42:14:7b:b9:6f:dc:
1e:b1:b0:02:6f:ac:26:5b:5c:c4:11:7a:a7:e1:33:
f6:20:0b:98:4c:4a:81:f7:f6:7f:2a:b5:8c:62:36:
54:61:ec:01:ed:e9:73:07:8c:a8:43:1d:4a:db:3c:
5d:2b:db:db:5d:29:f0:00:d3:53:35:4e:18:bc:35:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:C7:B5:D1:B2:7D:A4:12:37:AE:BA:A1:57:A9:52:26:02:DA:12
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e1:19:4a:c5:7c:97:a4:d4:61:b9:e0:f9:04:a5:ce:c6:21:
d1:76:7a:52:20:90:a3:0a:2a:0d:f5:75:63:1b:5c:fa:39:ac:
0b:31:0e:1a:f2:f3:e5:c4:ea:04:b5:08:67:b9:64:a3:9c:37:
54:18:d6:7d:9c:a6:45:15:0d:fa:21:44:71:7c:70:98:2e:7d:
95:4a:ee:52:b5:36:9b:11:4b:ab:54:08:6d:d5:f5:63:91:45:
37:37:e8:c9:44:ef:d1:66:a9:86:de:ae:b9:d6:17:0a:a6:fd:
8e:40:45:2c:ea:56:79:20:50:8a:a9:d8:55:2d:9a:26:ba:30:
a1:cc:a3:46:bc:52:e9:4a:90:4c:59:0b:06:ca:4f:d1:e2:6a:
c5:67:b1:00:10:c6:b9:e9:89:b2:2b:cf:e5:87:02:25:d5:7e:
6d:14:19:3e:04:ca:0a:93:c7:08:c4:68:39:18:ee:54:91:85:
de:af:e3:37:36:d7:c2:15:49:c0:a0:a5:96:5f:44:15:f2:83:
f9:a6:3e:a6:30:d2:a4:93:50:e4:ff:99:b0:f7:9c:7c:d8:31:
0a:27:01:d3:84:d7:7a:f5:d5:bc:b7:43:51:5d:e9:07:7a:d5:
67:7a:29:2a:9d:c5:01:0f:57:ba:7b:74:e3:08:fc:4c:5c:d7:
34:4a:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 09:54:52 2025 by rpki-client