Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: Y3d+Nj2hxNeWrx9Zo9SgiPvMtP3nTv72oJpywjQRwos=
Subject key identifier: 18:0B:43:CF:D5:F6:9D:4A:90:F1:79:E3:67:A2:91:90:6B:51:F6:90
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 0198D5836E05FA7174D852388183A7B4DA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 057F
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: j2Bk61tlB6wLWw2sdxe95wm4r6YQKSVtNJ09zI4nmU8=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6e:05:fa:71:74:d8:52:38:81:83:a7:b4:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=180b43cfd5f69d4a90f179e367a291906b51f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:7d:f4:8e:13:34:4a:b3:08:4a:83:34:01:
53:2d:8c:dd:9f:33:a3:d3:7d:02:b6:c7:8e:b7:be:
81:8b:fb:c3:fe:5b:5d:62:1c:3b:44:63:0c:5b:5b:
d9:38:d3:ff:c6:c5:44:1d:04:7e:10:6d:f5:e0:39:
99:f9:83:2d:7a:5e:17:8f:a3:9a:21:29:7b:a2:00:
06:11:c2:3d:35:4b:bc:9b:95:d4:fd:ce:90:1d:de:
de:14:46:ce:fb:a9:1b:a2:10:55:3b:3c:8d:ee:d6:
e2:7b:6a:71:82:87:67:3c:4b:fd:da:33:6d:89:ed:
40:04:fc:80:95:3c:03:64:58:66:ce:e2:db:0b:3a:
57:23:bb:16:0c:48:a7:10:64:0f:dc:8e:b2:a0:9f:
54:cf:e4:9c:e2:3f:db:e3:7e:c8:eb:42:fd:ed:42:
0c:39:a8:dc:64:f8:20:63:af:2b:fe:a1:d0:6e:c3:
92:d9:79:10:2c:f8:a9:4a:cc:23:ab:5b:47:3f:f7:
cd:1d:3d:1f:da:0b:08:41:e5:ac:4b:b2:f8:5f:8d:
6e:3e:0b:ce:fa:a4:d0:dd:5a:71:a6:63:69:29:be:
6a:aa:2f:e0:2c:39:da:a7:1b:f6:14:a7:23:25:bf:
8c:f5:bb:88:45:37:34:f2:b9:d4:cf:ad:1c:a5:93:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:43:CF:D5:F6:9D:4A:90:F1:79:E3:67:A2:91:90:6B:51:F6:90
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0e:1e:3c:25:3c:0f:df:f1:11:a1:41:a8:3d:38:dd:84:42:
67:2c:6d:9a:90:5e:17:2b:aa:b8:b6:88:48:8f:43:b1:79:b9:
43:62:f1:8e:cd:f1:a6:cf:5d:5b:8d:17:fa:55:cd:2b:cb:27:
b2:e5:2b:2f:da:0b:df:e5:60:a4:fe:fa:16:03:ca:20:05:eb:
65:cb:0e:89:e5:8b:7e:61:cf:49:b6:57:d3:a8:c5:2f:53:20:
e5:f2:70:e4:83:12:57:de:4e:64:e2:62:66:aa:59:1b:d2:54:
ea:92:a0:3d:3a:9b:ae:25:ed:db:3e:74:da:58:6a:d8:84:6d:
3a:d6:bc:07:f3:58:7c:d7:77:06:42:d0:eb:5e:20:67:0b:b8:
75:d6:bc:13:f2:f4:6b:c0:d0:bd:3c:16:9b:90:c7:4d:77:cd:
b7:5a:b0:b6:8a:6b:fb:7e:4e:4e:80:d0:7b:83:02:19:e6:90:
96:3d:55:b7:10:69:f5:0d:33:95:51:3f:ec:98:d8:f1:66:25:
ca:9f:7f:e6:a5:f5:b3:96:35:4e:d2:20:53:12:48:7f:bc:6b:
38:5f:f8:49:0f:49:18:bc:ab:aa:51:c2:83:12:9d:77:dc:58:
18:a8:36:30:96:3c:6c:6e:fc:f9:65:84:cb:3a:13:15:93:46:
d1:de:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:50 2025 by rpki-client