Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier: dEI1/ED3CP7vad3Qb8TXpX/J+DxchrppBnMGgqa+Ms4=
Subject key identifier: 9B:24:30:19:19:5B:EE:AD:D4:BE:C5:0E:A6:AE:B1:97:AE:85:B2:A0
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial: 0197B745BBB45F2A59C819FE2311E2BAF9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number: 88
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (hash: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=)
2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: H+OnK61kDC8JjjFlFPZKL4al53r+t18HLGz0VXYY7Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bb:b4:5f:2a:59:c8:19:fe:23:11:e2:ba:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=9b243019195beeadd4bec50ea6aeb197ae85b2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:f6:95:0f:b7:a7:3c:99:fa:f3:66:b9:21:
c5:ad:fe:b6:2a:e4:14:16:42:89:8a:34:3a:a1:9e:
91:59:63:bd:c2:74:f0:b6:e9:ed:d9:ad:a6:cc:99:
51:20:bd:d6:0d:1d:e6:6e:09:1b:d5:8f:a5:ba:2d:
5c:41:71:8f:e3:9e:5e:76:d3:68:74:d1:f9:bd:d7:
d5:e3:b4:22:96:69:89:b6:40:29:ac:12:02:c4:ea:
7c:9b:39:56:3e:88:45:22:fb:de:59:a6:b9:e0:74:
b5:91:22:a5:fb:ee:4a:37:2d:27:e9:f1:b3:ac:5e:
c3:cd:22:6d:57:07:50:d9:70:0f:88:93:67:69:c2:
95:a9:9f:0c:d0:98:cf:56:45:45:74:a8:11:89:9a:
e2:fc:09:57:df:5c:d2:de:16:40:84:df:ff:2a:04:
ce:e8:03:8e:44:4f:d5:3e:14:f4:7c:41:aa:ea:4c:
46:77:da:ba:10:67:52:b2:b8:c1:d3:7e:99:fd:83:
0a:4e:32:af:ca:30:6c:90:e8:35:fb:1f:44:3a:fe:
33:66:17:c3:9b:e1:a4:59:45:08:79:6d:e6:eb:df:
f6:89:5d:68:5a:5e:4b:d8:67:d0:e6:84:e0:d9:db:
f1:5c:6a:85:45:4c:16:6c:84:11:24:b0:92:2b:aa:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:30:19:19:5B:EE:AD:D4:BE:C5:0E:A6:AE:B1:97:AE:85:B2:A0
X509v3 Authority Key Identifier:
keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:84:65:48:f6:e4:3d:27:ee:b8:c7:df:35:6c:da:e1:28:
04:0f:fd:cb:07:bb:5a:a3:fa:c1:22:a4:87:d6:cd:e3:68:1c:
33:c8:55:26:2d:50:92:67:11:d2:10:3f:de:60:cc:f3:65:19:
8a:c9:c5:b6:28:70:74:58:24:4d:3a:82:03:30:10:f2:f4:d8:
a1:46:f4:2c:9d:f3:d2:03:cb:d8:b2:38:22:05:fe:f9:15:de:
03:b9:e4:b5:c8:4f:48:e4:0c:05:6a:26:7b:e1:9e:23:6e:20:
2a:7e:57:52:50:76:da:dc:0e:f7:19:52:34:ac:88:ec:4c:e2:
28:f4:e7:e8:bd:ab:73:f4:de:f4:f2:79:eb:73:df:58:69:26:
f5:10:6b:f6:2d:10:33:65:ae:96:13:88:51:a0:51:b6:af:2b:
8e:71:d1:32:24:29:8e:a7:a1:1e:1a:1d:3a:45:9e:64:28:29:
74:dc:62:1d:2f:11:54:5c:6d:3c:12:f4:2a:6b:9d:44:59:4d:
34:00:36:c8:0b:0f:30:55:0b:3d:de:af:13:f0:76:fd:3d:d5:
f3:70:13:37:45:d1:e2:77:a2:d0:c8:96:d4:3f:c2:67:fa:e6:
a2:a6:68:90:e9:8f:82:49:cd:4d:a5:92:e4:f5:2a:90:9c:7a:
62:8a:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:57 2025 by rpki-client