Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: OA2rLg4zMNWSkyhRCbAJC8PPyiOBpn/1Swau1SVsACI=
Subject key identifier: CD:20:8F:B4:7A:23:E7:61:B8:5E:E4:D7:4D:2D:37:82:8C:EC:86:42
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 0198D7E192891DE18288E205F86CB0B968E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 0513
Signing time: Sat 23 Aug 2025 17:02:20 +0000
Manifest this update: Sat 23 Aug 2025 17:02:20 +0000
Manifest next update: Sun 24 Aug 2025 17:02:20 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: x+MyGMjAA2/lGyyocGYgRTG4Xbvilq6myOydmMuBTmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:92:89:1d:e1:82:88:e2:05:f8:6c:b0:b9:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Aug 23 17:02:20 2025 GMT
Not After : Aug 24 17:02:20 2025 GMT
Subject: CN=cd208fb47a23e761b85ee4d74d2d37828cec8642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:df:3f:eb:c8:9d:59:76:b1:98:24:86:14:
be:96:b6:4b:65:1e:6b:69:b6:cc:41:e6:6f:31:81:
03:58:9e:80:f4:68:54:c8:79:e3:4d:01:d1:21:19:
a1:3e:60:a1:a0:75:90:fe:3c:9f:23:6f:2b:0f:fb:
3a:ca:0c:b0:10:f8:7c:1e:75:f9:0d:a0:21:cd:12:
ff:f1:6b:22:2a:65:7f:02:8b:ee:1c:dd:cc:34:65:
d9:53:4b:06:9e:af:c9:3c:fd:d5:c3:1f:c2:6c:bb:
54:87:51:f8:ca:77:a3:75:f2:91:96:35:88:74:21:
de:47:6b:42:83:e6:98:e3:50:f9:4c:83:da:5d:76:
cd:ad:6e:57:42:e8:46:a2:ec:95:4c:c4:1f:61:b0:
ed:9c:81:a0:16:b6:88:35:8a:48:37:e6:c2:f3:b5:
24:78:18:bf:c1:de:dc:5a:29:b3:e6:fe:e0:27:17:
3a:b0:f8:05:af:a0:32:ff:f0:f3:ba:cb:08:de:49:
50:36:f2:f8:2b:dc:27:04:a2:a2:f9:08:26:cb:0b:
19:09:cf:9c:74:d2:ce:ca:74:72:62:2f:ef:f3:18:
aa:88:ad:51:15:e2:35:86:c0:5a:69:26:55:06:1c:
63:69:b1:ec:b8:18:e1:e6:5a:22:2b:1e:8e:a6:a6:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:20:8F:B4:7A:23:E7:61:B8:5E:E4:D7:4D:2D:37:82:8C:EC:86:42
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f6:35:40:b3:21:80:e6:56:14:d3:2a:b4:85:2a:14:3a:2f:
6c:e9:51:9b:4c:24:db:1a:06:46:90:22:34:31:12:7f:e7:4d:
7d:c8:05:46:02:57:a4:65:c6:7e:bd:d1:0e:5e:20:f4:b8:30:
48:f4:b2:dd:1f:70:a4:f3:85:97:ee:0a:76:45:c4:39:cd:ed:
64:f8:bb:02:a3:44:3f:4b:82:a7:57:44:32:37:e5:de:fc:e8:
b9:80:3b:ae:12:1a:ea:1c:9b:7f:4f:66:24:a6:13:61:0c:fa:
40:29:b9:06:92:86:1d:17:02:60:3b:a2:b7:c2:c0:c9:9f:be:
59:4c:4e:e0:67:48:36:fa:c6:bf:91:8f:61:2b:af:11:7c:0c:
95:76:05:57:ba:ea:b0:94:0c:a8:db:dc:ec:9d:b6:3d:b5:5e:
b3:0c:3b:fc:1e:68:71:1e:4a:ba:8f:88:31:dc:17:5e:7a:a3:
00:23:a8:a1:41:41:75:c7:ce:97:52:9b:cc:c4:3b:d8:47:47:
a2:88:e1:d9:35:8a:c6:e0:dc:0a:4a:74:9d:ce:a7:67:e3:83:
c4:01:47:3c:01:82:f3:cb:28:b4:1e:fc:81:f2:25:4c:37:a8:
dc:12:78:a6:6c:fe:de:5f:31:a3:ee:48:52:5a:b5:7f:9a:1a:
51:a4:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:13 2025 by rpki-client