Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: iXUNi8SQqjrFZQHy5Tj7kvedvM56tB3hz0iEQXGvSUI=
Subject key identifier: 4A:BF:EC:7F:97:65:BA:DB:DD:09:7D:16:30:E9:0B:7C:18:59:A7:87
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 01988AA08403A08BAE28E4C36B220F70688E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 01F1
Signing time: Fri 08 Aug 2025 17:00:31 +0000
Manifest this update: Fri 08 Aug 2025 17:00:31 +0000
Manifest next update: Sat 09 Aug 2025 17:00:31 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: oDgkKxDfS/f67TScMBAZhD7Ofo0uohU3KJB4nIm2/hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:84:03:a0:8b:ae:28:e4:c3:6b:22:0f:70:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Aug 8 17:00:31 2025 GMT
Not After : Aug 9 17:00:31 2025 GMT
Subject: CN=4abfec7f9765badbdd097d1630e90b7c1859a787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:27:4d:21:d5:22:4f:9d:1e:69:43:38:4c:
f5:c9:90:4d:dd:92:8b:c1:5c:6c:3d:bb:c2:39:f5:
4e:f1:ff:1d:23:9c:74:41:c8:7b:31:0b:2f:2c:58:
ea:17:38:7e:63:98:f3:22:90:0b:eb:8e:b3:bb:35:
e6:74:c9:7e:65:ea:68:cb:36:d9:09:d0:50:7b:7f:
b1:7a:24:8b:8c:67:8d:7d:ec:ce:e7:cd:4e:d4:e0:
af:4b:e6:bc:6c:82:9e:c1:b4:55:e3:71:11:f9:e9:
68:a7:e9:38:42:a7:28:ec:91:d8:9c:21:e4:f9:8b:
38:bc:6a:3e:97:66:f3:66:46:d8:5e:16:c0:d5:10:
45:72:8d:79:c0:42:4b:b9:91:05:75:ce:a1:30:e3:
0b:2c:9f:84:24:1c:08:13:85:45:ed:57:6b:0d:8c:
3c:a3:5f:0d:c4:73:e7:cb:2d:3a:fe:08:3e:63:b5:
18:8d:0a:6d:dd:84:3b:76:6d:74:81:8e:4b:fa:3e:
62:af:90:8b:75:aa:e7:e8:d8:58:77:26:9b:a6:76:
b2:9b:77:0f:22:f4:0b:3c:b7:18:94:d2:07:7d:20:
5f:d1:b4:f2:71:85:ba:90:85:4b:7b:16:e0:36:28:
e1:3a:4d:83:f7:82:59:8b:38:73:96:4f:32:c3:9e:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:EC:7F:97:65:BA:DB:DD:09:7D:16:30:E9:0B:7C:18:59:A7:87
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:02:8d:cd:57:8f:38:ff:ff:40:7a:c5:bc:f4:da:9c:bc:ee:
61:2b:fc:8e:1f:18:f9:22:7e:96:31:15:aa:1a:4d:b0:14:21:
57:fa:3c:f9:11:48:f9:7a:18:05:5e:e6:3e:9b:68:85:cd:25:
20:46:ca:c8:e9:74:ee:ac:77:1f:92:c3:0b:f3:ac:c6:44:7a:
54:6d:11:04:14:53:72:5b:e6:6a:e1:06:02:0a:82:62:ed:30:
a4:ea:52:e0:97:9a:d9:9f:bf:82:0c:a3:9a:f7:c1:f8:a4:c7:
a0:85:8d:04:4e:99:08:0a:b2:9b:37:94:6e:f0:89:ba:95:a3:
29:4c:ca:65:80:04:42:3d:6c:99:41:62:18:98:23:2c:f1:41:
ca:41:d5:c2:97:04:05:6e:9f:9d:a0:4d:eb:1d:a3:cf:dc:29:
15:bd:7b:f6:2c:96:0e:5f:ca:30:52:f2:35:99:fa:ec:03:e7:
a2:b0:47:c0:70:e0:31:a5:40:68:50:0a:91:d4:36:a0:97:de:
e6:34:38:64:dc:8e:3c:05:ae:dd:8f:15:b1:29:c7:74:d3:8b:
11:b2:de:ca:c6:f3:aa:8e:f5:82:24:31:9d:65:d0:30:67:93:
2c:3b:a8:40:a0:3d:45:90:ec:52:55:2b:3c:d7:a5:c9:76:55:
5b:6a:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:06 2025 by rpki-client