Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: 5a+5BKi/FDmabzawt/Vq+E8B593Md/gdmegGQAVtKU8=
Subject key identifier: F3:A8:0C:E0:74:5C:5F:CD:02:F4:1F:DC:88:2B:17:B5:E6:59:92:EF
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 01989712A74C05F80FDA18EF800FC4767FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 11E7
Signing time: Mon 11 Aug 2025 03:00:38 +0000
Manifest this update: Mon 11 Aug 2025 03:00:38 +0000
Manifest next update: Tue 12 Aug 2025 03:00:38 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: iCxXJHm8b19jDxSUxZMlw/nR1X3nGVNEq3cdi6STFaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a7:4c:05:f8:0f:da:18:ef:80:0f:c4:76:7f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Aug 11 03:00:38 2025 GMT
Not After : Aug 12 03:00:38 2025 GMT
Subject: CN=f3a80ce0745c5fcd02f41fdc882b17b5e65992ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:e7:37:87:bb:6b:64:84:66:fb:1a:e6:7d:
f3:b7:90:35:58:33:40:76:65:2e:c4:23:e9:13:44:
4b:28:4d:a7:ea:22:ee:56:93:d7:8f:51:1f:5b:db:
9d:a7:3a:8f:d8:ea:e3:5c:d8:99:59:83:64:8e:26:
4e:ec:09:10:bb:0d:05:71:c5:35:1a:0d:06:ec:05:
d3:81:8f:9c:fe:c8:aa:b7:53:2e:77:26:50:93:92:
d6:a5:c5:ba:00:f1:ff:6f:50:9d:3f:6e:1c:83:7e:
8a:8a:ce:f9:6e:37:04:87:b1:9d:0c:af:16:fc:d8:
b6:ab:bc:ce:05:23:1c:ae:c0:a3:34:2f:6c:3a:7b:
4f:e4:99:0e:47:f5:71:2e:46:d2:93:56:4e:c6:c4:
7e:d1:83:cd:09:72:37:23:70:cd:15:5c:73:28:74:
2f:c8:86:23:6d:29:dd:db:3d:88:6e:bb:86:d1:81:
cd:a9:e8:f7:ec:58:74:a8:d6:7c:c4:71:93:26:9d:
01:82:cc:81:50:72:77:77:93:ee:70:e0:0f:e1:8a:
06:ca:4b:08:3a:8f:a2:bd:e6:c4:f1:77:46:aa:56:
fb:a3:e6:d4:e5:71:b5:e5:99:87:b1:f8:b9:0d:2e:
e7:fc:6c:71:13:a8:07:3d:95:a2:00:af:f2:c1:66:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:0C:E0:74:5C:5F:CD:02:F4:1F:DC:88:2B:17:B5:E6:59:92:EF
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dd:ba:8e:ed:5c:c8:ae:46:2d:07:e7:1b:9e:cd:04:00:62:
35:a5:ef:11:a6:b7:0d:b5:e3:54:f9:fd:bd:60:ee:17:9b:41:
c1:51:82:9d:b1:b5:a3:9e:9e:de:61:59:2e:4c:9c:b2:58:7f:
35:ea:f8:85:66:51:5f:6e:3a:1b:d2:6c:2b:6f:f1:98:d9:76:
a0:a7:06:0a:a1:48:55:33:c1:5c:4b:78:5c:42:85:51:dd:ea:
32:3c:8d:30:07:5d:ab:16:62:fc:c9:b1:f7:c1:b0:cf:44:6f:
dc:db:6a:ff:c1:33:43:64:92:29:47:8e:08:e6:41:1d:93:f2:
56:88:be:63:db:57:da:54:84:6e:3d:e0:3e:d9:72:36:6e:48:
12:dc:b1:2e:f2:9e:5b:ca:13:47:a5:e9:6c:98:8b:76:3d:03:
32:86:d7:95:3f:a2:bd:01:f0:f4:ca:c6:e2:48:cf:49:c5:e9:
0a:4a:df:0f:b2:d9:18:5b:f6:1f:a4:65:1a:6d:6f:c2:8c:f5:
a3:28:0f:70:e3:b2:5b:4d:6c:2b:f7:ba:95:de:48:7a:06:bd:
be:cd:21:7c:e4:fa:61:07:7e:c0:a7:67:14:36:2a:16:a6:61:
2a:70:c8:2b:a8:91:b7:22:ac:5f:fc:93:ae:41:76:48:da:76:
24:bb:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:04 2025 by rpki-client