Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: 0kFkYwFTrH/Ul2/6xz6OWQYJw54pwO5Luy1RdIR9OU4=
Subject key identifier: 6B:B5:6D:40:14:02:28:47:C4:F4:F3:A8:CF:B0:87:33:23:90:98:38
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019874BD9C9E5146326D09AA6A990A1A669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 0F1A
Signing time: Mon 04 Aug 2025 11:00:40 +0000
Manifest this update: Mon 04 Aug 2025 11:00:40 +0000
Manifest next update: Tue 05 Aug 2025 11:00:40 +0000
Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=)
2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: lQIwaYzmuq+evZ8+WKwXR+D39Mh/V/SrNbqnmJdH9/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:9c:9e:51:46:32:6d:09:aa:6a:99:0a:1a:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Aug 4 11:00:40 2025 GMT
Not After : Aug 5 11:00:40 2025 GMT
Subject: CN=6bb56d4014022847c4f4f3a8cfb0873323909838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:47:bf:62:6d:79:1f:9e:25:8a:af:61:d6:
76:a2:87:20:97:ba:dd:37:a2:db:86:0e:e7:0c:7e:
d8:67:44:84:0e:5f:70:4d:78:4a:67:2a:f8:f5:91:
de:7f:63:07:23:3f:1f:37:41:77:ec:60:f8:04:75:
56:32:ad:53:07:90:76:2f:1f:fa:90:d5:bd:e1:fc:
d2:cb:eb:ed:52:be:e5:bd:f8:c0:2a:7a:29:b0:33:
ed:48:63:4c:0c:2f:f1:70:0f:06:a6:5f:e9:cd:b3:
c9:86:8c:7d:3d:82:80:52:a1:5b:b9:5c:90:ec:92:
ab:e7:12:72:5c:a8:f9:8c:17:b4:a3:3a:f7:87:88:
c7:60:98:85:16:a2:c5:fd:87:13:b5:8e:87:91:70:
27:0a:8d:76:3f:fe:3c:ed:ec:56:ea:b7:6f:65:f5:
6d:98:8a:ed:d5:ba:56:68:58:46:35:39:24:c5:4d:
0c:b0:ed:6c:7a:fd:6a:e6:0b:7d:77:0c:6c:c1:b3:
45:21:38:ea:f1:5e:12:63:11:5a:57:de:48:5d:97:
44:f8:a2:b1:d5:9c:6b:be:26:61:0a:9c:90:20:5f:
02:1c:12:6b:65:7e:d0:40:a8:7e:ed:eb:a9:82:7a:
dc:bb:ed:4a:4b:26:f4:d7:aa:c9:af:f1:58:49:cd:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B5:6D:40:14:02:28:47:C4:F4:F3:A8:CF:B0:87:33:23:90:98:38
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:7d:39:3d:08:91:6e:9e:d1:75:9d:ae:11:02:ac:56:cf:
1e:52:9e:50:e7:c7:57:74:02:d6:cf:45:a2:ce:48:14:94:a1:
4d:39:08:6f:85:da:d4:87:50:b4:1f:a0:5c:bd:73:49:4c:68:
2c:85:bb:25:68:b6:5d:5a:70:4a:9a:b3:0c:48:e4:b9:f0:1c:
71:1b:84:69:5d:d8:cb:4c:54:1a:28:48:8d:d6:db:60:7c:3d:
ff:19:bf:a0:eb:64:9d:4b:be:2f:45:9d:66:2f:d3:df:5a:de:
0b:34:03:89:fc:d0:e0:73:94:40:e2:89:90:cf:a1:4d:57:05:
dc:ea:23:91:bd:db:2f:5a:59:9f:4c:69:74:f3:04:3d:f4:7d:
91:2f:3e:3a:91:91:59:10:c1:9f:17:2f:4d:14:e3:c3:f8:4c:
1d:b3:96:df:45:9e:e0:86:95:4a:98:19:a3:f8:df:9b:3b:67:
a3:cd:d9:4e:30:54:d7:94:fa:2f:e8:ac:0b:8c:b1:e0:4f:cd:
67:20:c5:b4:85:ce:cc:b6:f2:a3:07:c2:a1:99:a1:45:49:c9:
ad:b7:8a:67:97:d1:87:84:80:00:55:13:34:db:d3:e4:c5:fe:
5f:c8:00:57:bd:3e:6b:1d:eb:1c:bf:57:62:82:5e:0d:95:90:
48:3e:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:18 2025 by rpki-client