Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: fkHZ0Ry938wxY3CazPJDyzsESgyAnw7ve24/slV/GxM=
Subject key identifier: 5D:7B:E1:7A:5A:66:59:94:C8:07:F2:DD:A6:A0:55:13:34:82:28:C5
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0198D6612DE81F1523E68ED268A646DF8E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=)
3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: ylhGQo4ePmP4pSuOLRvy+Xqhmux6w5hMo+2h4W91nR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2d:e8:1f:15:23:e6:8e:d2:68:a6:46:df:8e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=5d7be17a5a665994c807f2dda6a05513348228c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:7f:e6:48:45:16:85:c3:4c:93:8d:40:b5:
d5:25:8f:da:50:b0:d7:ff:e5:2f:83:ef:9f:33:49:
8e:00:b8:d0:82:fd:9c:37:ab:59:3f:09:18:7a:a8:
0c:d5:2c:2a:64:fc:38:0d:aa:29:e6:87:1e:ae:6f:
0d:ee:f6:c9:bb:85:19:12:76:6d:be:d8:d9:13:90:
af:7f:2e:2b:2f:fd:11:cb:30:46:14:e6:02:c0:8c:
78:47:96:c0:0b:a9:e6:df:ca:e2:30:b8:69:24:0b:
80:84:20:ce:92:4f:2d:bb:66:1d:07:fe:f9:5e:7c:
4c:00:92:45:3c:5c:16:59:a3:e3:f9:f9:7a:7a:25:
94:9b:1f:8d:36:06:03:c8:91:26:cd:95:38:7b:54:
78:f5:b2:8a:47:0b:0c:17:b1:87:5e:2e:ee:1b:bd:
78:f3:08:0b:fc:6a:cb:0c:96:9c:2e:4b:97:c4:65:
c3:d9:ee:4b:df:30:1c:3d:4e:47:3b:ad:23:10:4f:
41:06:f0:51:59:f3:5d:08:64:5a:3d:1e:16:fb:d7:
87:d7:3d:78:49:31:09:e7:7d:63:87:2a:7b:a1:4e:
42:13:01:a7:fd:fd:ed:81:6c:7a:67:5b:17:26:91:
7d:1e:30:1e:4a:4d:0e:15:1b:d1:bd:82:0e:c1:62:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:E1:7A:5A:66:59:94:C8:07:F2:DD:A6:A0:55:13:34:82:28:C5
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f9:e2:df:1a:0f:03:23:2d:d8:bb:84:16:12:90:b4:dc:9d:
b3:72:a8:46:52:8e:10:c6:39:26:0f:d9:f0:17:f4:ff:86:45:
97:72:02:05:6c:69:b9:2a:0a:33:6a:0c:0d:ba:89:fa:a4:de:
23:f0:5c:c2:88:54:97:0d:88:06:be:71:89:cf:ed:af:30:7d:
33:0c:f0:1d:65:09:07:7f:02:ab:2b:6c:d4:ba:a4:8c:22:2b:
66:6c:d9:eb:fe:ad:62:c4:fe:8d:48:bb:49:34:51:06:6e:7c:
a2:57:ce:dc:31:44:1d:ea:e9:c2:11:7f:02:52:a3:88:6b:86:
d6:13:f3:9b:d1:49:72:f2:4c:c0:31:ad:f9:82:75:c6:66:a7:
09:2e:5e:94:97:1e:5d:5d:1f:2a:06:af:7f:d8:d0:f7:eb:3d:
d1:4f:93:db:05:d1:99:9b:73:77:c4:b7:83:de:09:3f:14:5a:
e1:cd:b5:96:8e:3b:8e:64:ca:bf:88:5d:c1:66:27:af:0c:78:
9c:08:80:87:d1:ac:60:40:8f:a2:8e:30:e9:2a:89:f5:b0:41:
df:68:c4:98:50:da:5c:1c:08:04:58:04:b4:df:07:42:fb:39:
db:51:f7:bc:4d:98:cc:f7:bd:56:8b:22:57:a0:2a:98:1c:2f:
13:0d:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:28 2025 by rpki-client