Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: Q0CYXWCdVD7SdmzB1f/I+u+03L7a/HpEJzzYTfcNwX0=
Subject key identifier: 02:6D:8B:C0:3D:0B:B5:42:A7:0F:35:C8:1E:75:0A:64:5D:FB:76:F5
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 0198752BEB698C68C6F313F53E67C6A8C157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 13:01:09 +0000
Manifest this update: Mon 04 Aug 2025 13:01:09 +0000
Manifest next update: Tue 05 Aug 2025 13:01:09 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: yFyoQwTb25O0b4lmTzuj3g3QpWXTCd1PJq9RBLDAzjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:eb:69:8c:68:c6:f3:13:f5:3e:67:c6:a8:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Aug 4 13:01:09 2025 GMT
Not After : Aug 5 13:01:09 2025 GMT
Subject: CN=026d8bc03d0bb542a70f35c81e750a645dfb76f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:97:4c:3e:3b:c8:2e:7e:3e:26:bc:fe:89:
fd:81:30:32:05:69:66:d3:f9:82:9e:59:46:19:fa:
50:d8:ef:76:65:23:c2:6e:b6:f2:88:49:75:0a:b7:
c7:48:51:75:45:75:04:47:01:97:b8:23:0f:db:1c:
6f:3d:d9:6f:78:1a:64:45:85:f5:2f:2e:ce:17:82:
b6:06:26:ae:9f:09:b0:3e:8b:3b:39:21:55:e5:83:
40:cd:86:a4:aa:92:eb:84:e7:c9:b1:4a:1c:0f:e4:
1b:b3:0e:a5:46:56:03:f9:72:16:07:2f:ca:b7:1e:
dd:d7:ec:89:f5:27:02:d4:17:c2:61:ff:33:96:1a:
d8:7b:c2:68:54:4f:15:e5:c5:25:87:54:fd:98:5c:
51:0a:ec:94:2f:fc:13:d7:51:28:bb:ba:b2:15:99:
e9:3b:bb:d2:9d:e9:e1:10:13:9b:cf:71:89:52:57:
c5:21:aa:ab:ba:4f:5e:04:4e:c6:c1:6d:7c:28:5c:
8b:42:71:6d:3c:f3:33:93:34:83:10:e3:e2:9e:6b:
f3:93:14:40:55:6f:b7:1a:ac:eb:3d:8f:49:47:4a:
ef:c1:98:2f:32:d0:c7:eb:8c:c1:40:18:d5:5e:84:
5a:d4:84:1b:5c:ac:52:97:7d:90:6a:c1:a6:20:08:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:8B:C0:3D:0B:B5:42:A7:0F:35:C8:1E:75:0A:64:5D:FB:76:F5
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:33:31:83:21:08:d5:1e:c3:dd:58:9e:a0:dd:13:04:24:e7:
cc:98:6d:9e:61:bd:09:82:1a:ba:c5:ef:c8:72:cd:0d:80:ee:
d7:6d:6e:82:34:a2:f0:1f:3a:ad:5d:b6:e2:d8:35:39:6f:32:
05:a2:ec:37:e7:31:a1:89:fa:af:a6:b3:df:84:34:f9:33:ae:
02:89:35:98:eb:d4:3b:cd:57:22:32:48:3b:96:51:54:b2:1f:
28:44:12:2b:08:04:d3:1c:39:aa:f4:7a:0a:8d:f8:9e:f4:a0:
dd:6c:21:90:dd:37:b9:0e:e0:49:08:2d:96:25:70:de:d8:d6:
d8:67:96:f3:9f:57:df:8c:fc:60:13:93:04:35:1d:82:8b:30:
65:17:13:06:c4:ff:36:aa:86:23:98:07:38:bb:07:e5:93:01:
df:39:e7:71:2e:80:cf:6d:b7:42:09:77:a3:d5:a7:90:d6:f2:
9a:28:99:b4:ce:33:bb:ba:12:bc:66:fa:2c:fc:f5:26:65:84:
ba:5f:00:42:c6:e0:7a:e1:e6:76:e3:7b:1b:88:5c:d5:61:9e:
17:5d:83:31:80:e2:01:56:ad:42:8a:c6:cc:0b:04:a5:c2:a9:
37:56:d0:2e:6b:27:c0:f9:42:79:c6:5c:51:f0:45:e7:28:c8:
7c:11:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:17 2025 by rpki-client