Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: 8dIKoqGhZ/K2ErFZE0FEIkW9/tR4bOHX6IqpvOJNyTw=
Subject key identifier: E9:BB:40:CC:90:1E:D5:BE:A4:79:7C:B8:47:21:72:26:C3:4D:FE:0E
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 0198733D67F0671B0EB8BCB4CB208EC91D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1351
Signing time: Mon 04 Aug 2025 04:01:00 +0000
Manifest this update: Mon 04 Aug 2025 04:01:00 +0000
Manifest next update: Tue 05 Aug 2025 04:01:00 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: 7RK1Ynw7JN0zVpnOVXxD1haQLvQSbnaBTjf3QZUKKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:67:f0:67:1b:0e:b8:bc:b4:cb:20:8e:c9:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Aug 4 04:01:00 2025 GMT
Not After : Aug 5 04:01:00 2025 GMT
Subject: CN=e9bb40cc901ed5bea4797cb847217226c34dfe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:bb:4c:58:7e:fd:3a:ac:f1:c4:48:f5:fb:
2f:28:69:90:b0:ac:1c:be:14:ce:30:a1:2d:35:44:
73:c8:e1:f4:c6:af:a5:ee:af:ae:ee:fa:78:4c:57:
ed:89:cc:40:40:77:fb:c3:97:5e:73:a2:6d:38:91:
be:03:17:ae:83:ab:f6:df:ba:34:fc:64:44:7a:cf:
53:cf:18:c5:85:26:c0:0b:a2:d9:59:ee:cf:68:c3:
f7:ae:fb:ed:21:9f:22:f4:3c:ad:47:6b:64:7e:4a:
97:cc:6f:ee:9b:72:2c:b4:0c:d4:80:26:4b:2f:31:
4e:c6:08:40:f3:17:81:47:c1:8c:e6:27:e2:25:38:
7c:1e:00:90:81:8c:68:be:98:4f:02:5e:26:15:de:
12:21:90:52:d3:eb:91:95:0d:86:99:c3:3e:9b:64:
f9:f4:7f:4a:be:b5:fa:9e:d4:3d:f3:a8:62:40:ab:
47:c3:96:83:d8:24:0f:0a:6a:07:5a:86:c6:54:fc:
43:31:c6:df:da:69:80:78:16:fb:5f:7a:53:b0:cb:
03:4b:1c:98:99:db:8d:3a:ee:57:a8:78:3a:7c:fb:
ba:f9:3e:d7:32:e6:e4:4d:f8:d9:d4:86:42:d3:43:
29:e7:ea:24:0a:f0:f0:6a:b6:f5:fc:e5:25:07:da:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:40:CC:90:1E:D5:BE:A4:79:7C:B8:47:21:72:26:C3:4D:FE:0E
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:46:b2:09:6a:52:d8:99:56:6e:f6:ae:d2:43:48:66:72:1d:
ad:64:34:0a:20:96:95:97:52:ae:0a:26:52:4c:26:bb:2a:b0:
aa:cd:33:94:00:63:85:5f:d5:8f:63:27:cf:c5:a7:dd:e2:5f:
8c:57:9e:77:78:ab:15:1b:8e:a1:4b:a6:81:aa:3d:fb:20:cb:
07:7d:62:98:d4:03:29:5c:1b:ed:3e:69:79:e4:7e:63:63:2b:
aa:32:4b:6d:10:f0:42:9b:f5:ac:47:9f:67:cd:11:4e:d2:53:
e1:c9:bc:a4:3c:cc:b7:bd:7d:4b:9f:6a:9c:4b:f3:da:00:55:
2f:6f:49:89:f6:c1:96:ad:f4:84:05:11:0e:43:19:4c:84:7a:
09:0a:44:f3:e8:e3:41:55:af:52:a0:5a:b2:27:77:71:eb:f2:
88:45:51:b4:d2:7d:d2:70:1f:cf:b6:4a:a5:7d:6f:4e:31:fb:
a5:3b:ea:3a:fe:8f:99:ee:7f:5f:1f:6b:32:62:f2:ab:62:86:
fe:2a:a7:cd:6e:0b:8c:2b:be:de:24:4c:4f:df:3d:18:f6:50:
7f:96:95:de:59:9a:b7:d9:a3:84:61:a3:64:4d:d0:bd:fa:30:
27:e2:4d:e2:91:85:4b:0f:90:be:18:37:1a:d8:93:96:d5:38:
12:4c:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:54 2025 by rpki-client