Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: U5EXRxEEUpINewDdMay5Pve4d20o/9vbdIkMCS64pNw=
Subject key identifier: 85:DA:3A:E0:54:15:F1:B9:7A:DD:AC:18:DC:34:2A:B7:55:0D:7B:B4
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 01988FC7A959AE8CDEC898CA3C7AD55E17BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 10D4
Signing time: Sat 09 Aug 2025 17:01:23 +0000
Manifest this update: Sat 09 Aug 2025 17:01:23 +0000
Manifest next update: Sun 10 Aug 2025 17:01:23 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: kX+V0uzl1t1LP7Jw8DSPniUepor90/NpjUz+752/mhw=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:a9:59:ae:8c:de:c8:98:ca:3c:7a:d5:5e:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Aug 9 17:01:23 2025 GMT
Not After : Aug 10 17:01:23 2025 GMT
Subject: CN=85da3ae05415f1b97addac18dc342ab7550d7bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:be:20:1b:ff:33:4f:fe:f2:56:65:33:8d:
aa:34:68:b7:bf:25:07:26:a9:c5:e6:4b:79:eb:49:
70:3b:70:0d:59:fa:77:fd:01:28:c2:c6:58:b1:15:
27:fb:a0:a4:1d:ca:6e:5e:c1:1d:bc:96:f1:44:f4:
c2:8a:3f:78:25:4e:42:dc:a5:10:74:df:6a:39:d7:
2b:d5:85:3e:21:8c:fd:58:99:ea:f4:99:59:81:b0:
15:02:c2:de:12:b8:50:89:01:34:37:bb:e9:d2:40:
ce:e1:ae:8d:9f:0b:bd:0b:07:6b:01:95:1e:02:6a:
3c:1f:c3:2a:54:ee:2f:79:6f:3d:4f:e3:b6:d7:98:
d4:b6:26:0a:5c:3a:2b:92:7f:a7:dd:0d:46:c3:2e:
79:3f:f6:0d:3a:db:79:98:9a:e1:97:9a:7f:f5:aa:
a8:7d:b2:38:4f:9b:70:5b:76:dd:66:75:7e:4d:bd:
17:3f:d6:e9:9b:31:f5:4e:1c:69:7c:16:fd:b5:7a:
9b:0d:f9:32:97:2a:e6:cf:37:9a:66:9f:e8:ae:29:
fb:9b:98:a5:77:94:84:1d:ef:6c:91:29:72:a2:5d:
a4:9f:73:f5:18:e3:4a:6c:0d:7e:50:8e:31:15:1b:
fc:5b:6b:38:a0:6b:26:b6:ca:f4:8e:6c:a4:91:10:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DA:3A:E0:54:15:F1:B9:7A:DD:AC:18:DC:34:2A:B7:55:0D:7B:B4
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ce:45:d5:8a:cd:90:62:b4:c7:5c:9c:fb:25:fd:a2:a9:64:
6e:09:66:80:ec:5a:2f:e2:31:3e:d4:50:50:47:57:91:f7:1c:
de:db:db:72:dc:0e:76:7b:46:df:6a:fc:26:c2:37:f2:67:f5:
a2:a2:4c:a0:62:ca:1f:6a:d3:57:3f:90:0d:f5:2f:8a:dd:c1:
a0:2e:4f:5a:0f:d6:59:1d:a3:c8:90:02:b6:31:ab:61:f9:9b:
19:bc:b0:40:51:85:8f:10:49:d7:39:b2:1e:ec:dc:d8:eb:c7:
f0:4f:3b:00:94:38:49:96:8f:3d:5b:7e:7f:5b:76:01:65:b0:
f3:bb:8c:1c:92:e9:04:76:01:bb:96:63:1d:71:12:08:a1:be:
e6:7f:f8:ef:13:6f:72:c7:3c:17:84:15:aa:ac:f1:58:f6:82:
4c:71:2b:b3:83:ca:c3:fa:56:ef:b3:b9:28:2c:9b:dd:13:2f:
ef:ad:1b:0e:6e:97:dd:bb:ae:eb:b6:f4:26:35:49:47:34:fb:
48:bd:c0:8f:a2:d9:38:e2:cf:92:a4:b5:ea:69:1a:24:68:2b:
f5:7b:3d:49:4f:16:c1:6d:b5:67:f4:c2:fd:1b:39:e3:9a:69:
dd:5e:24:f4:4b:f2:90:01:bb:3a:b9:14:74:60:ec:5a:ed:1f:
a5:f1:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:50 2025 by rpki-client