Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: 8l06BMLND+sE94tob3CV77u6yN3odyMhnbz1+O7eUtE=
Subject key identifier: 11:E9:11:52:0A:3E:01:67:0E:53:F4:0C:0F:82:3A:1D:09:B5:BE:C5
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 01988467BE27768800338D54A6F3295EC152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0BD1
Signing time: Thu 07 Aug 2025 12:00:47 +0000
Manifest this update: Thu 07 Aug 2025 12:00:47 +0000
Manifest next update: Fri 08 Aug 2025 12:00:47 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: qIwqJRWg2pjrq4Z0eNfeAAkNeSL5w2IuOYMxdMgapmY=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:67:be:27:76:88:00:33:8d:54:a6:f3:29:5e:c1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Aug 7 12:00:47 2025 GMT
Not After : Aug 8 12:00:47 2025 GMT
Subject: CN=11e911520a3e01670e53f40c0f823a1d09b5bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:54:dc:96:35:cb:38:ed:c2:30:68:b3:36:
23:33:e9:21:5b:a3:28:ce:cb:a2:f5:a0:65:b4:ae:
e6:cb:c3:90:74:8c:5d:e6:14:f5:0c:3e:b9:cd:85:
d1:2c:f3:b2:60:84:02:c2:bd:f3:3e:1f:89:0a:4a:
4e:ce:ff:ef:3c:e4:ad:8e:a5:34:f8:be:2d:73:c3:
bd:89:21:0b:5f:35:a9:1e:d6:f2:c5:ee:78:ff:1a:
61:b9:0f:72:27:84:41:4a:b8:2e:2b:d6:f5:8a:a0:
96:aa:f3:13:ac:ad:26:0a:19:d1:cc:bf:42:dd:f0:
f5:08:d3:fa:45:eb:d4:df:06:bd:88:4b:8d:1f:15:
fd:b6:a5:da:79:3c:0a:da:d7:38:89:f6:c7:9d:f3:
81:72:02:42:28:e0:89:32:87:78:5c:27:cd:cc:c4:
ee:36:31:9e:53:25:70:e8:0b:9d:21:37:34:65:db:
ae:6f:b3:99:d8:47:bb:16:e5:5b:70:a0:a8:16:39:
d7:26:14:3d:4d:98:c5:18:c6:0e:bc:e0:bd:06:8d:
8f:24:3f:59:14:0c:f2:a9:7c:88:dd:76:18:bf:e2:
b3:1f:4b:80:d4:fb:f3:e4:f2:2c:ec:87:2b:1a:26:
bb:bb:d4:e2:74:7a:44:e8:f6:61:ab:05:dc:67:b3:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:11:52:0A:3E:01:67:0E:53:F4:0C:0F:82:3A:1D:09:B5:BE:C5
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cd:6b:00:2e:3a:b1:06:cb:2b:b1:d0:83:bf:88:01:6f:c0:
1d:53:e5:c8:4a:6d:20:53:9c:69:70:90:c5:5f:16:6e:bd:60:
8f:99:82:54:24:99:21:79:56:64:c7:36:29:92:1b:3b:f6:f5:
05:13:0e:6f:35:78:78:d3:c3:b4:5f:cc:5c:20:59:2e:21:1d:
bc:e7:05:a1:a8:cb:76:a4:f4:c3:7d:3c:84:b7:16:8a:78:87:
95:2b:7c:c9:c9:92:7c:c6:49:95:63:4c:ee:1f:b5:1e:b9:0e:
df:9b:38:76:cd:dd:7f:6a:4a:2c:c1:9f:74:7f:5f:0d:09:ef:
0b:95:4e:37:6b:2d:c2:1e:6e:c5:a3:fb:fb:59:d1:e2:fb:30:
f9:11:e5:89:20:ed:94:65:23:60:bd:11:d9:4f:8b:f9:c0:fe:
75:f8:93:9b:ba:95:0e:d5:85:07:a7:89:a2:bb:62:8c:be:d5:
b5:ae:35:13:b1:3c:bd:da:55:c9:7a:e2:cc:30:26:5c:30:65:
d2:30:43:ed:ba:c0:da:d9:d5:13:dc:e4:f2:05:14:78:48:a2:
ff:f2:56:2c:f3:5b:99:4a:08:87:8d:1e:e2:3d:27:2b:4a:35:
c2:6d:78:b7:00:57:26:bd:fd:25:4b:bc:09:ec:5e:cf:70:dc:
3d:ea:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:49 2025 by rpki-client