Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: yTH4/Io0TZiJo+lisv5NuD6YiDzEQpZgv8cO5Bk/y7U=
Subject key identifier: 42:33:F3:E9:FD:B1:A9:13:CD:4A:8B:0A:05:CC:9C:59:F9:25:BB:25
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 0198D58355E72719852CBDD23E6731BD922E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 0479
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: H/fPtrX/BmDbNsAvhAVy093LKo4PVg2CClQEPrZ04zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:55:e7:27:19:85:2c:bd:d2:3e:67:31:bd:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=4233f3e9fdb1a913cd4a8b0a05cc9c59f925bb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:00:87:33:5f:c9:52:5a:b4:d6:c2:dc:8c:
46:e4:4c:50:e9:b4:2b:ea:0b:b1:b3:85:24:f6:91:
c7:b4:c1:a5:a4:5d:09:6d:b9:ff:a6:ca:93:9f:f5:
14:fd:5b:3c:68:20:af:c5:74:7c:1d:99:8e:84:b9:
f0:6b:f6:d9:94:1a:ea:2e:ee:e2:41:01:b1:25:0f:
d5:0c:e1:3d:ad:9a:8a:5e:4a:11:08:fd:d5:19:c2:
12:59:e1:d9:a1:30:85:8c:a4:a6:d8:9d:47:b7:6f:
fc:fe:0d:76:ad:11:c6:44:32:59:ee:84:22:b3:1d:
73:8a:fe:0c:c7:52:17:9e:96:a2:dd:37:18:79:66:
c0:ed:cf:f6:c2:be:42:3e:da:10:a7:6d:2c:82:c4:
5a:8e:82:80:06:d4:da:56:96:30:bc:6f:25:24:dc:
6b:57:1c:c6:cb:8a:a5:fe:05:9e:5a:13:11:d5:6c:
88:21:e3:01:5b:d1:6d:bf:02:f9:03:05:08:9d:9a:
5b:5e:44:70:3f:32:38:bd:7a:4b:39:a3:70:cb:c2:
ee:c9:8d:47:75:53:ac:0b:33:92:62:46:45:6d:13:
56:8f:a1:89:fd:98:5a:91:94:fc:7b:f9:a1:fc:2c:
2a:99:09:e6:2c:34:24:17:16:a3:9f:93:6a:98:2e:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:F3:E9:FD:B1:A9:13:CD:4A:8B:0A:05:CC:9C:59:F9:25:BB:25
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:be:b7:70:04:86:46:58:2d:88:76:ae:b3:69:03:c2:b4:b0:
d8:2a:fb:30:3c:bc:b9:ce:f8:08:4e:05:3c:fa:34:28:19:fa:
78:fa:e2:8e:ca:88:d4:a7:7e:71:68:d6:0d:22:c8:f3:b3:ed:
c7:aa:99:df:f6:0c:38:25:52:f8:af:c5:b1:5b:3a:db:6f:bd:
16:86:d9:ac:cb:c4:7f:81:34:8f:e6:83:fd:43:ae:6b:37:41:
67:19:e2:c7:d0:e9:fb:f8:53:da:32:17:7f:51:f5:0c:14:e9:
ac:62:dc:10:67:52:fa:e4:08:b5:45:8c:fa:1c:4f:43:58:be:
05:8f:fc:cb:bf:a3:ab:ba:74:b9:aa:c5:df:a0:30:bd:96:4c:
8b:4b:b6:89:26:ae:66:ee:1b:8e:07:9c:4d:60:01:53:65:ed:
ad:53:de:b6:6c:13:e6:e0:4c:39:6a:04:79:29:37:e3:bb:a5:
26:97:b4:e5:7c:2f:98:ea:90:ae:66:6b:9c:27:ae:c5:77:38:
02:ef:58:80:cf:33:96:b4:7c:f6:d5:97:e6:dd:a3:82:da:2e:
5b:67:12:44:64:7e:a2:28:7b:33:2f:a2:d0:c4:27:04:0b:f0:
df:e5:96:e6:64:17:79:f1:e1:3a:75:37:c4:bc:90:d7:6b:0b:
53:4d:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:58 2025 by rpki-client