Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: 8dziKuf8aqJs3Qhy9Gu0orqCRoTjEryvcM0DhQaqE0g=
Subject key identifier: 4B:06:D6:72:44:9A:F6:AD:1B:76:A4:79:C3:B0:60:8A:98:F2:CA:28
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0198D4E08C52AD09B9E80D57BD4FD950003F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 043B
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: 4FSdwjPsoXdgV1IX7P7Kvcyc4oxjAXCpVEvfMXapmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8c:52:ad:09:b9:e8:0d:57:bd:4f:d9:50:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=4b06d672449af6ad1b76a479c3b0608a98f2ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:22:a5:ca:90:ca:41:94:5b:ee:ef:a6:4c:
be:10:23:88:ec:46:02:ec:73:11:aa:1a:6b:80:70:
6f:22:01:27:f3:95:b5:16:c6:46:16:ea:98:26:79:
2b:df:56:72:98:13:51:df:2a:da:4d:c3:c9:16:93:
d9:69:e7:af:9a:09:ec:e1:a8:d5:57:da:e4:b3:fa:
8a:e1:a4:ff:8c:33:2a:31:9f:d4:48:d3:f9:5e:d1:
6d:dc:76:c8:e3:3f:7b:9b:3c:b4:f7:b6:19:89:e4:
e5:3f:96:b2:fa:b4:17:e8:d7:38:bc:8a:d0:12:bf:
bc:4d:25:ac:dd:68:27:9b:ca:56:d1:f3:c9:7d:77:
0a:23:0a:60:e4:d9:1f:f4:0a:54:75:09:41:65:94:
1c:23:fd:80:bb:24:cd:f6:29:18:ef:12:dd:c9:1d:
41:b3:48:0b:6b:f4:69:7f:dc:84:8a:d6:41:eb:57:
cb:e2:93:d1:0e:e8:ae:f1:08:00:bc:ce:5e:ce:7e:
8b:37:bd:5f:62:ce:53:e9:39:3c:63:31:bc:89:f4:
3f:95:f4:c9:68:e7:f6:4c:a6:6f:43:c9:20:7a:6f:
d0:89:f6:e2:67:b3:c5:3b:b4:61:9f:b1:23:42:1a:
d9:a3:e7:d3:91:24:06:95:b4:f9:08:a9:8c:2c:56:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:D6:72:44:9A:F6:AD:1B:76:A4:79:C3:B0:60:8A:98:F2:CA:28
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:18:8a:66:18:e0:e0:f1:ac:76:93:40:08:15:9e:2f:49:
fc:69:36:5a:d6:e7:de:24:08:a3:4a:fc:77:b1:3c:4d:b4:64:
00:13:86:59:06:3a:9a:0e:1d:ca:62:f2:f3:fa:c0:68:26:0e:
6b:e6:b8:18:20:30:43:0e:61:c3:90:12:df:98:21:b0:e1:17:
92:69:ea:b9:9c:46:cd:29:75:40:41:b6:9c:88:5d:42:d2:83:
9c:83:56:cb:b9:c4:a1:9f:62:42:2c:ec:f5:70:cc:7b:32:96:
aa:df:fc:52:46:0f:36:e6:c0:19:fc:61:ee:eb:4c:07:16:66:
2e:92:ab:46:6e:f4:18:e5:49:a8:23:e1:f5:7d:4f:d3:6a:20:
a4:40:06:0c:0a:42:34:1c:69:b4:28:41:3e:42:0d:f5:8b:aa:
53:32:a9:d1:03:4c:6e:59:08:97:20:75:2a:a6:04:ac:2f:3d:
86:c5:c5:88:08:32:37:ba:b4:9a:c0:a7:e5:ef:9f:45:1d:94:
dc:e0:42:a0:5b:3e:df:c4:58:6d:06:08:16:f8:6a:03:7c:b8:
0a:18:6b:2e:aa:0c:2b:26:5f:34:d8:f6:88:8b:34:08:3b:ce:
93:b7:f3:bc:24:56:23:b3:d7:4e:06:6d:f8:70:1b:a2:93:7a:
07:73:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:06 2025 by rpki-client