Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: TtRNN3K1OL2Mv6LQRj7iHeC0Netvd2UFEJKWFaEdUMk=
Subject key identifier: 9D:2E:10:45:D6:B4:AA:AF:8E:EC:9C:D6:08:4A:51:2E:8B:61:D1:8E
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0198D4744C782A10928EF6DE5A172C72CB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:04:08 +0000
Manifest this update: Sat 23 Aug 2025 01:04:08 +0000
Manifest next update: Sun 24 Aug 2025 01:04:08 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: wCuthb1n0cDCDS0vCiTrGU3UDiUEbRIOLfobEwK0imU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:4c:78:2a:10:92:8e:f6:de:5a:17:2c:72:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Aug 23 01:04:08 2025 GMT
Not After : Aug 24 01:04:08 2025 GMT
Subject: CN=9d2e1045d6b4aaaf8eec9cd6084a512e8b61d18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:6c:67:a4:7a:3d:8d:5a:c4:6f:d5:62:71:
9a:58:1c:ef:43:c9:91:77:e3:ee:53:bd:46:f3:58:
9d:4a:f4:16:04:fd:23:2e:b4:c4:c1:9e:69:ba:f8:
48:30:2a:f9:77:09:60:df:35:16:01:27:47:04:bf:
05:60:90:8e:8e:d0:e4:f5:84:37:9a:77:c0:f3:f9:
fb:44:fd:7c:07:b3:a2:93:ec:ac:fb:70:c4:e5:05:
15:b7:02:5f:99:67:43:40:ef:44:75:f8:eb:1e:e2:
72:08:a1:14:f8:da:28:b3:f7:e3:db:dd:89:51:0f:
54:85:e7:eb:4b:99:04:e9:de:e9:14:6c:7a:ad:a5:
5b:89:81:b9:52:b9:4f:0f:8e:e9:cc:94:a2:79:5c:
10:2c:6b:a2:ac:41:81:23:8a:4a:ce:ad:0e:02:5f:
a7:ba:e8:03:db:48:8d:c7:e9:1e:64:45:6d:cd:b0:
e3:87:36:43:61:4d:55:1f:52:c5:12:a3:4c:b0:b0:
e3:ff:9e:05:73:b0:38:77:2b:a2:0d:c7:63:8b:78:
43:b5:ca:ca:5c:65:c4:3b:02:7f:ee:b5:35:b4:0b:
29:97:40:f9:ca:56:21:d2:6a:19:bb:4c:87:b1:9a:
16:e9:33:c6:15:12:97:30:0f:31:bb:c1:5f:56:96:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:10:45:D6:B4:AA:AF:8E:EC:9C:D6:08:4A:51:2E:8B:61:D1:8E
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5c:b8:f2:d4:94:0c:6d:5f:74:b4:40:7e:fd:9a:27:69:a2:
8b:57:c4:ea:4f:20:fa:9f:bb:0c:a9:e0:05:f2:bc:98:93:1b:
af:e3:ef:63:cd:cd:1e:aa:5e:a1:8d:64:b0:ab:24:ae:24:50:
f1:fe:c7:6f:c1:96:aa:62:7d:d3:bc:bd:43:b0:16:62:8c:c5:
2b:31:22:cb:10:c2:52:07:64:0a:0c:61:d4:ff:dc:89:c4:46:
dc:1a:22:89:5d:5e:6a:d8:a6:bb:59:a0:1f:2b:b8:86:33:ee:
1d:95:ff:51:20:a3:ce:78:9e:0e:a3:33:a3:d6:c6:32:79:67:
f5:52:7c:82:24:95:b0:18:2c:e4:1c:ac:53:5a:eb:4a:1b:81:
fa:47:b4:22:ca:da:4b:70:2d:5d:29:55:a8:e2:bb:35:c5:40:
c0:fd:88:d9:61:c3:b7:fa:97:39:6e:9d:a9:1b:d6:58:1c:e1:
d8:9c:05:bd:46:50:54:ed:41:5f:cf:d2:ea:8f:0f:31:12:8f:
fd:cf:b5:84:a4:4b:97:96:79:4c:31:c1:78:2c:7a:e4:66:a0:
a8:01:06:fc:09:d3:e3:d4:6b:c9:30:7d:d0:e8:46:42:b2:19:
ac:c6:9d:9a:1b:7e:aa:3f:bc:b3:0a:69:a4:ae:ac:7a:1a:5a:
24:a2:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:45 2025 by rpki-client