Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: +zq77RCUIpNZCOsmxM8Bl8eJgZyRcEY7YW+YLQCJ/Vs=
Subject key identifier: 56:55:AF:3A:6B:44:19:A2:A0:F8:93:25:69:47:EF:14:9C:41:40:AE
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0198D404A55F8A802F328F2D17C39D386EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 164C
Signing time: Fri 22 Aug 2025 23:02:10 +0000
Manifest this update: Fri 22 Aug 2025 23:02:10 +0000
Manifest next update: Sat 23 Aug 2025 23:02:10 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: zn8Nr0+E45lEDPf51sdncPkkdhxadxVahaZ8j1EuoeE=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a5:5f:8a:80:2f:32:8f:2d:17:c3:9d:38:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Aug 22 23:02:10 2025 GMT
Not After : Aug 23 23:02:10 2025 GMT
Subject: CN=5655af3a6b4419a2a0f893256947ef149c4140ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:5a:98:22:b0:37:59:82:4c:8d:02:2b:ce:
0d:84:af:16:ba:eb:ed:0b:0a:01:eb:9f:0c:33:aa:
aa:29:98:a9:02:41:ed:46:06:3e:e0:a3:db:07:38:
6c:4a:2d:76:b4:64:5f:f6:a8:ab:46:30:90:4e:82:
46:9e:bc:ee:23:7e:57:ac:d3:fc:93:79:e4:4b:e9:
43:9e:01:d5:a3:e2:d0:4e:fa:70:47:cb:a2:df:36:
d7:93:23:2f:80:f3:8a:d8:7e:85:9d:28:db:40:ec:
ff:59:07:56:73:9c:f2:bd:d9:16:32:c1:66:89:d3:
a5:79:54:e4:43:d9:7c:e1:65:74:68:6d:df:68:57:
6f:b7:39:e0:c5:a6:65:74:1f:9a:99:a8:4b:bf:e4:
01:45:50:f3:22:a3:10:80:7f:1a:9a:d6:c1:36:e6:
d8:aa:bf:9b:e5:04:e0:56:ce:a3:d9:82:38:68:b7:
54:46:9a:1d:34:4e:d7:d4:b1:10:d3:5e:84:60:35:
a2:42:1c:69:4b:7b:f7:98:3e:57:40:d1:fc:4f:43:
9c:ba:77:15:5a:a2:af:81:4f:8c:87:15:11:4c:60:
cc:11:06:c4:2e:15:d1:80:5b:0c:d7:0f:01:1f:3d:
7b:16:98:d3:13:a7:cd:d1:ea:52:e4:56:10:cb:2a:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:AF:3A:6B:44:19:A2:A0:F8:93:25:69:47:EF:14:9C:41:40:AE
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a7:39:a0:67:b5:7c:21:b8:e8:4f:50:f1:d8:c7:0b:af:b5:
66:16:45:26:fa:28:8e:7b:49:48:00:3c:1e:09:f0:a5:4f:b2:
11:a6:74:cb:98:44:18:7a:f1:8f:3f:6a:21:25:e9:ae:c0:83:
65:30:04:49:42:3e:29:c9:76:4a:bd:9d:0e:7e:c2:d8:e8:bf:
57:a0:2f:77:57:02:18:a3:9c:98:4d:f2:64:3a:fa:2e:f7:69:
ef:aa:38:5a:4b:00:10:b1:7f:dc:2f:7a:b4:9b:ea:84:b0:ea:
9e:6c:5e:27:28:7f:41:4a:55:2e:17:9e:06:9f:20:1f:1e:f7:
69:06:dd:84:27:12:54:fa:34:97:8c:7d:de:01:3c:f9:33:f5:
98:c4:4a:df:79:a1:50:f7:3b:ff:91:6a:7e:2a:63:f1:d6:ed:
fe:6f:80:d5:1f:8a:f2:fd:52:79:78:58:cf:c9:ff:96:2c:31:
48:ab:67:72:9f:cb:3c:0b:27:9d:58:b0:85:d6:73:ac:d5:fe:
72:eb:ee:66:e6:24:9b:3e:d0:dd:60:a5:8a:1d:58:3b:e6:e7:
e2:4c:03:cc:5d:76:69:6e:6f:76:7d:9b:dd:68:ac:3e:b8:2a:
9e:d1:a7:8d:dd:f0:a7:12:65:38:7e:a5:27:0f:c4:90:9a:ab:
35:da:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:36 2025 by rpki-client