Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: ghw+dqIEuDNECDGdv1yMGpOU8jsjBWKl2KCif50FBN8=
Subject key identifier: 78:C5:C3:2B:FE:E8:3B:A4:23:AD:01:C5:40:20:4A:19:48:AF:1E:F4
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0198D54E1C6A3EB10932127DE4C5B0550CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1663
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=)
4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
5: SDCjGiu7HlJmu92riiwnYJVUZkM.roa (hash: dRu22wu3jt3btScf5pPPepbiwZpCNe4LeyeAtOs7QoU=)
6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: 4pAp6kZ44963O3l+QtEG0igJHXtvFlm3gDVr0xodqqM=)
7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1c:6a:3e:b1:09:32:12:7d:e4:c5:b0:55:0c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=78c5c32bfee83ba423ad01c540204a1948af1ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:ce:75:72:95:06:b3:84:12:a9:49:e5:62:
ef:04:ce:c7:f3:b0:f7:e9:50:03:81:67:0c:86:55:
ea:7d:52:20:83:a8:8e:3f:2b:a9:62:df:1c:a6:94:
e2:59:c8:76:a0:e2:55:4a:ab:77:47:c4:40:93:45:
de:6c:56:a6:28:49:fd:ad:44:b4:b2:36:96:98:7d:
ea:88:88:79:b0:d1:6d:76:7e:92:01:2d:b3:81:72:
8c:57:1b:23:8b:b7:aa:bc:6c:2a:4d:52:ac:e0:33:
b5:0c:9e:52:0b:e2:cf:15:5d:b6:51:bd:d0:32:23:
bc:f1:7e:c5:aa:31:1f:7a:f9:85:68:42:67:76:11:
f7:6b:69:b9:79:f3:f4:35:b3:9b:e6:46:35:13:34:
81:07:6b:47:25:ec:9a:9e:c6:6b:e8:c6:42:be:40:
5e:de:09:bf:97:79:74:07:5c:f9:ab:e1:a9:24:df:
d8:9c:42:cc:1a:b0:f0:60:4e:d9:77:4c:67:24:4b:
98:cf:85:61:93:ec:04:98:93:bf:47:fa:c9:f6:5b:
74:85:9b:30:0c:64:4b:c3:30:c5:7f:45:8d:37:78:
35:37:9d:29:39:b8:bf:50:f2:97:3a:c9:e3:b1:b0:
c5:1c:ba:5d:ce:af:63:35:3b:f2:17:3b:f9:75:54:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:C3:2B:FE:E8:3B:A4:23:AD:01:C5:40:20:4A:19:48:AF:1E:F4
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:69:7b:59:c9:27:56:3e:9f:d2:73:eb:07:96:ff:0c:c5:
c9:63:21:fb:69:1e:05:09:5f:9a:3d:0e:c6:4a:54:58:93:06:
a9:8d:ac:27:c8:aa:49:f1:00:ad:47:77:92:46:cf:66:db:a0:
ad:5e:e8:57:d1:db:01:10:fe:ec:dc:34:be:d5:1e:41:0b:d5:
39:a0:c9:0e:d7:44:03:c4:19:95:b7:02:97:0c:cc:69:8f:c4:
89:3f:40:1a:3b:1d:50:f5:67:7e:fb:65:88:fb:87:3c:c2:63:
8a:d4:94:a1:54:11:ca:d3:ac:d1:7f:5a:13:57:a8:11:90:fa:
6e:3b:1c:23:ad:0f:4d:04:6c:d1:23:70:e3:e7:7c:40:0d:a7:
1b:3a:78:1e:79:85:2e:eb:ea:12:43:75:bc:cb:9c:bf:4c:de:
b3:f6:84:dd:42:6c:2d:b8:9c:61:88:95:bf:c9:b2:23:47:2d:
22:3d:9a:f7:8d:93:05:f9:b9:9d:38:06:5c:db:ba:0f:0f:5d:
81:fc:10:9b:f3:e1:6d:94:0f:38:76:03:7d:05:ab:a6:19:57:
bf:11:05:b7:64:cf:cf:f9:b6:48:85:94:c4:f5:1f:e6:1c:34:
bb:d5:4c:f8:73:1b:ab:b0:1d:37:4d:aa:c8:8f:40:ac:d9:e4:
43:32:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:16 2025 by rpki-client