Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier: 0pLenIdz0COXlHu2JQ4w39dz2zwJXTKGrPRFHSZWphE=
Subject key identifier: E8:F2:69:2E:16:9D:D5:07:89:61:8F:A3:CC:EA:A6:FD:71:4A:00:A6
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 0198D5BBAF9DE7213B5E57715D8C63AB4CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: 0l0FRi1gOGd0TS4FZSN0Y79Cp9A.roa (hash: 86dCUtTfvoVch56QFLTlRl27DwnhOkUYBn6k7s/V1lA=)
2: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
3: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
4: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: fQz0I2gNaA4ArSU9S+YXFOT05suW7+P/WBOJ+HWT7dg=)
6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:af:9d:e7:21:3b:5e:57:71:5d:8c:63:ab:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=e8f2692e169dd50789618fa3cceaa6fd714a00a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:72:58:d5:2e:1c:1a:bd:27:5f:7b:04:8d:
5a:5c:b8:bf:67:07:8e:91:83:26:af:53:f8:a6:d0:
8d:6a:d4:cb:94:42:2d:a2:6e:21:a8:54:26:a4:99:
44:7b:4e:96:07:97:d1:b1:52:db:4c:59:df:4d:d8:
9e:aa:79:56:b6:f9:2b:c1:d1:44:08:21:be:59:21:
f3:9b:7e:86:ec:44:82:9d:b4:36:4e:0c:cb:91:db:
12:6b:32:a3:47:f0:ef:0e:af:95:c3:f0:e9:c0:44:
8c:5a:18:fe:90:0d:73:ea:ee:5d:85:ca:bf:0e:a8:
d1:90:52:4a:ff:d5:10:40:f1:65:68:7a:6f:ca:28:
6d:9e:e0:a2:cb:3d:b2:aa:33:5f:5f:c1:7c:d0:55:
b4:b5:fe:48:58:d4:6b:5e:d2:ed:64:65:bf:6f:83:
7a:32:ab:06:6f:71:1c:55:8f:ac:8a:4f:78:a9:51:
71:4b:0b:b1:a9:43:4a:d2:db:6c:f4:6d:a0:18:59:
a4:29:b7:d6:f6:38:30:b5:46:59:79:71:7f:27:64:
23:03:49:68:91:cc:e0:38:c8:a3:68:5d:da:72:76:
80:5c:4c:53:77:37:a1:d7:93:76:ed:29:a4:70:03:
79:63:f7:6f:fb:b9:e2:f3:3d:f8:3a:d0:01:8f:31:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:69:2E:16:9D:D5:07:89:61:8F:A3:CC:EA:A6:FD:71:4A:00:A6
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:75:bd:73:8e:a9:ba:fa:d7:f6:88:4c:91:77:e5:8e:27:
c5:d2:11:5b:f7:18:48:79:94:69:62:93:73:0e:40:0b:88:4e:
37:81:d5:cb:a6:39:d9:03:0a:a3:db:b3:a6:92:b1:e1:b1:81:
85:c2:c8:70:b0:5c:d4:7f:17:7b:f4:47:4c:07:d1:da:08:78:
20:2d:81:d4:38:fe:31:2d:f0:e7:83:c6:42:0c:6c:55:85:ae:
50:41:1c:aa:b1:df:20:10:c6:5e:62:44:fa:0e:39:ae:b8:49:
44:41:a6:aa:6b:1c:02:64:f8:ed:df:ff:b9:42:6d:57:7d:00:
0d:5d:a0:04:0e:33:53:31:8f:bf:f5:17:36:59:a5:d9:a1:41:
91:7c:1d:c2:53:f1:29:1d:8a:0b:ba:2c:3e:42:b0:55:32:e4:
b5:2b:8f:85:19:dc:39:86:a5:a9:19:c8:26:95:60:dc:b8:de:
b7:c3:2c:1c:74:4f:98:96:06:b4:6d:dc:9c:30:94:e4:f4:88:
eb:fa:aa:f9:a8:e4:45:e6:6f:88:a5:1b:ba:90:2b:aa:0c:d5:
bf:05:86:da:9b:d7:d1:dc:d7:55:4e:e0:4d:81:bd:39:30:03:
a9:42:cb:28:b0:32:cb:a3:6f:35:18:e9:88:79:7e:c0:b3:20:
52:08:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:52 2025 by rpki-client