Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: N2AlyJh8HNM9ZFtRiqVuoalZV4HTJlyxvWD9HA8P5kY=
Subject key identifier: 0E:09:51:0B:54:19:78:21:46:B3:BC:91:FE:66:96:03:FB:97:8B:42
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 0198A64F248D6BEF948663513EC1F88173D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1635
Signing time: Thu 14 Aug 2025 02:01:01 +0000
Manifest this update: Thu 14 Aug 2025 02:01:01 +0000
Manifest next update: Fri 15 Aug 2025 02:01:01 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: 6ZNPjUmbhG/5xFcBBtufDnjZSwZ7zlYLr/FsQC+4eEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 Aug 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a6:4f:24:8d:6b:ef:94:86:63:51:3e:c1:f8:81:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Aug 14 02:01:01 2025 GMT
Not After : Aug 15 02:01:01 2025 GMT
Subject: CN=0e09510b5419782146b3bc91fe669603fb978b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:62:35:1e:28:9f:22:7d:83:09:25:28:92:
b1:0a:35:d9:28:09:a6:d0:b3:2d:83:5d:a6:c6:87:
20:88:72:f8:46:71:70:a2:53:1d:de:ed:3d:73:09:
1a:5e:53:51:cf:ff:8c:bd:8d:06:d0:c7:5b:7d:a7:
13:77:42:e1:4d:ae:14:a7:5d:fe:da:85:5f:cc:69:
02:05:35:60:85:be:2f:bb:52:3f:5a:02:33:2e:d3:
21:6b:6f:c3:87:e4:e3:7b:3c:1a:79:c0:d8:6e:bd:
ed:1a:f3:a5:18:2e:b3:49:24:ae:d3:eb:ac:4a:1f:
6f:4f:67:58:73:39:6a:30:a0:8b:c4:92:32:b9:6b:
8f:4c:77:a5:08:3f:8f:99:d0:bd:a0:62:b2:c0:ef:
05:79:ce:ea:00:18:61:95:28:be:db:fe:e4:5f:32:
90:f5:28:19:54:2f:8e:09:b0:28:50:98:04:e6:4d:
cc:6e:eb:52:82:83:76:d0:06:b6:b9:92:74:d6:81:
f9:3c:95:a3:77:95:5a:fe:52:ab:23:a3:df:da:a3:
3e:0b:bf:eb:99:68:09:06:db:69:1a:7c:b1:e1:6e:
96:7d:52:57:42:e3:c2:03:9a:52:76:4a:48:4f:3a:
2b:33:90:83:35:4a:43:f2:58:c0:0d:89:99:5d:c7:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:51:0B:54:19:78:21:46:B3:BC:91:FE:66:96:03:FB:97:8B:42
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:9c:25:a8:1b:b3:f6:c2:44:11:e7:ca:5f:a7:24:40:1a:ab:
e5:5e:bf:b1:77:c4:96:c1:b1:a5:cf:ae:3f:07:5e:e5:25:52:
5d:56:a1:ab:82:2b:75:74:bb:01:a9:58:8a:02:85:a7:a3:ca:
a2:9a:04:75:b6:1b:72:f7:6d:58:36:d5:c4:7f:e5:2e:4a:45:
5f:5d:85:03:ee:b6:83:b2:fc:7d:a1:80:8f:e3:33:d4:2b:4a:
c4:25:43:7f:07:e1:8a:1f:28:95:67:dd:14:13:43:a3:f2:fa:
af:c3:4c:36:e2:7d:0e:04:8a:32:fd:83:8e:f0:34:d1:1c:ef:
8e:10:ae:e3:34:a1:40:c9:ca:d5:9d:ed:9a:85:44:8a:ab:f1:
35:fa:07:11:10:ec:cc:4a:c3:bc:68:0b:0d:2f:8d:74:41:05:
aa:97:44:30:13:87:58:78:b4:48:9e:0a:9b:77:cc:95:73:83:
9b:ab:b4:14:23:f7:3e:1d:cf:5c:fb:48:19:c5:70:bb:1c:fd:
57:b8:ae:10:ea:89:ba:01:c6:1e:61:66:d4:81:a5:f9:b5:3d:
f3:fc:51:59:d7:e8:48:5a:e4:1b:bb:87:5c:e9:b4:1e:b0:72:
07:71:d6:ab:b2:76:ea:2c:24:be:9d:75:b4:6b:f2:7d:72:60:
d3:e9:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 08:54:59 2025 by rpki-client