Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: y+fGpRaFTYYakiek/qcc6XW0duSWjKg77uK0KxPFSLM=
Subject key identifier: BB:9E:B4:01:9C:A8:31:5E:65:4B:E3:D8:A8:60:05:36:19:F5:D6:19
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 0198D516038353752AB669C6A50C89F9985D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0E0A
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: XC39+hpZexiIQ/GKuQjn824aCtdhTOWXDKr0hbj0p2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:03:83:53:75:2a:b6:69:c6:a5:0c:89:f9:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=bb9eb4019ca8315e654be3d8a860053619f5d619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:7e:be:32:61:54:fe:9a:ae:c8:9f:0b:8c:
a8:51:fb:f5:1d:46:f0:40:94:68:0b:11:72:3b:0a:
a1:13:f2:b5:78:d9:83:00:96:c2:75:91:b5:ef:49:
49:86:3d:d8:4d:36:17:9b:b2:1f:b6:22:af:f7:b5:
c8:66:18:0c:92:d9:5d:2f:28:d7:97:95:bc:11:f7:
f7:61:ef:bb:dc:d1:68:3b:5c:50:fb:13:ab:38:7e:
cb:8f:0b:9c:05:11:23:86:b8:75:1c:fc:83:bf:c5:
8d:62:8e:77:30:bf:de:8d:8a:d5:24:04:0e:72:c7:
27:db:8b:3f:e3:e8:fc:01:a2:ad:a5:e2:ec:bd:c0:
e8:3b:4b:85:d8:f1:11:3e:24:13:f6:40:af:2b:4b:
c1:82:60:5a:39:ca:18:2f:39:f1:51:5b:63:19:79:
bf:cf:bd:af:f8:8b:1d:1c:db:82:6a:b9:76:66:a0:
09:4c:8e:c2:7b:3f:e4:32:eb:90:35:ff:60:e0:91:
35:77:aa:55:e1:d0:8b:27:97:d3:ca:9c:0e:5c:42:
08:42:de:66:67:18:4f:21:38:c7:7b:6b:55:0f:60:
57:f8:c5:97:4b:92:68:d1:71:25:aa:8d:02:2e:70:
3c:17:b4:ae:32:4d:83:f8:ae:f1:02:a7:4b:1d:2c:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:B4:01:9C:A8:31:5E:65:4B:E3:D8:A8:60:05:36:19:F5:D6:19
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:de:d7:aa:2a:6e:68:dd:65:e7:25:66:7f:7b:eb:c4:d1:
39:7d:c8:c1:24:7b:8e:a4:69:33:8e:d1:28:a7:30:81:24:6d:
e2:76:2d:71:7d:8c:c2:79:f2:b2:e7:b0:d7:dc:fc:ee:0c:d5:
17:37:71:54:3d:81:bf:c7:d4:12:18:f8:bd:6b:c1:30:61:b5:
53:4d:f5:67:4d:f3:53:7a:b2:33:7f:ad:09:4c:ff:ad:b8:dd:
fa:f4:e2:8c:20:16:9d:9f:cf:a6:93:31:80:ec:c6:f0:bf:30:
2f:90:f6:39:aa:63:a7:59:2e:c3:cb:54:d5:e5:a4:95:01:fa:
b8:62:3b:85:53:c8:03:32:b1:84:1f:35:52:8d:1d:bf:85:18:
dc:2d:ba:c0:2c:cd:46:dd:26:bb:bd:70:8e:d6:cd:e0:3c:02:
19:58:56:6b:8e:53:d4:dc:17:58:a7:87:6b:43:96:67:9d:dc:
ad:2d:37:ef:e4:12:a6:44:17:ec:60:c8:cf:4b:6f:c3:69:24:
85:86:dc:d2:f5:76:76:22:7d:b5:61:5a:c4:db:8f:d5:b0:ea:
ac:8a:33:ee:33:71:1c:05:9f:0d:2f:9a:bf:9a:eb:2e:67:65:
d8:32:6f:b8:94:d8:96:15:8d:bb:61:29:99:62:5a:36:fc:39:
f1:2c:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:34 2025 by rpki-client