Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: t4cIx8M6UF0PP7+RYeFfm2aOZ7I4EeoqUVl/Gazi/9I=
Subject key identifier: 47:E4:4D:B1:C3:E0:E1:0B:43:4B:F0:A6:D4:06:44:47:2E:71:EB:D2
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 0198D51584A148151DC7500FEAA888547F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0A74
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=)
2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: nirsOmaZ1ebCwaTvgX8dnGop1AkZfw7e8Q7tQ425POM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:84:a1:48:15:1d:c7:50:0f:ea:a8:88:54:7f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=47e44db1c3e0e10b434bf0a6d40644472e71ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:bd:16:fa:07:60:43:ea:85:ad:ea:82:3d:
16:ff:a9:94:29:bf:b4:5a:6a:9e:22:7b:5f:10:0b:
b7:c0:d9:e7:e9:a1:22:fb:78:a4:cc:7d:80:ee:49:
be:15:15:e3:94:e0:12:31:cd:fd:ce:d5:63:a0:8a:
ae:af:24:81:66:cb:55:7b:58:0e:31:28:a9:22:6a:
08:a7:66:78:9d:85:22:3b:81:0d:d9:6b:b7:9c:33:
30:63:19:e1:bd:7e:6d:46:61:8c:5b:2d:aa:e4:52:
6a:5a:2a:b0:8b:1b:07:fa:c6:76:77:b7:d2:01:58:
5a:9d:ab:50:36:50:f0:8b:c4:93:ad:b8:7a:ba:e5:
70:99:f9:21:6d:53:ea:93:a5:e6:e4:d6:da:07:52:
c3:e0:7e:c2:80:df:fe:2b:44:d9:fc:0d:0f:7b:29:
6f:c4:fd:cc:9b:b2:a2:87:17:f8:3a:a2:95:b6:c7:
44:bb:04:9e:c7:87:e1:3a:38:75:11:9e:3b:b6:11:
25:dd:64:a6:19:d7:3d:64:4c:c5:61:56:96:e8:22:
2e:08:32:15:0d:e2:2a:f8:d0:7c:96:77:ae:b9:63:
27:e9:0c:3f:fd:61:90:c4:ce:73:8a:e0:24:7d:e4:
f1:b2:55:b1:fa:aa:cf:c1:db:c1:f4:ed:59:bc:c9:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:4D:B1:C3:E0:E1:0B:43:4B:F0:A6:D4:06:44:47:2E:71:EB:D2
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9a:88:6f:0b:de:5a:eb:97:57:af:3d:2e:04:ac:76:7d:97:
d0:55:84:a3:81:7f:bf:0a:23:f3:f2:41:3a:38:73:be:e7:8d:
21:9e:81:c6:3c:32:0a:24:13:d5:1f:0b:2c:06:1f:67:23:67:
48:7c:d5:f0:a3:49:79:1a:ae:63:a9:e2:ae:c5:52:82:53:5f:
1e:83:53:1d:06:73:8a:ae:97:d5:75:4f:a4:fc:5c:2c:7a:ef:
c2:c0:97:bb:af:c7:a3:1f:c1:4a:83:c7:f2:c9:40:60:42:b0:
82:79:91:d1:c0:50:f0:da:8b:4e:ea:fd:41:10:a4:1a:ff:70:
75:7b:76:f6:ec:54:7f:c9:54:fb:31:e4:c3:01:06:e4:47:18:
ba:b1:f2:b9:12:29:21:23:4c:83:bf:9c:57:49:7c:e7:f3:93:
45:8e:d6:15:63:01:8e:09:ed:c9:90:54:87:94:6b:0b:43:54:
cc:c2:32:55:89:0f:4a:ee:8c:19:c9:2f:20:cd:00:a6:f4:61:
ec:77:ff:25:e2:da:27:1e:38:b5:c9:3d:e9:06:61:d3:46:01:
11:ea:e2:c8:c7:9d:92:15:80:b3:82:c9:49:c4:1f:ae:56:2b:
37:d8:22:7f:17:05:66:a0:69:33:f2:c0:bb:c0:0e:a9:75:88:
17:3a:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:29 2025 by rpki-client