Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: +3DPi1vX+3+TsVAavNgjhkW1XWH/LPtEFHIesnWD/VU=
Subject key identifier: E4:5B:D7:F4:D7:00:74:3F:78:05:34:73:06:E7:F9:6D:EE:46:AD:6E
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019897130DFC2A5E29EE1800EEF83441D9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 03:01:05 +0000
Manifest this update: Mon 11 Aug 2025 03:01:05 +0000
Manifest next update: Tue 12 Aug 2025 03:01:05 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: NBa9SbiA/wjI0lZuJilcSag3KssuaohYLB8qmOvrSCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:0d:fc:2a:5e:29:ee:18:00:ee:f8:34:41:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Aug 11 03:01:05 2025 GMT
Not After : Aug 12 03:01:05 2025 GMT
Subject: CN=e45bd7f4d700743f7805347306e7f96dee46ad6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:68:75:db:96:cb:43:13:e9:01:1c:8d:bd:
6f:e9:af:24:a0:2a:d4:aa:4a:3d:35:79:d2:11:5d:
f4:6e:ce:a7:c3:d4:83:de:4e:1f:6b:f4:c9:b3:ab:
af:b9:2a:29:0f:35:80:e4:44:db:9f:39:f9:73:fb:
f7:e7:f0:c0:ff:b2:95:22:fe:b4:eb:0e:79:af:f3:
a6:21:99:f8:18:0e:fb:d1:99:eb:31:12:21:13:a1:
db:31:8d:45:1f:c5:6c:80:68:f6:37:fe:46:82:44:
ed:7e:3a:6e:28:a3:b7:6d:90:55:09:1c:20:ca:cd:
9b:a3:45:00:14:86:b0:dd:0f:23:b1:5b:ef:80:94:
9e:07:b2:80:1f:3e:55:8c:bc:d4:56:ac:e3:fd:49:
c6:af:9e:1c:5c:e6:d0:5e:51:14:b2:de:6a:2b:17:
fd:78:85:21:18:fd:75:f8:16:b7:81:f0:eb:c9:38:
f9:76:4e:ae:06:d2:ac:ec:b8:9f:0c:e9:ce:46:c0:
70:40:9d:ed:4c:fd:02:3b:65:18:e3:b8:60:e1:60:
8f:61:81:f5:64:44:20:bf:2b:f5:46:ac:ef:1a:dd:
c6:75:bb:b0:bb:5b:7d:b3:0d:5d:77:50:89:cf:bd:
fe:01:19:80:85:a1:f0:e0:c8:84:36:95:19:db:1b:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:D7:F4:D7:00:74:3F:78:05:34:73:06:E7:F9:6D:EE:46:AD:6E
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fe:55:72:4d:d6:18:fa:93:b1:1a:7e:0d:13:a7:02:07:95:
04:5f:3c:76:5a:83:ca:2c:50:14:bc:8b:d2:3d:a8:9b:54:aa:
aa:d1:13:cb:ca:bc:2e:0c:00:6d:63:5c:21:91:c9:ea:39:2a:
7d:fb:14:23:8b:a5:bb:52:70:a1:ff:7f:5b:8f:3f:b3:66:ac:
b6:79:f1:7b:2f:e3:20:6b:eb:c2:60:76:53:ce:af:8f:93:c0:
30:4f:0f:72:59:16:5e:fb:34:71:c5:b3:63:ad:f4:34:3e:c6:
a0:79:0e:d1:61:86:35:a1:e7:f2:be:5f:50:d2:6c:84:2f:a0:
ab:96:b5:b2:0e:a4:6e:36:f0:5a:7e:85:f3:75:9e:c0:e7:57:
c2:c2:7c:1b:48:6f:4b:b6:ba:67:54:0d:8a:79:b4:2a:49:35:
6f:c3:a2:1b:4e:e7:e1:65:29:b8:3a:ff:65:fa:dd:24:e0:9f:
79:6a:c9:e2:52:4e:9c:46:c3:c9:c1:3d:e9:d6:70:ec:aa:ea:
46:22:ea:0d:98:30:45:26:0e:aa:e4:be:3c:c8:f7:e8:10:36:
b0:9e:62:e0:2b:e6:3d:45:6f:0a:83:a0:fc:45:d3:75:bf:af:
0f:70:c5:ba:a7:28:9b:9b:e8:a8:4f:c8:5a:cd:ee:15:80:37:
58:12:2d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:12 2025 by rpki-client