Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: C/7HQywcsNULoGzxLbJTe4ey2douk/21vKreRqeXEIQ=
Subject key identifier: BE:F0:FF:2C:60:9D:36:65:F9:4F:31:C2:16:5C:E7:1E:30:4B:FF:4E
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0198D4741AFD8E6792F48B5427C40715E204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 0BFE
Signing time: Sat 23 Aug 2025 01:03:55 +0000
Manifest this update: Sat 23 Aug 2025 01:03:55 +0000
Manifest next update: Sun 24 Aug 2025 01:03:55 +0000
Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: ZMEbCjnSVYR+CHpDRJQOAOSxh4PuDZETnUr0b4YOQm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1a:fd:8e:67:92:f4:8b:54:27:c4:07:15:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Aug 23 01:03:55 2025 GMT
Not After : Aug 24 01:03:55 2025 GMT
Subject: CN=bef0ff2c609d3665f94f31c2165ce71e304bff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:41:b9:54:a4:1b:c9:cc:50:eb:02:fb:1d:
44:71:c8:eb:94:03:4f:ce:14:26:31:4c:4f:6f:2b:
7f:b0:64:b7:74:11:ed:68:75:29:f7:53:32:48:79:
44:e7:50:a4:8b:d5:1c:da:f1:b2:d1:16:13:0e:e9:
47:49:7f:24:7c:17:68:ba:79:9c:59:4a:d7:6a:20:
08:7d:ee:53:88:fd:f6:aa:75:2d:70:d5:0f:df:01:
f4:93:67:34:2d:0e:0a:7b:82:f1:f1:eb:d7:34:17:
c6:9d:77:6c:c0:56:8c:9d:4c:01:ef:3a:81:51:20:
84:4e:5e:a9:0f:b4:12:4b:c3:c5:ab:ca:ed:ec:d8:
a7:57:a3:b6:97:b6:8f:6c:4c:a9:95:fd:3d:53:74:
f1:b7:d2:37:9d:20:b8:a5:8d:65:97:91:ba:4a:58:
0e:99:71:bf:73:88:7a:61:e3:d2:08:cf:91:42:87:
a9:98:25:88:ca:d0:7b:1f:14:23:66:31:e5:ff:81:
fe:a4:4b:db:1d:c3:6d:83:4e:f6:4c:28:b3:26:da:
1c:d3:31:9d:21:25:a0:55:ce:b6:c7:b2:53:f2:d0:
97:c0:ee:6a:99:e2:53:10:4c:8b:24:c9:4a:8b:80:
f3:3e:44:98:14:3e:50:51:6b:c6:5f:60:bd:ba:ee:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:FF:2C:60:9D:36:65:F9:4F:31:C2:16:5C:E7:1E:30:4B:FF:4E
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b6:69:79:92:ce:46:e4:b7:31:37:a9:82:38:25:c7:e0:52:
25:93:7a:fc:ad:88:d9:3f:06:c0:9e:37:98:74:23:7d:49:ce:
23:5f:f4:1c:b9:25:d7:ef:f2:df:92:eb:1f:88:62:fe:11:68:
0c:6e:8e:ce:78:a7:0a:e8:ab:6f:d8:b8:db:df:97:39:6d:f5:
50:50:20:4c:78:22:6d:46:39:13:3e:63:83:69:09:ef:0f:af:
9d:e8:98:47:85:4a:b9:36:ca:0f:3b:a6:da:e9:c8:55:0c:a7:
85:73:70:75:41:3f:47:57:c8:d6:6e:88:78:08:d1:57:47:b2:
58:ef:cd:c0:fe:1e:11:e6:23:72:59:74:34:b9:db:28:25:90:
1b:9c:a9:2e:d1:6e:0e:ed:d6:02:6d:1e:86:7a:62:17:45:78:
54:b3:5c:87:22:78:1f:df:29:db:b4:81:cb:24:25:dd:96:a1:
c1:de:70:e0:ef:dd:89:ca:49:27:72:d3:25:18:be:ae:7b:0e:
23:4d:d5:53:b7:b0:dd:16:c3:3a:ba:ec:b7:f8:e9:e2:31:23:
7b:ff:c9:fe:f4:0d:15:1f:15:dc:54:7c:2c:44:d8:9b:d8:9c:
1e:5b:45:b7:a6:d2:49:aa:f4:6d:3b:2a:bb:3c:49:dc:68:9d:
fa:af:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:16 2025 by rpki-client