Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: cdWob6Up0cut3TjNDidcgf+hFm4TjloiLNc/cy/7cUE=
Subject key identifier: 8E:CA:AA:38:C0:30:6D:E8:9E:3A:42:26:F4:96:02:48:CF:36:7C:E4
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 0198D65FC89CFA921724D08688F62C1A5DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: Z37vvhJaQQ6w+zUX5fL/RVwn5NEpVpJu0ncOkqvsfCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c8:9c:fa:92:17:24:d0:86:88:f6:2c:1a:5d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=8ecaaa38c0306de89e3a4226f4960248cf367ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:3c:74:87:4b:ea:21:a9:09:a4:66:3d:47:
d8:78:3d:86:25:38:2d:2d:68:39:67:4d:b4:3c:fb:
ab:e2:4d:ba:6e:88:71:0b:af:f6:f9:65:ea:13:c5:
04:0c:f3:8d:96:a7:e3:38:3c:7c:92:eb:3d:10:fc:
2b:a7:8f:dc:df:3b:e2:43:37:f6:1c:fc:85:2b:db:
82:1b:01:13:ad:79:43:33:6c:1f:4a:96:72:04:29:
93:35:3f:7f:0c:73:43:90:e4:18:1d:9a:34:b7:0f:
5b:54:84:ce:f4:de:26:2c:a9:d9:08:98:9e:67:32:
e4:15:04:8b:bc:43:f4:6f:e0:01:00:cb:a8:bc:b8:
66:23:48:af:f8:11:c8:a7:97:ca:fb:77:50:1e:ea:
13:6c:14:3f:de:0d:75:e5:c2:c0:13:7a:36:8e:d1:
7f:03:6d:64:ca:41:01:a7:8c:0e:40:bf:10:fd:04:
25:05:f9:c1:76:1b:91:b2:0c:39:03:c6:56:e3:a6:
03:fd:65:38:d2:41:5b:d2:e7:83:bb:64:38:3c:91:
08:6f:45:48:67:b6:d7:c2:aa:38:2e:72:4b:e9:6d:
6c:dd:2c:a5:12:c7:8f:ef:ee:86:ef:bc:73:6f:1b:
92:74:7b:62:42:2d:9e:30:22:99:82:eb:63:e6:cf:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CA:AA:38:C0:30:6D:E8:9E:3A:42:26:F4:96:02:48:CF:36:7C:E4
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:4b:f7:eb:20:14:46:5d:eb:3c:9a:ec:14:b2:c6:73:ae:
23:59:a5:42:22:85:91:9a:4f:4c:62:c5:cc:d6:15:23:12:f1:
e4:ea:bf:5e:3e:33:5f:60:a9:ee:2d:5e:1b:e9:d8:af:38:98:
b1:a8:5a:a5:10:80:fa:ab:81:b1:9f:76:80:b4:66:af:3d:dc:
ff:9b:29:7d:29:90:f0:50:37:d5:80:b2:50:57:b9:ef:c5:90:
d7:9d:dc:54:9e:e6:7e:14:07:6b:13:d2:98:71:a5:fb:9d:e3:
bc:78:60:47:c4:18:7a:d2:fa:42:fb:86:8d:a4:6e:14:c9:ed:
96:ab:84:33:29:92:0c:38:20:35:db:aa:4d:2f:6e:29:c4:13:
00:ff:22:9b:fa:3b:82:4a:53:cd:df:cb:ae:03:8e:1b:9c:e7:
0c:c1:74:a2:33:da:32:ba:27:ab:5e:65:b6:f1:b7:54:f9:da:
09:20:7d:5d:39:bb:ad:ec:cb:3e:24:94:03:8b:ed:76:02:59:
30:a4:74:75:24:ed:74:dc:3b:c4:b4:2f:f6:f6:ed:49:51:29:
58:ba:8f:5f:6c:10:97:57:2e:cf:00:f1:97:33:ba:0b:1c:6b:
09:16:b2:70:01:64:29:0d:91:43:55:6a:ab:af:30:ef:1f:eb:
2f:09:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:30 2025 by rpki-client