Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: OZfvgbFU01egZWLvLUrviVCLyQZ9Jc6pXP4LP9GPCZM=
Subject key identifier: 70:FB:A4:CF:9A:74:F0:A8:4A:13:03:45:15:C4:89:BD:F6:7B:33:1D
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0198D6606B5F217D7C23F11A45B169845137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0914
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: FGkt6vGgKM1Bh5zJKR3ngGaJf3GrYLfrfOkA1dXCvbs=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6b:5f:21:7d:7c:23:f1:1a:45:b1:69:84:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=70fba4cf9a74f0a84a13034515c489bdf67b331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:f3:ba:2a:77:de:c3:1a:fd:cd:ce:a6:9f:
97:89:e8:ee:6f:76:3f:14:b8:cf:5a:a1:1d:11:4b:
b0:d1:1b:3e:9e:ae:da:07:16:1d:5b:a3:71:9e:b6:
7b:9b:71:fc:a6:6b:af:ae:ff:d9:93:4d:ef:f5:2f:
30:cd:f0:c1:53:bf:b7:c3:11:95:ac:2a:0a:17:67:
50:ff:d5:4f:99:3d:0b:00:36:81:3d:54:64:dd:18:
5d:ef:59:ba:5f:7e:b5:c0:60:79:30:af:d8:d1:fd:
b1:6f:22:4c:01:6f:da:fc:14:bb:45:e0:98:b5:c2:
42:f2:28:f6:e4:7d:fb:76:66:df:91:c2:8a:27:dd:
dc:13:af:e9:f0:24:6b:0f:36:2c:8b:df:c8:e2:eb:
9b:89:aa:f1:bb:6e:36:dc:5c:ca:0d:be:82:db:b5:
da:5f:37:62:00:71:d7:6e:d6:86:4f:02:93:79:11:
00:b6:52:c1:f3:b8:21:a7:e9:47:8a:30:36:1b:1a:
fe:bf:67:6d:4d:52:67:1c:f0:73:85:0a:94:93:1e:
04:fb:25:10:79:8d:53:82:59:7e:3e:f0:f2:59:cd:
55:32:44:cb:c0:8d:52:36:e5:45:bd:6e:49:f6:81:
03:8a:2b:93:08:ff:84:e1:f5:48:37:f6:cc:e2:8b:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:A4:CF:9A:74:F0:A8:4A:13:03:45:15:C4:89:BD:F6:7B:33:1D
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:58:4d:33:a0:ef:1a:3f:8f:5c:c4:c7:e9:7f:f7:2d:8a:e0:
6a:e9:db:e0:93:72:23:16:e1:c6:b3:d2:cb:74:4f:f0:53:86:
f6:c8:79:f0:95:d2:79:d6:40:be:11:9c:6b:fa:3c:2e:c6:12:
14:7b:06:af:12:f3:c9:bd:67:77:91:e4:31:bd:f4:a0:5d:07:
50:0c:a8:db:ff:61:09:16:6d:66:21:2a:fc:85:23:63:71:1c:
77:d8:df:8a:79:8b:9a:76:15:12:c2:1b:ee:74:28:fc:3c:4a:
97:d8:f4:30:b5:8c:39:27:0e:f2:ab:96:a0:ab:97:57:8f:7f:
c5:53:ae:d1:bf:4e:08:c2:c1:55:cf:5b:6c:9e:46:ad:0c:60:
b0:d8:c6:e2:c6:ab:3c:00:96:dd:9f:51:7e:6e:f1:74:38:d9:
a5:a2:eb:49:f0:8d:0f:49:c9:91:88:e0:3b:44:e3:c8:ae:92:
99:43:28:8c:08:3c:d3:ec:d6:bf:13:a1:ef:c0:62:c4:b6:15:
17:2e:ee:c0:18:ec:5e:16:7a:23:cf:42:97:e5:62:47:43:cb:
b6:38:94:48:ff:4e:50:06:38:9b:63:3e:64:a7:ec:fe:0b:bd:
3b:9c:47:ee:40:bc:69:ce:8b:07:ab:f2:6d:ab:7e:a9:f0:8b:
42:1a:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:58 2025 by rpki-client