Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: wfSToYa95bGD9JaMcTUsMJ9n0wLyrqYrmZTTlv/ceCc=
Subject key identifier: 04:54:67:CD:A2:A7:A6:95:F8:25:C9:02:A7:F0:D3:40:6B:D0:D3:9C
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 0198D4A7C07F359DC9FE35C3CE12490A393F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:20 +0000
Manifest this update: Sat 23 Aug 2025 02:00:20 +0000
Manifest next update: Sun 24 Aug 2025 02:00:20 +0000
Files and hashes: 1: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (hash: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=)
2: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: NzVchVgzexGrlZ68uUBmbl15d7ukMVQXG+5uRAz1nOI=)
3: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c0:7f:35:9d:c9:fe:35:c3:ce:12:49:0a:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Aug 23 02:00:20 2025 GMT
Not After : Aug 24 02:00:20 2025 GMT
Subject: CN=045467cda2a7a695f825c902a7f0d3406bd0d39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:94:2a:a0:c4:00:b8:df:1c:58:48:dc:cf:
5b:bc:19:df:2b:e6:2a:cc:de:22:42:0d:6e:f8:ee:
ac:29:49:94:d3:05:ca:d3:e7:95:d7:a6:fd:d3:74:
f9:53:18:27:ec:ea:2b:e2:0d:2f:9c:84:d2:4a:0f:
b8:7c:1c:5c:e6:dc:c4:13:39:d8:d0:b6:6a:d2:67:
38:1d:7a:8d:dd:83:1f:4c:f8:11:5f:b3:58:bf:d7:
b7:65:9d:9e:2e:05:a2:16:be:4e:54:ce:5c:a9:ce:
aa:a6:8a:cf:12:fb:72:91:94:94:b2:3f:79:8d:f6:
25:09:84:be:80:5f:d9:e9:46:18:2e:07:a9:84:02:
77:87:06:b1:21:4d:3b:38:8f:05:e1:fc:b3:70:02:
82:b4:af:49:81:26:54:95:d4:65:3e:35:e8:b3:df:
05:83:e3:63:04:4b:f2:db:ea:e3:1b:ab:e3:0c:ab:
70:4a:a3:c4:71:61:ad:26:ce:df:fc:41:69:d6:3e:
f2:5f:a3:6b:bb:27:0d:50:c8:4d:f5:2e:18:b0:9f:
c5:da:0c:c7:a1:0d:40:54:e9:b1:1b:70:e1:63:ae:
8f:a7:9f:fb:a8:85:ab:3c:bd:91:c2:f8:8d:51:0b:
f2:30:9e:08:78:23:11:90:87:46:d4:42:68:7c:5a:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:67:CD:A2:A7:A6:95:F8:25:C9:02:A7:F0:D3:40:6B:D0:D3:9C
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d4:67:1d:45:70:cd:29:f1:90:ca:65:01:65:1d:c4:38:dd:
e6:e0:0b:0e:2e:a3:b4:ab:94:9a:6f:d9:ce:f5:80:03:92:44:
ae:ef:e5:76:88:70:2a:e0:f7:39:fa:3b:fb:d0:73:38:d7:ad:
dd:48:61:f9:4a:70:56:78:1b:51:78:41:98:14:69:86:a6:fb:
e6:54:e9:39:c6:ac:80:41:78:b7:4a:66:75:d2:d5:a0:50:61:
48:76:21:ea:43:0c:be:15:bf:31:05:cd:b6:b4:a4:4e:5f:36:
a4:a6:c5:66:9c:d9:e7:ec:9b:0c:d2:33:43:82:ac:54:a2:10:
70:96:43:49:b1:ca:36:a5:70:9a:5e:95:9c:b0:50:d9:05:e4:
ae:1a:c9:9d:22:6c:27:ba:d1:0b:58:55:46:4b:26:3a:3a:c9:
ac:31:66:98:9d:04:2c:4d:78:eb:83:c9:f7:49:41:d3:0a:4c:
ba:ef:4b:cb:38:0a:66:1a:23:24:6f:bb:8a:40:20:53:af:16:
7d:d1:59:54:40:99:2d:98:5a:5e:92:11:13:0e:7c:21:ea:5b:
02:60:b5:fb:ce:e9:95:d7:28:8b:34:6c:90:1c:0f:ac:7d:ac:
a7:e7:81:76:c6:b5:1d:ad:e7:36:48:fc:c3:2c:66:61:ee:a3:
ee:3a:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:39 2025 by rpki-client