Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: ZiM9yUGPQ1o4es02qgG2fJTc4CozPeeJgm76a2/nNgc=
Subject key identifier: AE:87:99:18:D5:9B:E9:53:BF:C6:1A:0C:9D:44:A0:5D:9D:FC:74:2A
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 01987FAF6285FD34DFD445CF2F855CA7B61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 1380
Signing time: Wed 06 Aug 2025 14:00:57 +0000
Manifest this update: Wed 06 Aug 2025 14:00:57 +0000
Manifest next update: Thu 07 Aug 2025 14:00:57 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: MA61z+24XYkHCNsJvFomhJelXwFxS8+hS1nE6vlhs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:62:85:fd:34:df:d4:45:cf:2f:85:5c:a7:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Aug 6 14:00:57 2025 GMT
Not After : Aug 7 14:00:57 2025 GMT
Subject: CN=ae879918d59be953bfc61a0c9d44a05d9dfc742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:4d:cd:a5:4a:ca:ac:c6:ee:f2:e8:a2:5b:
5d:e5:0f:53:20:c3:6f:a2:3e:07:7b:81:b3:28:5a:
dd:cf:e8:43:62:9a:2f:30:7a:47:a0:ba:2d:ba:26:
e0:75:18:e4:0d:42:ec:ed:d3:ce:0f:1d:18:2a:63:
88:0a:88:d2:5b:b4:35:75:6b:40:52:13:d2:fd:2f:
f8:74:8a:16:89:a0:00:48:7f:b1:4b:50:dc:54:32:
b5:fd:9c:87:3f:2c:da:ea:85:80:bc:87:fc:1d:cf:
36:70:48:1c:5b:df:0c:f8:ec:d3:fa:a8:67:82:90:
3f:fb:0c:28:7d:0a:c5:51:fd:5b:1f:de:ee:75:6a:
8b:45:a1:e7:4d:c3:f3:be:85:00:6b:98:03:f7:c7:
7a:a4:e5:af:4d:23:4f:9d:41:e5:88:15:f0:a8:8d:
c3:7a:f5:76:4a:48:f6:ab:31:6c:c7:ca:f4:db:87:
ac:1c:f4:21:79:b0:74:3b:dc:62:ed:c6:86:e0:cc:
52:ad:22:ef:47:ef:a5:3e:0c:b1:7a:a8:36:8d:65:
2f:fd:e7:0d:54:cb:6b:fb:3d:9c:64:2e:8d:f8:53:
06:6b:f2:6d:21:8c:9e:03:b3:37:bd:bd:80:01:be:
be:3b:5e:17:a8:54:14:b7:97:40:1a:88:2e:47:47:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:99:18:D5:9B:E9:53:BF:C6:1A:0C:9D:44:A0:5D:9D:FC:74:2A
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c2:2e:ee:31:9e:41:80:dd:02:d3:9e:b1:39:b7:aa:e3:bd:
c2:fe:66:d9:fa:92:68:b0:32:27:88:d8:78:0d:7d:82:d8:c0:
e0:57:0a:50:5c:28:7e:de:6d:96:31:87:e5:df:a2:17:97:12:
3e:23:b9:c6:37:36:e8:da:4a:6f:7f:ec:9c:a9:ef:fd:f0:d7:
e0:74:d1:7b:f7:47:cf:c8:6a:99:bb:af:7f:d5:68:81:d3:5e:
56:cc:98:7a:00:f2:9f:66:f7:de:13:c3:8f:5f:3f:03:0e:fe:
e0:fa:f7:c9:34:f6:7f:d3:6e:a1:8b:2f:d0:12:86:d3:e1:3d:
9c:c6:f0:68:45:c2:da:02:2d:6a:05:e1:36:01:8b:ff:ed:4f:
00:37:76:5c:2d:02:e7:7d:ea:47:f3:b6:b4:7c:ab:9c:66:19:
4f:14:3c:69:68:72:88:90:d5:bf:bf:6d:0a:a7:81:53:35:19:
04:e5:d6:56:5b:7e:f4:6e:31:49:33:49:e1:4d:cd:53:dc:79:
c4:8e:ff:5d:54:f8:00:ef:e5:61:af:47:00:1d:eb:a1:e0:87:
fd:df:92:59:83:7a:57:df:cb:aa:63:b6:bf:a1:3d:32:9e:fb:
c1:e4:4d:f7:f9:47:04:c3:5e:9f:45:c5:04:76:13:48:5d:f3:
57:a1:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:41:37 2025 by rpki-client