Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: iQtD6ny/Zy2NvC+5thji1a80C9UIcKSu+wjkXdlk6kM=
Subject key identifier: 38:F9:C7:67:F0:E4:F5:4D:74:E5:DE:D1:C5:F7:06:6D:AD:A3:B8:F8
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 0198D92B4E238071DE76D400BED1F847D2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 23:02:30 +0000
Manifest this update: Sat 23 Aug 2025 23:02:30 +0000
Manifest next update: Sun 24 Aug 2025 23:02:30 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: hutOeqF9L7qdFwKr7xFpHNfSPO1bawn0J5glgI2H/Es=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:4e:23:80:71:de:76:d4:00:be:d1:f8:47:d2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Aug 23 23:02:30 2025 GMT
Not After : Aug 24 23:02:30 2025 GMT
Subject: CN=38f9c767f0e4f54d74e5ded1c5f7066dada3b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:ab:62:a2:03:d1:1b:ca:0e:e7:6c:1b:74:
2b:95:bb:7e:9b:25:34:76:63:79:cc:64:27:ad:6e:
87:0f:06:a4:66:25:21:0c:18:7b:bf:c8:64:d0:26:
00:dc:47:8a:76:ff:c4:52:04:e0:66:bd:07:82:0a:
13:ae:b1:0b:fc:a8:6f:78:df:0c:99:c1:68:e1:b5:
c5:84:10:ac:62:89:19:70:e7:26:74:de:d1:ce:d6:
59:5f:90:b2:bc:f1:42:fa:59:a7:b4:3f:70:e6:ca:
46:a0:38:d2:fe:e6:67:f5:6e:ec:0b:e0:9a:51:c9:
ed:3a:15:da:e4:04:60:6b:e8:a6:83:4b:c7:a1:ae:
d6:42:c7:fb:4d:64:d0:78:9b:b6:1d:6b:5c:4d:8b:
b0:c5:00:80:bc:da:2f:fd:e6:57:51:91:4b:6a:cf:
dc:b8:9c:6c:b9:6a:40:21:0e:54:cc:6d:f9:a5:ff:
c1:86:b1:3b:0c:c0:b4:c5:09:a6:0f:35:a2:0b:d1:
09:7d:1b:7f:f5:1d:29:2c:e6:4a:8c:c4:1c:16:07:
c5:54:e9:be:41:b4:5b:7a:b2:32:0a:96:f4:da:18:
3d:5c:68:ea:6b:8f:4d:8c:80:5a:03:a4:cd:af:cb:
ed:76:d4:8c:dd:8f:15:f9:9e:ba:09:07:f2:ec:c7:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F9:C7:67:F0:E4:F5:4D:74:E5:DE:D1:C5:F7:06:6D:AD:A3:B8:F8
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:2b:97:08:61:1a:2e:43:1e:5b:1e:64:75:cf:be:ed:12:
30:7c:eb:06:66:64:83:ce:0c:d2:7d:ad:e4:e2:d5:55:c1:8a:
f2:b0:98:fb:f6:bf:20:f6:5b:d4:57:3d:e0:b9:36:d0:32:6e:
45:d6:fa:25:50:1a:ed:14:bd:71:8e:89:cd:03:b0:70:24:8f:
f0:89:e2:09:60:15:72:a0:5c:39:1d:08:12:cc:3b:b1:41:f0:
7d:00:cb:3d:59:f4:ee:50:59:b0:74:d8:d8:c5:a7:cc:cd:6f:
26:31:fa:bf:03:2a:70:72:d0:fc:77:d2:bf:81:5b:6a:1b:a0:
03:b4:8b:fe:ef:1b:35:b2:21:17:23:00:59:6f:3b:a8:9e:2a:
ca:19:21:f1:4e:dc:3f:26:87:64:e8:b2:bb:a3:a0:12:06:fa:
74:f0:af:8c:6d:a5:cf:ef:9f:1e:3b:a1:cf:9d:06:8d:14:fa:
23:ef:32:a7:b4:41:ec:96:65:67:f1:b6:07:ab:e4:e1:b7:70:
74:e2:73:e7:01:1a:db:ab:37:c0:e7:16:f7:7f:6a:05:68:78:
89:d5:ea:53:4f:5b:d5:14:75:0d:da:eb:d7:70:de:05:d5:84:
49:fc:ff:45:ab:19:78:37:c4:d8:26:3a:5e:bf:35:80:11:d8:
4f:86:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:29:59 2025 by rpki-client