Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: ZY+ifrPieml/8/iLguZl4kkHf8OLCDOoc20Km+0FvF8=
Subject key identifier: 43:D0:D9:B4:AA:90:F2:4A:DE:C8:3A:32:3A:5B:83:9C:C6:E7:F6:B5
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0198D4A816EC176EC25E3243B9610315DF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 14BD
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=)
2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: QvTFRzsH2EHjcShrkghe9OyOY7yrJUlDFGhuQKvFRes=)
3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=)
4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:16:ec:17:6e:c2:5e:32:43:b9:61:03:15:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=43d0d9b4aa90f24adec83a323a5b839cc6e7f6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:6b:37:47:6d:d3:29:c0:e0:32:36:a2:d9:
30:aa:20:83:dc:21:bd:0c:17:8b:e9:ed:97:0b:70:
03:41:48:93:f6:7d:8b:30:53:2c:cb:89:9a:4e:92:
0d:45:3d:81:4a:0e:c4:b1:c4:fb:e3:f5:8b:c3:85:
73:e7:bd:59:7f:4a:34:aa:92:7a:56:7b:1b:78:34:
cf:31:46:42:de:a2:3c:1d:68:34:05:95:a1:0c:a7:
08:bf:6b:68:b0:14:da:2d:4d:fd:82:d7:85:80:1c:
5f:b5:e7:13:c8:73:b8:00:d6:4a:68:40:9a:c5:8c:
ac:72:0b:22:92:bc:57:d1:db:76:79:f8:c2:d2:3c:
c2:f2:cc:b4:1f:49:aa:3f:f1:a6:b1:f9:2f:87:fe:
21:07:7a:ad:b4:17:2d:f5:4a:d9:c5:3a:8c:6d:60:
97:f3:f8:c9:88:e7:71:f6:e0:38:8c:4b:a0:dc:b7:
49:33:90:fc:aa:61:f1:b0:cc:48:2e:dd:6d:e7:ba:
bd:fb:5b:43:e7:91:ad:79:01:50:92:16:4b:54:78:
d9:56:10:a8:85:cd:b1:ec:4b:dd:55:bb:7a:0c:bd:
3d:6c:b0:c9:29:1e:0b:b6:d1:0d:b8:f6:83:1b:00:
8c:90:d0:4f:5a:12:11:db:39:49:69:99:54:8d:46:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:D9:B4:AA:90:F2:4A:DE:C8:3A:32:3A:5B:83:9C:C6:E7:F6:B5
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:88:90:27:19:34:a3:bc:4b:51:82:ec:04:f6:f6:b6:6a:db:
4a:f4:cb:31:aa:e9:bb:61:35:4e:7c:b1:6e:17:66:b2:5d:01:
e4:3f:72:72:58:28:dd:90:d6:87:ff:cb:bc:ec:f6:79:01:8b:
f0:65:49:6a:78:2a:e4:4d:14:b0:2d:ab:85:43:79:40:c1:2b:
24:31:0c:f1:28:cc:3e:fa:76:f9:c5:a1:89:47:dd:7d:90:04:
1c:8c:6c:d3:8e:19:61:d6:0a:08:20:1e:10:9a:b3:90:a1:ff:
72:4d:d6:f8:83:03:62:55:3a:c3:8b:99:24:09:b5:4b:d0:cc:
86:76:65:93:ac:0d:52:18:37:0f:89:ea:ab:8d:01:d9:ed:d3:
4e:b7:83:19:39:5b:c7:37:2d:91:15:7c:a6:91:42:a0:2c:3f:
b5:02:04:e2:db:76:33:d1:15:d7:19:e1:e3:97:21:c5:e7:41:
5d:5c:cd:3c:06:2f:c8:fd:1e:12:b9:6f:87:cd:ae:1e:9e:4d:
b7:cd:4e:bb:4b:c8:b2:2f:45:17:c6:65:c9:9b:4f:91:28:0f:
24:c3:f4:cc:7e:a4:66:a3:07:70:17:b5:1c:fe:ec:b1:3c:95:
7f:b0:9d:75:f8:89:1c:42:82:2c:97:2c:9b:2b:7b:69:bd:42:
7b:c6:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:49 2025 by rpki-client