Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: wl3BeoLXStQfZoXE5eu8pPglaazBane8bjWubCteXGY=
Subject key identifier: FA:7D:5B:E5:0C:62:31:5C:E8:4A:7D:AB:E5:D1:37:70:BA:7F:94:FF
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 01987E663A8CF12AAE50AA4680B9B5F1223C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 151A
Signing time: Wed 06 Aug 2025 08:01:25 +0000
Manifest this update: Wed 06 Aug 2025 08:01:25 +0000
Manifest next update: Thu 07 Aug 2025 08:01:25 +0000
Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=)
2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: 4pB6y+sD/SMOWfj+DWzswQeING97HPaoW4g0apAyzp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:3a:8c:f1:2a:ae:50:aa:46:80:b9:b5:f1:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Aug 6 08:01:25 2025 GMT
Not After : Aug 7 08:01:25 2025 GMT
Subject: CN=fa7d5be50c62315ce84a7dabe5d13770ba7f94ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:5e:15:a0:1f:20:1e:69:2a:5c:78:7d:56:
3f:84:cd:57:ff:d4:c8:48:7e:d6:57:2e:dd:8b:f7:
fa:db:2c:2c:7b:10:ef:7d:ac:d2:ea:df:73:9f:60:
7d:f7:69:56:19:6c:2e:87:79:c7:f3:8e:11:01:22:
6d:6e:93:78:5b:19:1e:9d:a5:e9:74:d9:51:f8:86:
0c:6b:63:ee:24:f7:e2:13:6c:e5:75:07:9f:6d:7f:
71:56:b2:96:6d:46:95:25:fd:13:8f:0a:ba:95:0f:
5d:ee:6b:93:87:0a:6c:7e:bd:04:c8:11:95:7b:bc:
7e:2f:b0:05:d7:d0:5c:71:7b:52:1b:84:18:72:48:
60:4e:e6:9f:ee:a4:51:2e:09:e1:99:e2:8b:ae:3d:
c9:3e:08:7e:6e:60:1e:29:5a:b0:b0:84:11:dc:7f:
45:13:28:97:7a:9a:cb:42:17:5f:a3:3d:cd:8e:af:
09:4e:1c:e1:a9:10:4c:ba:a9:e9:5b:3d:9f:db:47:
83:12:f0:d2:28:c8:0c:22:d4:1a:6a:b5:f5:17:48:
28:68:1a:50:02:18:d2:e5:a7:51:75:8b:46:fc:9f:
6a:6e:33:7a:f9:f3:71:fe:14:59:9d:e3:c7:a0:73:
34:27:40:40:e4:4d:82:7b:79:ab:df:be:5b:e5:2e:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:5B:E5:0C:62:31:5C:E8:4A:7D:AB:E5:D1:37:70:BA:7F:94:FF
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f6:4f:be:59:1a:a2:fe:d0:19:cf:e8:25:75:98:26:ca:42:
59:f6:cf:9a:4b:92:92:07:6b:7e:6a:be:62:75:8b:dc:c5:25:
54:f3:bb:30:62:49:0c:64:b2:e9:ad:9b:25:4b:c4:3e:ae:ea:
66:ef:e5:80:ac:bd:ae:12:48:f6:26:96:5e:a2:b2:41:6c:9e:
cd:4d:d7:6d:04:16:d2:7d:b5:92:2a:68:6b:53:d5:25:ee:e6:
b7:55:df:65:1d:20:2c:5b:c6:31:18:45:7c:6d:f1:58:03:d9:
9b:cd:d2:35:e2:4f:01:ab:26:a7:d7:a8:3c:fe:72:d3:00:88:
08:5e:2c:b7:81:fd:ec:94:4f:c9:45:e7:7b:e1:88:e7:d7:89:
d9:02:34:93:ef:d1:71:e9:7d:65:24:43:a5:db:26:60:2b:71:
77:b7:db:c4:7b:f7:a9:ab:10:72:2f:94:fd:0e:1a:31:55:9c:
1c:bd:2a:65:96:9b:00:cc:bc:0d:d9:7d:1c:c9:48:ee:bf:ed:
be:4f:ec:8e:c4:d0:f5:d2:44:2e:96:df:27:93:9e:87:6a:ad:
aa:90:38:58:67:95:02:cb:9f:c5:c9:07:76:d6:dc:5f:d8:86:
d5:bb:ea:42:d9:94:6b:e7:49:c4:63:06:49:d8:c8:df:f9:dd:
2c:4c:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:53 2025 by rpki-client