Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: SGmT/MiX94U3o//hbqjMyY1vP/No0jfCBr41trYQQyU=
Subject key identifier: 68:CE:19:E7:14:CD:A5:2B:DF:FB:C1:31:4F:9F:BA:BC:44:6A:35:74
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 019881D53326DEC55F7C62B08E2B9372C2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0537
Signing time: Thu 07 Aug 2025 00:01:29 +0000
Manifest this update: Thu 07 Aug 2025 00:01:29 +0000
Manifest next update: Fri 08 Aug 2025 00:01:29 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: dc/srRYx12WLP8dgGBTk8/GG4LTMcF5ObrTmbe7U+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:33:26:de:c5:5f:7c:62:b0:8e:2b:93:72:c2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Aug 7 00:01:29 2025 GMT
Not After : Aug 8 00:01:29 2025 GMT
Subject: CN=68ce19e714cda52bdffbc1314f9fbabc446a3574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:5d:72:28:81:1b:ea:0c:53:0c:08:25:a4:
8c:55:c4:80:b3:e7:a9:14:e4:03:20:ee:d2:55:6d:
62:52:66:e0:12:bd:90:6b:93:11:98:93:8c:25:cf:
ae:d2:25:2a:76:dd:df:17:ff:1b:ab:a7:a3:d8:2f:
99:2f:e3:49:40:c1:ac:14:ae:1b:33:7c:c2:6f:fb:
17:ea:9b:43:4b:01:0c:8d:71:60:82:54:fc:17:ee:
17:1e:a8:fb:ab:49:f3:3e:a1:a4:4f:93:16:60:1b:
2f:e8:6c:9d:21:a5:e3:71:c1:9d:03:9d:31:ef:ae:
14:9e:a7:57:6c:4e:f3:49:28:e3:d1:7b:60:1d:40:
76:a1:af:b7:a2:bb:12:3f:5f:dc:8d:a0:99:3a:f5:
5d:83:10:48:ac:d2:22:fd:9b:f1:18:d2:e7:c0:79:
08:2d:83:4e:99:0c:74:9e:f8:c2:c7:10:85:85:f7:
7c:5d:f8:1f:98:02:36:9f:41:56:4b:40:9d:f1:80:
79:aa:41:ef:f9:73:32:b4:a6:a1:18:ba:73:66:8b:
8f:9b:06:cd:61:1b:ff:3b:df:7d:17:c2:b8:ee:45:
fa:db:91:f4:bd:83:57:13:5d:46:16:77:a2:aa:be:
45:b9:51:f8:43:48:94:8a:5b:e0:42:16:30:17:ee:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:19:E7:14:CD:A5:2B:DF:FB:C1:31:4F:9F:BA:BC:44:6A:35:74
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e7:77:fa:55:e5:f9:31:10:90:46:4c:4e:8f:1b:8f:a3:d6:
45:0d:cd:ee:cf:b1:78:4a:52:b1:d7:dd:1c:7d:34:c3:26:89:
83:b7:bc:71:eb:ff:1e:98:05:2b:42:10:40:7e:9e:96:94:3f:
7e:6d:f8:b9:6f:8f:3b:ed:4d:08:02:b1:94:1a:e3:1a:37:df:
a9:78:14:91:4d:02:b8:a9:68:ba:e5:e6:3b:0c:68:d5:d1:6a:
62:c8:26:78:6b:95:c1:a7:59:c8:d9:b4:10:63:07:67:a5:c4:
dd:38:60:b2:e2:a4:52:5c:3e:ab:0f:bf:b8:f3:49:7a:c6:5d:
27:26:68:ff:75:a8:ff:13:3c:e2:bb:aa:8a:90:50:2e:14:29:
45:d5:36:be:d9:d7:d0:d4:bf:c4:c7:53:dc:95:20:b4:3c:0b:
9b:48:96:d2:e2:3c:be:cc:85:45:65:14:a2:a6:b6:28:17:4e:
26:c9:2f:80:72:e5:31:de:9c:c3:b2:e3:bc:2d:07:6c:bb:a7:
00:65:5a:58:41:00:d3:d5:aa:69:5e:90:e3:8a:d0:07:66:36:
93:df:69:cb:c7:74:6c:6e:f3:42:1c:a4:5b:d0:f1:41:37:08:
28:ba:18:8f:c4:a1:8e:85:2b:29:04:2f:02:f0:e2:1c:dd:6a:
09:26:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:11 2025 by rpki-client