Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: tglWxSDrXxe5oN8z3llDpauSC7BCqtqkCT/zu1QqLqc=
Subject key identifier: 48:B4:7F:E3:9A:34:F7:74:F3:FC:2B:2A:21:18:2C:E7:6D:A2:09:18
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 0198D5836CE6BF084BF5877A90F2EED0C16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: 2DptoaVjai1Ao1tcpixa3uu0LfzcqQl6ytDcJv05k+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6c:e6:bf:08:4b:f5:87:7a:90:f2:ee:d0:c1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=48b47fe39a34f774f3fc2b2a21182ce76da20918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:59:c9:e4:84:60:5a:88:51:ac:31:7b:f4:
46:6f:9c:4e:1e:3d:b3:07:d6:5b:54:89:da:89:b2:
fd:61:0c:58:a4:7a:ff:27:ac:a7:aa:97:72:5e:f0:
f9:55:ee:78:9a:d4:56:f5:63:9f:7a:a7:46:4e:d1:
38:e4:9a:61:4e:aa:f3:6f:d3:44:10:61:08:af:3c:
58:05:0e:d4:86:d3:01:dd:dc:8a:9d:b4:01:a7:4d:
05:ee:95:59:a6:fb:1d:d5:47:87:61:bc:47:cc:c0:
50:0a:3e:32:e9:0a:65:26:c2:5c:89:b7:6d:04:63:
ee:ba:d7:7a:aa:2a:fd:64:3f:f1:25:fe:74:45:92:
c5:5a:30:82:fb:76:40:d2:54:51:02:05:4b:21:b6:
19:b6:cf:08:f8:81:14:f7:06:50:b2:1e:05:9e:16:
9c:2a:a0:27:5a:c3:1c:e1:65:25:88:1c:a6:d3:25:
a2:a8:9e:7f:55:64:c1:67:06:69:5d:96:60:17:f7:
69:45:97:15:55:68:1d:ab:19:52:4b:e9:bd:f7:65:
33:0f:cb:d6:89:f0:f8:3b:19:88:c7:c0:e3:85:55:
2c:20:b6:cd:4b:9d:67:c5:2e:12:28:38:1b:23:c8:
0e:6e:8e:d0:86:a1:40:ce:2d:6b:a4:41:66:30:cc:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:7F:E3:9A:34:F7:74:F3:FC:2B:2A:21:18:2C:E7:6D:A2:09:18
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a4:1d:7e:2e:62:22:ba:fa:4e:09:b8:63:37:46:86:48:d6:
30:02:e6:b7:d8:ec:06:3b:00:2c:5d:32:9a:23:31:ce:5d:4d:
26:38:13:77:62:36:4c:1e:42:87:e7:79:a4:ac:fc:45:e1:f4:
8a:d5:08:6d:c2:64:71:27:c3:ad:69:d3:e8:78:1a:be:e5:57:
a1:2f:6b:21:38:79:d4:ea:60:f3:9e:29:94:e4:01:0c:9d:54:
11:d9:ea:c4:12:ae:30:cf:ba:13:5f:71:fe:51:d3:28:72:d4:
44:15:13:9c:1d:71:94:12:68:33:2b:3e:6c:3d:54:e8:bb:e9:
35:90:7c:c6:60:9a:10:0d:2a:8e:8b:4d:79:fb:a9:be:2a:18:
9b:90:5c:28:b0:ca:d2:a6:da:13:da:aa:53:d8:1a:73:5e:48:
e4:ef:75:1d:11:92:90:a9:85:45:24:16:be:61:0c:01:e5:07:
97:66:1d:13:f8:18:36:43:0f:7d:04:42:e7:88:cd:66:0c:49:
04:4c:c5:a5:c8:a3:ad:22:91:c6:18:38:d8:90:49:78:9b:fc:
db:3f:da:63:1d:d7:17:e1:11:06:52:31:16:6d:b1:16:3e:f5:
3c:da:5a:1b:ad:14:e7:4a:6b:1d:7f:4e:f1:de:87:f9:24:82:
69:27:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:28 2025 by rpki-client