
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: iFBzDHtiRXuc+9QIpTohqthKqeztdXfK3xzECf/9ACk=
Subject key identifier: 5C:1E:09:27:89:07:85:5B:20:1F:A5:E5:A3:49:5E:C5:08:8B:FE:08
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 01987374AD3B8231556E519B4F72BA3BEAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:01:23 +0000
Manifest this update: Mon 04 Aug 2025 05:01:23 +0000
Manifest next update: Tue 05 Aug 2025 05:01:23 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: Skd3mzGEDNisQwddwbV7Wx1XvwV7rEm/orxVkpR3GnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:ad:3b:82:31:55:6e:51:9b:4f:72:ba:3b:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Aug 4 05:01:23 2025 GMT
Not After : Aug 5 05:01:23 2025 GMT
Subject: CN=5c1e09278907855b201fa5e5a3495ec5088bfe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:92:36:7c:d4:58:2a:e1:ff:54:a4:52:b5:
f8:84:56:93:74:b7:c2:da:06:b7:b0:95:29:92:87:
00:56:4c:5a:c2:28:8a:35:f4:f2:e0:4c:37:f9:9a:
65:ce:8f:c6:2a:35:a7:18:21:22:ca:72:b6:e2:15:
d2:19:a8:5f:c0:df:88:f2:ab:53:c5:9e:f2:03:d4:
73:ec:37:28:65:29:2a:50:2c:c3:ce:3f:d9:0d:32:
a2:b7:20:6c:16:b3:d2:ba:79:40:ef:53:61:3d:d9:
f2:88:9b:fb:87:63:54:97:a4:a6:84:83:8c:d9:94:
cc:0e:96:41:91:11:f5:be:76:8c:69:aa:a6:e5:fb:
c0:35:0e:c7:35:be:9b:be:80:d9:00:ef:1f:15:15:
40:6a:17:12:47:5b:ab:c2:b9:cd:5e:8d:e1:ff:86:
df:9a:23:0f:1c:2b:89:ae:af:46:81:5d:f4:9e:dd:
bc:59:a8:fa:fd:37:17:f7:6a:65:14:b6:7a:15:36:
c6:55:02:8f:70:cf:06:d5:c1:f3:02:d6:f0:bb:86:
c7:d9:b6:9a:38:c2:8c:8e:02:ef:97:d6:05:0e:ec:
87:59:e9:b5:6e:64:95:99:2b:9e:b9:bc:70:a5:ec:
d0:f0:69:b4:c9:41:47:c5:87:c0:69:ee:49:44:9d:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:09:27:89:07:85:5B:20:1F:A5:E5:A3:49:5E:C5:08:8B:FE:08
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:a9:ae:d6:c1:d1:17:4a:b6:f1:cd:91:2b:1a:72:2a:8a:
a2:e9:a1:c1:9f:29:de:76:b0:25:4f:47:ab:52:75:87:a6:3c:
c3:e4:01:96:9e:85:3c:82:05:55:37:0b:67:95:e8:08:96:3c:
5a:b2:73:17:00:c9:c6:6d:2f:72:9a:5d:85:ba:1b:da:28:d5:
31:e9:7f:cc:ac:81:f0:b4:a8:6b:7d:95:fd:06:19:e1:39:fe:
1a:13:05:36:d3:7a:8e:08:07:43:68:f4:4c:a3:53:39:46:3e:
fc:58:b0:51:61:3a:c2:bb:94:0f:dc:71:81:32:c1:dc:f9:8a:
06:8d:8e:89:2b:d2:12:74:8b:44:82:a0:fa:94:67:39:f2:22:
c1:ef:83:0f:56:45:61:8d:32:9a:da:31:9d:94:df:a1:41:5c:
45:2f:42:41:6a:74:a8:2d:a7:c2:70:76:2c:bf:c7:40:ae:97:
bc:6e:ab:71:ee:ed:e0:2c:1f:2d:7f:83:79:62:5b:bf:6a:57:
4f:61:4e:b2:70:95:e4:0e:f2:97:19:e4:d0:ea:cc:48:0b:ef:
bf:44:aa:de:d8:81:f6:15:72:12:15:bb:d9:33:4d:e6:51:d3:
8b:65:41:15:1a:77:d8:1d:42:b1:a3:83:e4:7d:49:5d:f3:44:
35:d6:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:13 2025 by rpki-client