Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: 9kehR0SS+b9UQqJvhzV75tnShUn5V2EYU8qmkzlQSZ4=
Subject key identifier: 77:F4:F2:69:87:76:16:2C:53:33:28:B5:7A:E2:EF:87:40:13:02:44
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 0198D515F33A40DFAC46DDC82311D3AB92CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: XTZWi7hchVwQ2yInZNsY9FdLtpgfkiiowF6LcmtLncs=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f3:3a:40:df:ac:46:dd:c8:23:11:d3:ab:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=77f4f2698776162c533328b57ae2ef8740130244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:c7:d1:f9:2f:9a:4a:5e:e3:6b:7b:4e:74:
8c:eb:ad:83:07:0d:bd:95:88:1e:69:96:80:1a:3d:
78:77:f0:e7:e4:3d:b4:3b:bb:48:72:e6:92:50:db:
d6:a3:27:ad:87:17:ef:76:ec:47:5b:a7:39:dc:4c:
2a:e4:97:ab:74:41:4a:b5:1a:79:3c:92:5e:0c:fc:
a6:3e:c4:9e:e8:f5:06:30:be:e9:42:25:1f:81:75:
0d:66:d0:cb:0f:31:9d:e9:df:3b:24:b0:af:65:32:
08:d4:a0:85:86:45:25:16:48:02:0d:a6:ea:ff:4b:
99:2d:ff:1c:bc:93:18:2b:28:8e:3e:1b:77:50:f2:
70:35:1f:61:9f:07:a7:af:8d:f6:4f:60:95:14:dd:
10:84:9a:94:24:b1:2d:8e:5c:24:1d:90:0e:1f:a4:
85:b1:30:a2:8d:a5:d0:f6:ae:6f:ee:e8:de:82:c0:
77:fe:a4:89:0d:d2:9b:81:81:3d:8c:aa:23:57:a7:
42:d2:fd:b1:18:e0:4f:d7:72:cb:b0:b0:0e:bd:55:
b5:42:5f:72:55:56:b9:4a:c4:8d:5f:85:3d:9f:a4:
9f:6e:91:c3:28:ae:58:0a:6c:70:ab:75:d5:81:6e:
6c:73:9a:8c:8a:fc:7b:22:76:14:20:2e:8b:02:29:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:F2:69:87:76:16:2C:53:33:28:B5:7A:E2:EF:87:40:13:02:44
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:8c:bd:89:f5:17:d0:67:49:1f:35:27:8c:e7:83:27:c5:
7a:e4:a3:a4:55:15:ee:5c:03:ae:58:3f:a2:56:f8:c7:b7:b6:
a4:bf:fd:b7:fc:96:2e:7e:11:9c:7e:01:99:a5:e5:3f:28:d2:
dc:cf:ab:4e:ca:0f:b3:53:47:c9:e9:78:21:54:fe:6e:cc:1c:
f7:ff:58:10:2a:a1:e0:94:09:d4:8c:b9:24:58:3d:cf:87:0e:
71:4c:3a:8f:46:04:df:8b:d7:ee:bb:cc:ed:dd:27:02:bd:36:
a3:7d:b2:38:76:1b:db:5d:46:05:48:b7:ae:40:f8:8f:df:44:
40:e1:f4:be:70:a9:ab:5a:04:a9:d3:50:bc:b6:3e:03:1d:e6:
ee:5c:b6:5b:f7:3e:28:9b:8d:dd:6d:5c:3b:a7:40:69:f2:15:
05:8a:99:95:8d:43:81:a1:f1:06:07:00:7f:f1:91:3d:1b:68:
42:28:b2:f9:9a:7c:1b:89:b4:f0:49:e7:e9:d0:1c:b7:df:75:
11:fb:fb:1d:4e:44:31:71:41:b5:79:33:03:d8:8e:b0:d7:74:
7b:b9:38:c9:d0:b0:42:db:ab:80:be:d9:ca:2a:a8:33:56:28:
2b:08:30:02:fe:55:51:e0:6e:04:d2:5a:d9:8c:09:fa:37:44:
d6:8d:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:41 2025 by rpki-client