Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: cF5HCemvG4b8C1PFsATpa/MmBH83fLIyg31/TCCVzuk=
Subject key identifier: 47:BC:77:01:07:A1:29:1B:77:A1:B0:C1:8A:55:D3:98:BD:35:A3:0B
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 0198D4733B1E831F2490B5FC0611ADD6796F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 09DF
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: GFdCNPsVm50mRIVK++0l9qnOM3KQd7G0iM3cXfBNyJk=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3b:1e:83:1f:24:90:b5:fc:06:11:ad:d6:79:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=47bc770107a1291b77a1b0c18a55d398bd35a30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:50:42:6e:74:2c:56:49:f3:4d:70:3d:b0:
d0:bd:6c:18:29:89:5d:0a:89:19:20:95:78:3d:67:
1d:3c:14:8e:cc:4f:30:b5:bd:83:4b:55:f5:c0:c0:
d7:d1:2c:45:54:53:21:97:76:3c:62:4a:13:00:89:
26:4e:99:fe:69:58:87:b1:30:13:dc:da:c8:75:75:
39:9c:86:08:ba:4a:ff:f2:59:28:34:31:af:7a:d2:
2f:4d:b3:f9:10:31:5a:35:78:2a:1f:3e:81:ef:1b:
3e:26:91:09:ab:c6:d2:72:4a:e8:a3:3c:46:29:96:
12:88:eb:37:ee:2d:3d:87:1d:1a:2d:00:ec:8c:d6:
8a:f4:a8:76:7e:28:f3:11:ab:99:e1:39:3f:e5:b3:
e3:b9:9b:25:2f:15:a4:2f:d5:ec:ba:ef:57:bc:69:
4a:d0:60:23:de:1f:a0:15:e2:b4:2e:94:ae:76:e7:
1a:eb:0e:ae:97:52:eb:0d:fe:4e:f0:8e:72:19:ff:
b3:dd:56:f7:0f:b4:4d:c9:3d:2f:2b:a2:18:f4:b6:
46:46:ba:ad:a6:de:32:fc:2d:97:05:3f:c0:9f:17:
35:fb:af:ad:12:45:a6:0f:45:7c:81:ac:8e:53:ec:
9d:58:c4:54:26:6a:0c:cd:84:2a:36:d9:6d:96:4c:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:77:01:07:A1:29:1B:77:A1:B0:C1:8A:55:D3:98:BD:35:A3:0B
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:26:13:4a:ef:b8:1a:a1:c6:fa:5b:9c:81:a0:b6:ab:43:3f:
08:14:2f:f4:53:c3:03:0b:e7:85:59:66:ce:e0:e0:b0:19:1e:
73:2f:b5:73:03:e7:c9:df:b7:5e:29:ea:82:df:dc:4a:8e:9e:
ed:cf:eb:e8:12:4a:28:ec:60:64:fe:c9:0e:9a:32:08:0a:2b:
41:8e:a7:28:42:6f:1c:cc:97:9f:18:6d:d7:32:04:d9:a7:ab:
7e:c4:29:a2:dc:01:49:03:19:d3:a7:70:f3:6e:52:5d:59:5c:
dc:d2:f6:ca:4e:9b:50:2a:35:1a:f9:da:a6:03:45:b0:c9:17:
91:9d:fe:e9:a0:75:c5:ee:c7:ff:da:98:71:9a:77:83:d9:eb:
15:5b:38:06:97:e6:33:56:4c:a4:50:37:79:85:7d:03:42:78:
41:ef:b5:02:4b:16:e4:5d:3e:63:b5:c1:12:b3:14:d2:98:a3:
60:33:81:cb:43:86:a6:2e:ff:4b:fd:06:f3:b0:a7:f6:c2:9a:
8b:d3:a5:b1:1d:4c:43:37:f3:ee:5c:97:80:70:d1:cd:59:e4:
a9:57:91:8a:f0:7c:60:52:c6:1a:25:ec:4e:de:c5:ee:35:36:
c3:42:5a:ee:95:cd:37:3d:d6:1b:3d:3b:ed:9b:5d:b9:21:40:
43:5b:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:35 2025 by rpki-client